Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6285f427ae217ddfbbedcddbfb619c592d14e5a7.roa
File:                     6285f427ae217ddfbbedcddbfb619c592d14e5a7.roa (raw, json)
Hash identifier:          iApojWLKeQoFhwZCWzxdqEmlv1ALZjEf9K4TKfuvnWs=
Subject key identifier:   28:27:0E:5B:CE:CA:6D:F6:3C:73:FD:65:74:87:88:49:25:85:0D:97
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       0D7A7D
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6285f427ae217ddfbbedcddbfb619c592d14e5a7.roa
Signing time:             Wed 24 Mar 2021 14:34:52 +0000
ROA not before:           Wed 24 Mar 2021 14:34:51 +0000
ROA not after:            Tue 24 Mar 2026 14:34:51 +0000
asID:                     52262
IP address blocks:        190.242.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883325 (0xd7a7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Mar 24 14:34:51 2021 GMT
            Not After : Mar 24 14:34:51 2026 GMT
        Subject: CN=6285f427ae217ddfbbedcddbfb619c592d14e5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:34:96:63:e0:ee:7e:b7:06:a8:09:ef:1c:
                    c9:6c:78:e1:be:76:57:8e:5c:ea:61:a7:25:ad:17:
                    52:0b:bd:60:17:3a:dc:84:97:95:fd:a0:8d:3a:d2:
                    85:08:32:c3:8f:fb:22:bc:79:7b:71:60:d6:ba:6c:
                    e2:28:83:96:0e:84:4b:e6:09:53:c0:75:9c:69:63:
                    87:1b:50:cb:22:2c:a4:f5:80:c6:55:44:fd:25:b5:
                    4e:e2:72:c0:bf:c1:86:0b:35:d4:c6:07:60:26:e4:
                    7d:65:d2:2e:7c:d1:37:98:a5:32:8c:5c:8c:d1:99:
                    53:a0:f8:1d:25:6a:bc:15:b3:0f:56:0e:f8:18:97:
                    42:91:c6:11:c2:4f:15:bf:7a:5b:be:43:ce:b7:2d:
                    2a:bf:83:5a:c4:cd:01:63:ad:ac:5b:0a:c9:4d:b4:
                    52:3e:6e:f2:66:37:97:73:0b:e7:d6:52:89:29:81:
                    cd:04:66:f8:39:f7:c3:67:f7:4a:fe:3e:ae:36:95:
                    51:11:22:af:f9:cb:dc:7f:3e:da:4f:f9:96:dd:6e:
                    97:8b:71:b7:bf:e0:5f:88:ef:80:78:6e:2c:f0:f0:
                    ea:3f:f4:ca:a0:3b:a1:87:a4:48:11:db:68:be:29:
                    b5:7e:f8:32:c1:e4:19:57:6a:c4:77:16:6a:fe:15:
                    6e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:27:0E:5B:CE:CA:6D:F6:3C:73:FD:65:74:87:88:49:25:85:0D:97
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6285f427ae217ddfbbedcddbfb619c592d14e5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:e8:97:38:fc:10:ee:d3:f5:47:57:7b:90:66:bd:06:b2:97:
         d3:ed:3a:27:1e:25:1a:1f:8c:c4:ee:92:7b:99:01:e6:e5:8f:
         56:a5:6f:df:2c:7c:4b:f9:4e:86:d7:eb:c9:57:b6:ca:fb:5c:
         4e:0f:f0:22:d8:95:e5:65:b4:ae:2e:14:b8:bd:32:93:59:00:
         aa:11:a5:0a:65:d7:90:52:ba:ca:22:8e:8d:30:a3:16:b7:08:
         06:df:8c:71:45:9d:a3:6d:22:ab:ef:2e:f0:88:78:a9:5e:b6:
         32:f1:5d:87:04:d9:62:7d:0e:79:aa:56:d2:71:0a:3f:08:da:
         39:9d:ff:33:91:20:64:5d:a2:4a:9b:d4:46:15:f3:16:e8:fd:
         37:b1:9b:1c:e4:54:53:f3:0c:14:55:23:fd:d3:20:11:92:ed:
         6a:60:53:e6:5f:2f:c8:df:bb:b0:67:b0:85:dd:c3:cc:35:d8:
         fe:2c:b1:5b:76:61:42:20:8c:5f:54:1b:8f:d1:1e:84:e6:c9:
         7c:3e:9a:a4:39:6b:ae:45:dc:bb:88:09:77:2e:8d:bd:09:d0:
         4a:6b:2f:20:14:6a:bb:91:7d:16:32:dc:f9:4b:cc:7c:c9:72:
         08:f7:81:55:a0:d4:4c:06:48:7b:54:30:44:27:a4:dd:e7:c6:
         16:93:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org