Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/cbba61b62e2b1863eefc0ace636c98dadcb69f73.roa
File:                     cbba61b62e2b1863eefc0ace636c98dadcb69f73.roa (raw, json)
Hash identifier:          wrC6mE+71ww6Opn3f1i4OQ1L0PaQnTK76bZ1tqnwBgs=
Subject key identifier:   2A:43:FB:2E:A5:59:E8:A5:9D:D2:EE:F7:9B:A6:A3:2B:96:F5:72:E2
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E1AC1
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/cbba61b62e2b1863eefc0ace636c98dadcb69f73.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     23456
IP address blocks:        190.2.17.0/24 maxlen: 24
                          190.210.206.0/24 maxlen: 24
                          200.68.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924353 (0xe1ac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=cbba61b62e2b1863eefc0ace636c98dadcb69f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:d5:40:3d:96:0d:23:5a:b1:9f:61:37:aa:
                    77:36:70:a1:97:8c:2c:2e:30:e3:45:cd:a2:d9:1b:
                    3a:41:6c:bb:57:11:bf:e9:eb:cb:21:0b:85:70:39:
                    f1:5d:e8:0e:cf:7b:81:41:c0:c6:33:76:2f:5f:55:
                    ba:06:c2:db:87:fb:7f:e3:72:6d:9c:2f:1a:1c:f3:
                    d8:37:83:a7:e4:f0:8e:a5:31:16:6f:26:a9:13:39:
                    ac:ca:6e:c8:21:26:50:d8:b4:77:bb:13:89:85:2f:
                    7b:2a:e8:57:70:fd:df:31:fd:e9:3a:fa:26:a4:33:
                    19:70:6e:9d:a1:c6:e0:5d:63:35:8e:37:f1:65:7d:
                    b6:e2:21:d9:34:5a:5a:e6:37:f5:5b:76:97:ff:6d:
                    26:11:be:02:af:52:54:90:a7:9a:c8:d7:48:9f:10:
                    b3:12:dc:55:d4:a4:62:8c:94:4b:b1:19:ce:87:23:
                    63:6e:34:e2:83:fc:a1:85:da:6e:07:4d:81:dd:38:
                    b7:49:2f:01:0c:6e:5f:87:bf:fc:4c:4d:a1:a8:72:
                    cc:ef:25:c1:c4:a7:f1:3d:fb:65:94:e8:db:68:2a:
                    79:0c:c2:e7:c7:2d:6f:19:58:69:46:67:54:3b:0c:
                    f1:19:b3:c5:68:d5:3f:29:37:30:c6:71:66:6c:0a:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:FB:2E:A5:59:E8:A5:9D:D2:EE:F7:9B:A6:A3:2B:96:F5:72:E2
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/cbba61b62e2b1863eefc0ace636c98dadcb69f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.17.0/24
                  190.210.206.0/24
                  200.68.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:27:5a:a3:f4:03:ae:89:5a:48:7f:04:51:3f:6d:ba:35:
         ad:6c:d6:21:50:2f:7e:9e:05:a1:13:f0:17:bc:48:15:fa:a5:
         22:26:0f:f4:d1:40:5e:ee:53:a1:b5:16:a1:4c:99:d8:d1:28:
         5e:b0:fc:3d:76:0d:72:99:8f:95:1d:11:e4:e2:2a:8f:ee:da:
         9a:56:7d:5d:9d:e5:45:cf:94:60:40:af:c8:79:24:39:88:a3:
         b4:db:d5:88:fe:ae:69:1e:34:12:41:36:fb:11:68:7a:00:b3:
         48:d0:69:32:31:29:b1:88:e8:98:2d:f1:f7:38:8e:8a:08:9b:
         08:12:a2:71:af:67:bc:fb:99:5d:82:79:87:61:a6:6c:db:c1:
         2a:fe:3a:56:ad:c9:d6:94:ee:aa:b7:29:de:3b:0a:36:f9:8e:
         97:58:1a:f2:e1:1b:d1:ef:6a:f5:98:fa:fe:48:da:7c:03:ec:
         f5:de:47:b5:83:52:7c:4a:3d:9d:9b:b7:46:77:37:b4:17:f9:
         2f:ec:40:01:00:61:29:9b:72:6a:80:0b:04:75:b7:89:80:71:
         32:21:67:89:c2:0a:77:70:53:06:6f:31:65:eb:16:e6:42:1b:
         54:c2:ee:a7:0e:d1:e1:b1:56:54:b1:be:3b:b8:fb:8f:54:90:
         0e:31:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org