Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64214751-df6e-4ebb-8c7f-3f2002954aee/841d644e89e138d4d74d07ee2dc3ed6a11b5421a.roa
File:                     841d644e89e138d4d74d07ee2dc3ed6a11b5421a.roa (raw, json)
Hash identifier:          A2JE66pE88PDWqSbPxDU5iJxUdzhA9XgIKDMs9KJpVg=
Subject key identifier:   C1:E8:84:42:FC:51:E3:CF:6B:CA:B4:B1:95:BB:93:59:C2:86:E2:D9
Certificate issuer:       /CN=595bee2139f920457eeb30e74206d9d6ec7aab29
Certificate serial:       0D898A
Authority key identifier: FF:99:2D:0F:D6:C6:D8:C4:B1:ED:D0:58:1E:C3:FF:2A:F7:9F:63:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/595bee2139f920457eeb30e74206d9d6ec7aab29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64214751-df6e-4ebb-8c7f-3f2002954aee/841d644e89e138d4d74d07ee2dc3ed6a11b5421a.roa
Signing time:             Wed 24 Mar 2021 14:41:37 +0000
ROA not before:           Wed 24 Mar 2021 14:41:36 +0000
ROA not after:            Tue 24 Mar 2026 14:41:36 +0000
asID:                     265745
IP address blocks:        128.201.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887178 (0xd898a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595bee2139f920457eeb30e74206d9d6ec7aab29
        Validity
            Not Before: Mar 24 14:41:36 2021 GMT
            Not After : Mar 24 14:41:36 2026 GMT
        Subject: CN=841d644e89e138d4d74d07ee2dc3ed6a11b5421a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5b:03:1e:82:5f:8e:72:ad:39:97:27:60:9a:
                    41:e3:fb:4e:bc:0a:c8:8c:4f:5e:f1:ac:98:a6:37:
                    85:3f:11:45:0f:a9:8a:78:25:41:76:a2:ee:d4:b9:
                    f8:e0:45:7b:6b:d5:17:b1:a1:e4:1b:e0:88:57:f5:
                    98:7f:1f:17:d6:29:ee:48:d4:59:65:76:22:02:40:
                    19:9c:8e:53:2b:62:e3:36:2a:ec:d5:6b:28:0a:49:
                    de:ad:5d:c8:40:2d:5c:dd:ad:1a:88:04:18:7d:c8:
                    e6:84:49:bf:b6:db:64:f2:bc:c0:b6:e2:6f:5f:65:
                    ee:02:e3:d0:19:eb:cc:46:29:e7:a9:e8:4c:83:e8:
                    e6:8f:a1:87:e7:6e:f9:f7:6a:72:28:86:a9:c6:32:
                    8a:a3:9f:19:34:65:23:45:d8:e4:aa:8f:cf:a5:59:
                    f5:54:a7:a3:70:9b:bd:00:76:41:ab:d4:9a:ae:55:
                    b5:9f:73:8d:18:a4:c2:4d:76:3a:f3:54:84:f0:41:
                    94:b0:20:e6:c9:92:e8:b3:c0:08:c7:fe:1e:e5:ea:
                    70:28:6e:8a:b5:33:36:8b:20:f6:1c:01:c5:e0:92:
                    d5:b5:63:62:6b:50:48:67:a3:75:81:d0:c0:da:a2:
                    b8:6f:67:1a:33:11:28:1c:98:ae:6c:4e:0c:bc:60:
                    ad:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E8:84:42:FC:51:E3:CF:6B:CA:B4:B1:95:BB:93:59:C2:86:E2:D9
            X509v3 Authority Key Identifier:
                keyid:FF:99:2D:0F:D6:C6:D8:C4:B1:ED:D0:58:1E:C3:FF:2A:F7:9F:63:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/595bee2139f920457eeb30e74206d9d6ec7aab29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64214751-df6e-4ebb-8c7f-3f2002954aee/841d644e89e138d4d74d07ee2dc3ed6a11b5421a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64214751-df6e-4ebb-8c7f-3f2002954aee/595bee2139f920457eeb30e74206d9d6ec7aab29.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:70:6d:67:76:56:a1:76:95:15:1d:55:b5:e6:ce:d2:60:79:
         93:fb:40:8a:5b:7e:e0:34:0c:a2:0e:ac:18:c1:93:0d:90:ab:
         9e:07:c7:e8:ef:29:b6:6d:37:81:8c:76:04:89:21:21:98:93:
         a2:19:e5:55:6b:25:83:51:7b:fb:c8:04:3c:8b:c9:1e:94:96:
         d9:ed:43:5c:90:49:88:83:ad:6a:24:66:61:c7:ab:26:e5:07:
         f4:71:9e:44:8a:f4:f2:92:b7:d0:2c:1c:fc:29:72:44:db:b6:
         06:a1:a0:97:67:8f:84:c9:3d:8b:08:7f:03:a1:b2:f8:4f:93:
         53:1b:a4:0d:b0:c0:f4:5c:56:43:32:6a:2f:5f:bc:c5:ea:57:
         c4:0c:68:72:dc:ba:ab:c6:49:dd:15:37:ce:8b:a8:c8:e8:d9:
         f4:24:57:91:c0:b9:73:b8:c5:07:f9:34:e9:af:21:97:39:64:
         7a:52:2a:76:c1:df:85:57:41:9c:51:cc:af:04:d9:cf:ab:a8:
         86:30:eb:fa:3e:ea:23:f0:96:ed:0b:49:92:79:bb:bd:c8:fc:
         e9:0e:4e:9b:28:ed:e9:28:8d:b1:13:a5:72:de:7a:ad:7c:1e:
         db:90:91:12:65:50:92:fd:8f:b4:10:2a:62:9b:ba:d8:f6:fd:
         a5:dc:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org