Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685c948a-4560-402e-9d7b-5296445a8e5e/72d0baf45610036bd6297c648692544a79db361d.roa
File:                     72d0baf45610036bd6297c648692544a79db361d.roa (raw, json)
Hash identifier:          lSoHvkExeBKaUO7Dv+dWs9wHapCJiGk3dYc5qdd7H70=
Subject key identifier:   6F:5B:BC:F3:36:09:DF:4C:58:3A:C4:2C:DD:C1:80:5D:37:F6:A9:78
Certificate issuer:       /CN=b21ee0ea85ed3c058fccf65e0f50e134186cadc9
Certificate serial:       04B46D
Authority key identifier: 6A:C5:CB:7D:9D:0A:1A:BD:DE:55:0D:3A:18:2E:05:DD:8B:4C:71:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685c948a-4560-402e-9d7b-5296445a8e5e/72d0baf45610036bd6297c648692544a79db361d.roa
Signing time:             Wed 24 Mar 2021 14:35:32 +0000
ROA not before:           Wed 24 Mar 2021 14:35:31 +0000
ROA not after:            Tue 24 Mar 2026 14:35:31 +0000
asID:                     269990
IP address blocks:        187.73.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308333 (0x4b46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b21ee0ea85ed3c058fccf65e0f50e134186cadc9
        Validity
            Not Before: Mar 24 14:35:31 2021 GMT
            Not After : Mar 24 14:35:31 2026 GMT
        Subject: CN=72d0baf45610036bd6297c648692544a79db361d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:41:90:e0:c7:07:c1:01:83:bf:ce:18:01:
                    0c:bc:2a:98:30:cc:97:86:51:e2:ba:49:2a:2b:05:
                    dc:a8:13:70:c8:f2:83:32:4d:b8:41:b8:20:b4:e7:
                    3b:a3:76:c1:d5:9e:d1:63:40:28:32:4c:92:74:d3:
                    75:4a:00:51:9d:d9:19:83:9d:5b:bb:8b:48:82:78:
                    af:70:70:9c:a8:6b:a0:df:6d:96:5d:5a:e5:ab:1b:
                    97:f2:1f:14:37:5e:dd:82:3d:e6:63:c8:ff:5d:52:
                    e8:4b:51:7e:7c:8a:c5:22:44:e2:1d:f2:65:56:61:
                    ae:4f:7c:a0:34:5b:5c:e0:84:70:ac:28:6a:19:7f:
                    9b:21:33:47:34:a1:5a:78:1d:17:6b:ea:46:4f:b4:
                    ee:7a:a5:3c:5b:58:7a:13:71:0e:1f:7d:7b:b1:05:
                    62:30:96:44:dc:ce:d6:27:80:57:9d:36:49:56:b6:
                    a8:05:83:8a:6a:76:40:a0:04:69:d2:f7:b1:53:a9:
                    8c:08:2d:6e:7e:48:d2:fc:69:91:32:e0:33:ee:48:
                    5f:79:12:69:19:8b:30:6e:c0:80:41:b4:40:db:c0:
                    8d:50:3c:8e:1f:59:5e:4e:0b:87:67:31:71:73:e7:
                    3c:5b:ad:39:e3:7d:51:88:ce:c6:70:f3:56:9c:57:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:BC:F3:36:09:DF:4C:58:3A:C4:2C:DD:C1:80:5D:37:F6:A9:78
            X509v3 Authority Key Identifier:
                keyid:6A:C5:CB:7D:9D:0A:1A:BD:DE:55:0D:3A:18:2E:05:DD:8B:4C:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685c948a-4560-402e-9d7b-5296445a8e5e/72d0baf45610036bd6297c648692544a79db361d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685c948a-4560-402e-9d7b-5296445a8e5e/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:57:60:bd:f3:be:8e:fa:3a:4e:ef:91:3c:5d:0d:fa:cd:cb:
         43:7d:e8:8d:46:97:b9:75:f6:e4:32:e6:4b:36:80:37:57:aa:
         c2:a5:16:9f:16:f2:96:8a:46:b4:7e:b1:08:9e:26:be:d4:9f:
         22:10:75:4e:95:98:5a:1f:59:da:73:f1:bb:d6:22:64:bd:d9:
         17:56:3d:69:b5:b0:10:22:6d:d0:ec:5c:48:ff:22:05:36:af:
         33:80:a3:7a:2c:26:31:cb:0b:6a:29:aa:93:73:04:55:4e:3e:
         83:85:87:81:de:df:4e:33:44:8d:47:41:1d:a8:ed:2d:b7:d7:
         dd:a2:a8:de:02:2c:9b:d3:69:e8:1b:3b:1e:f5:3d:c8:fb:68:
         06:05:29:68:a4:7a:8c:11:43:d3:0e:67:27:d9:53:b7:f6:1a:
         3e:66:f4:7f:ad:16:a5:88:83:e3:76:f7:13:be:0c:60:9c:6c:
         f1:75:ea:0b:3d:45:f2:b6:d7:32:bc:bc:c3:80:34:53:b3:0a:
         dc:15:1c:4d:3c:44:02:ff:ca:a9:b1:70:ca:ba:91:1a:c1:5c:
         05:94:63:11:ba:63:b3:71:e2:12:fe:d8:25:ee:84:05:f6:62:
         cc:b0:40:cd:9a:0d:e0:46:3f:a3:5d:c6:fb:a3:c5:80:bb:10:
         b2:4f:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org