Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/4df2bcdf14b28d64822c78f1ebeea071089652e2.roa
File:                     4df2bcdf14b28d64822c78f1ebeea071089652e2.roa (raw, json)
Hash identifier:          HpIg6L7iN+vdNEhEpBiy1ZMN8RHcm/cIgrFKh5suAAs=
Subject key identifier:   68:D9:85:43:2A:32:12:D4:AA:09:7D:49:75:DB:D2:40:32:42:5D:92
Certificate issuer:       /CN=9db4a8f94f3e562910df373cae6e7f8c71e3feb0
Certificate serial:       0D89E1
Authority key identifier: 94:89:68:CD:7F:23:13:1F:D0:8C:73:E7:2E:D4:9B:F9:F0:EF:80:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/4df2bcdf14b28d64822c78f1ebeea071089652e2.roa
Signing time:             Wed 24 Mar 2021 14:39:24 +0000
ROA not before:           Wed 24 Mar 2021 14:39:24 +0000
ROA not after:            Tue 24 Mar 2026 14:39:24 +0000
asID:                     61468
IP address blocks:        192.188.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887265 (0xd89e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9db4a8f94f3e562910df373cae6e7f8c71e3feb0
        Validity
            Not Before: Mar 24 14:39:24 2021 GMT
            Not After : Mar 24 14:39:24 2026 GMT
        Subject: CN=4df2bcdf14b28d64822c78f1ebeea071089652e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:83:0b:bf:be:df:28:04:d6:d0:8d:61:17:
                    3d:f0:ef:1f:aa:77:bb:22:97:6b:34:f5:cf:07:82:
                    da:10:00:38:07:f0:0e:8a:9f:5c:73:ee:ef:5b:2b:
                    0b:69:80:6f:cf:c3:33:7a:a5:72:e7:4e:e2:0b:20:
                    a4:2b:cc:c6:05:5a:ad:14:62:63:da:7f:17:21:9f:
                    97:78:29:d4:ce:be:08:35:1b:21:e5:e1:75:51:a0:
                    86:fe:b6:72:d5:84:e3:07:98:41:2a:bf:fd:08:7a:
                    b6:d0:84:46:d4:8f:ca:d1:49:53:5d:2c:b9:fb:36:
                    05:93:60:46:49:28:15:3e:5d:f5:b9:bd:3d:c9:1b:
                    86:29:99:61:a0:1a:5a:47:54:f8:d9:fb:b8:d9:86:
                    ff:b4:9f:60:61:e3:66:b3:b9:85:90:25:01:db:e4:
                    48:e3:96:ab:80:9e:da:47:cf:7f:97:74:ce:d3:23:
                    dc:7f:72:57:52:3f:24:32:d9:05:d0:14:ae:57:64:
                    65:03:20:7a:bd:1a:99:ad:09:1a:aa:01:72:f1:84:
                    83:11:1b:98:52:61:f3:a9:67:bb:04:8d:c0:f3:ec:
                    6c:6b:95:54:ac:bb:84:45:20:df:e0:9d:10:0e:89:
                    d7:02:21:e9:cb:83:58:07:41:79:dc:9e:2f:cd:35:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D9:85:43:2A:32:12:D4:AA:09:7D:49:75:DB:D2:40:32:42:5D:92
            X509v3 Authority Key Identifier:
                keyid:94:89:68:CD:7F:23:13:1F:D0:8C:73:E7:2E:D4:9B:F9:F0:EF:80:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/4df2bcdf14b28d64822c78f1ebeea071089652e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:05:04:11:83:cd:e5:6d:af:e5:a4:88:f7:d2:01:c3:85:
         7b:47:7a:0b:d0:99:64:00:b4:dd:d6:c0:b4:43:89:2c:7b:c7:
         7f:e5:d4:7a:72:e9:e9:d6:2d:72:27:cc:c8:c0:67:38:e4:7f:
         2c:56:28:e0:58:48:68:49:82:4f:11:84:5f:3a:5b:9f:fd:5b:
         49:87:be:ae:64:ba:e7:03:55:82:7b:32:f9:ff:7f:7d:6d:f4:
         b9:94:65:8d:40:ad:6c:ad:a2:66:c6:30:a8:c9:82:22:17:19:
         9d:56:09:1e:b7:d5:21:df:48:e7:36:eb:62:28:12:f3:cf:d2:
         3a:c4:64:4e:ce:fc:15:2a:fa:b9:ab:05:aa:d8:e7:02:ff:b1:
         ea:ef:be:d9:91:e9:63:c5:4c:f8:4d:40:b4:29:f5:ee:96:c6:
         a1:c1:a5:6b:67:83:2b:e4:f4:a7:3f:61:bb:02:0e:ff:ac:2f:
         db:01:d5:20:0c:cf:9f:6d:99:38:f6:cc:3d:db:1d:de:20:80:
         09:5c:71:b4:30:fb:87:63:66:3d:56:ac:9c:5f:b4:1e:1d:65:
         43:f0:e0:6a:e9:43:4f:fa:1d:9e:dd:4e:05:c1:67:8a:de:2b:
         05:49:56:ff:a6:75:83:f3:64:a3:c8:65:c5:21:f4:d1:92:38:
         23:02:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org