Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/ca1633a5bef8d2b3c319d6716e54aad13fda24fe.roa
File:                     ca1633a5bef8d2b3c319d6716e54aad13fda24fe.roa (raw, json)
Hash identifier:          y/ZBpXmw9iXXm0LrncAioaVCdUeNgJpt3fp1YBmt4JE=
Subject key identifier:   64:4E:D8:0D:FF:FD:A1:04:93:9C:62:C6:0F:13:D8:86:2A:74:4E:0B
Certificate issuer:       /CN=0355d87e3448f414f994660978ab87d5ff78b854
Certificate serial:       0BDFC7
Authority key identifier: 6A:1F:D0:83:9B:18:57:FD:1D:74:85:2A:20:CA:A9:34:39:E7:BA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0355d87e3448f414f994660978ab87d5ff78b854.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/ca1633a5bef8d2b3c319d6716e54aad13fda24fe.roa
Signing time:             Wed 24 Mar 2021 14:31:37 +0000
ROA not before:           Wed 24 Mar 2021 14:31:37 +0000
ROA not after:            Tue 24 Mar 2026 14:31:37 +0000
asID:                     52486
IP address blocks:        190.123.240.0/20 maxlen: 24
                          200.91.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778183 (0xbdfc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0355d87e3448f414f994660978ab87d5ff78b854
        Validity
            Not Before: Mar 24 14:31:37 2021 GMT
            Not After : Mar 24 14:31:37 2026 GMT
        Subject: CN=ca1633a5bef8d2b3c319d6716e54aad13fda24fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:4c:2a:21:75:72:67:7c:fd:87:5c:6f:f8:
                    8d:94:27:17:24:89:4f:f6:2a:92:c2:1d:c1:73:59:
                    81:ca:c2:95:1e:e8:e7:63:51:ac:18:59:ec:6c:f7:
                    bf:79:cc:7f:54:78:5d:9f:27:53:b8:81:5e:d2:d8:
                    9f:5d:0d:3e:25:5f:bf:c7:2f:79:ef:46:4d:bc:29:
                    82:86:80:f8:67:e2:20:4b:b3:eb:c1:81:3e:a2:41:
                    d0:47:2f:fe:7c:c7:98:d7:6f:9d:17:06:ec:49:38:
                    5f:e3:2b:9f:5e:1b:c9:9c:1e:2c:57:3c:7e:ab:73:
                    a1:ea:86:c0:4b:1e:21:0e:44:39:27:f4:9c:33:a3:
                    31:ce:8c:9b:4a:db:19:d9:16:16:1f:27:1d:94:39:
                    e1:3f:2a:53:85:17:f5:03:dd:83:09:1d:ba:d2:c6:
                    18:fe:4e:c4:87:9b:a0:ce:de:e1:f6:94:21:ed:37:
                    eb:32:91:3b:de:36:00:30:25:4b:66:d5:6f:3f:03:
                    f5:3a:21:50:ef:cc:19:e4:e0:38:c2:53:a5:a0:79:
                    a8:51:0d:ef:1c:57:ed:3c:2a:e3:91:df:b7:fd:bf:
                    d3:70:36:08:6e:1d:0d:e6:4c:4c:0b:84:3f:e6:11:
                    e3:55:56:4b:a4:3e:2c:63:31:f7:3d:1b:3b:37:76:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:D8:0D:FF:FD:A1:04:93:9C:62:C6:0F:13:D8:86:2A:74:4E:0B
            X509v3 Authority Key Identifier:
                keyid:6A:1F:D0:83:9B:18:57:FD:1D:74:85:2A:20:CA:A9:34:39:E7:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0355d87e3448f414f994660978ab87d5ff78b854.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/ca1633a5bef8d2b3c319d6716e54aad13fda24fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/0355d87e3448f414f994660978ab87d5ff78b854.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.240.0/20
                  200.91.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:5a:af:8e:42:49:89:70:7a:8f:3f:51:ea:22:b0:34:a7:0f:
         b7:42:36:e0:f6:ec:55:12:18:87:0b:4f:af:cb:45:c1:83:7a:
         94:1b:db:93:93:c9:6f:ed:f7:31:de:04:8e:0a:dd:fb:b0:3e:
         ea:5c:82:f9:92:f9:f4:09:dd:a4:fe:f1:5f:11:f6:9b:a6:dc:
         33:12:fc:59:b5:19:fe:f9:6e:41:1f:f8:3c:f3:eb:f1:90:e6:
         1d:18:90:07:b4:92:a8:6d:29:f8:ea:a8:94:97:90:9a:1b:66:
         47:19:ba:1b:13:44:a5:69:dc:bb:43:6a:c3:20:04:62:ad:d9:
         48:6f:29:c7:73:93:1c:57:d9:72:25:bc:6d:d3:c0:00:e5:b7:
         9e:15:d4:2b:0c:52:3e:99:c6:ab:73:66:a2:87:e1:ba:03:2c:
         15:84:89:d8:8f:1f:44:07:39:ad:c7:44:3f:9e:57:af:6c:5f:
         f4:9b:2e:6c:a9:3f:53:1a:81:97:b0:af:ed:46:f0:e5:84:00:
         30:d8:93:27:f1:12:42:0a:30:5e:97:fe:87:71:b7:2f:a1:c5:
         31:89:3a:67:77:d0:41:11:52:1a:c2:43:de:37:f9:b5:6a:79:
         ba:9c:fb:b2:60:d1:4f:a9:46:7c:63:c5:c2:69:0d:a0:b2:54:
         d3:d3:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org