Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/54176090621eca38a44bc2cb8f8bc55f64c79d49.roa
File:                     54176090621eca38a44bc2cb8f8bc55f64c79d49.roa (raw, json)
Hash identifier:          FqDyhavc1nS2bHoGbvgSedJwiPtcrrq0baRNQsZrKxo=
Subject key identifier:   26:91:B2:0A:7E:30:30:D7:DB:2D:6A:89:13:9E:4A:05:33:F6:43:9F
Certificate issuer:       /CN=9db4a8f94f3e562910df373cae6e7f8c71e3feb0
Certificate serial:       0D8BF7
Authority key identifier: 94:89:68:CD:7F:23:13:1F:D0:8C:73:E7:2E:D4:9B:F9:F0:EF:80:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/54176090621eca38a44bc2cb8f8bc55f64c79d49.roa
Signing time:             Wed 24 Mar 2021 14:39:24 +0000
ROA not before:           Wed 24 Mar 2021 14:39:24 +0000
ROA not after:            Tue 24 Mar 2026 14:39:24 +0000
asID:                     27947
IP address blocks:        192.188.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887799 (0xd8bf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9db4a8f94f3e562910df373cae6e7f8c71e3feb0
        Validity
            Not Before: Mar 24 14:39:24 2021 GMT
            Not After : Mar 24 14:39:24 2026 GMT
        Subject: CN=54176090621eca38a44bc2cb8f8bc55f64c79d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:c7:92:ef:8e:dc:cb:b4:22:a4:0b:08:e1:
                    a3:5e:b4:d9:6f:80:5a:a4:4e:68:80:b6:06:8b:db:
                    2d:46:10:7f:70:ff:0e:d9:3e:6e:3e:cd:79:15:10:
                    0c:0d:0e:e6:e2:00:60:90:80:f4:2e:c5:b3:3e:87:
                    cf:bf:a1:aa:59:85:9f:33:77:f0:21:83:6e:cb:3f:
                    d0:19:93:3d:7b:ad:c3:aa:ad:3f:1a:87:4d:1e:b5:
                    0b:75:3f:ec:b0:2e:a8:9d:65:b4:6c:c3:04:5e:ac:
                    2c:31:13:93:dd:69:8d:a9:f7:ec:42:84:dd:b9:c5:
                    10:c3:4c:42:e7:41:f9:67:93:eb:8e:c3:b5:18:df:
                    83:f7:ba:13:31:73:b4:6b:8c:99:ea:26:93:29:be:
                    90:03:76:46:14:33:1c:fb:2e:b8:f5:77:be:fa:ac:
                    09:70:3c:a4:ce:af:72:e1:4e:99:d4:69:d6:56:0c:
                    e1:5c:fb:3b:fe:e2:88:c9:6c:49:5b:1b:38:b0:48:
                    d7:07:e2:eb:79:15:f0:9a:f5:d8:4c:51:e9:13:94:
                    2e:c1:fe:b1:fc:90:e6:89:10:f5:61:ad:12:83:96:
                    d9:31:92:55:63:15:80:23:4a:07:dc:3f:cb:c8:e2:
                    35:16:29:1b:d2:6a:c3:91:56:20:29:7c:4f:d8:93:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:91:B2:0A:7E:30:30:D7:DB:2D:6A:89:13:9E:4A:05:33:F6:43:9F
            X509v3 Authority Key Identifier:
                keyid:94:89:68:CD:7F:23:13:1F:D0:8C:73:E7:2E:D4:9B:F9:F0:EF:80:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/54176090621eca38a44bc2cb8f8bc55f64c79d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6aa87700-3d14-4fea-af95-207bd7f22fd7/9db4a8f94f3e562910df373cae6e7f8c71e3feb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:78:95:50:00:9c:ea:a8:9f:60:b4:d9:36:53:f8:3d:75:57:
         0d:d5:2f:9c:c1:bf:61:1d:40:29:18:1d:43:cc:10:14:cd:4f:
         77:a5:e4:b3:59:04:67:ab:3c:90:9e:b2:92:64:dd:da:53:11:
         7b:fd:c4:94:73:17:5a:1b:4d:e4:71:4e:4d:f8:f9:a8:e1:86:
         77:1e:e4:bb:51:93:e9:54:f5:fa:8b:11:08:51:00:c1:bf:0b:
         2f:95:72:cd:ff:d9:b1:f2:6a:6b:22:5a:e2:7a:11:7a:56:3f:
         44:d5:8a:bb:e8:b3:b0:84:ca:8f:6e:45:dd:09:e9:65:cb:8e:
         0a:e1:37:c8:7f:9a:7d:ed:4d:30:9f:1b:45:b2:79:e5:f9:e0:
         3f:35:e5:ae:ff:88:87:e8:e8:3b:16:f8:ec:65:a0:63:1c:91:
         53:d9:88:3d:40:82:c3:1f:88:c9:75:15:84:31:65:6f:fa:ce:
         1e:03:82:45:30:dc:51:33:c8:42:13:fe:ed:0c:d3:56:a2:de:
         6c:6b:75:aa:7d:8d:4e:1c:0b:27:1b:c0:81:04:79:67:da:01:
         7c:20:a4:4d:4d:b0:ce:72:ca:29:dc:e8:60:d4:64:2f:c4:b0:
         16:9b:d3:94:09:38:ba:e7:76:3d:9f:ff:a3:67:db:00:fa:7d:
         0d:8d:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org