Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/20154acb90507f45987fd245005bf50cc27638e2.roa
File:                     20154acb90507f45987fd245005bf50cc27638e2.roa (raw, json)
Hash identifier:          Xt4jUL17MLPmuG+QjrQtUdBwIA6b+euSKG0K4DoEQ1k=
Subject key identifier:   A2:AF:F9:E8:11:64:FA:61:DB:6C:C9:3D:B4:96:96:26:F8:84:57:30
Certificate issuer:       /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial:       0D189A
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/20154acb90507f45987fd245005bf50cc27638e2.roa
Signing time:             Wed 24 Mar 2021 14:28:35 +0000
ROA not before:           Wed 24 Mar 2021 14:28:35 +0000
ROA not after:            Tue 24 Mar 2026 14:28:35 +0000
asID:                     60781
IP address blocks:        190.105.193.0/24 maxlen: 24
                          190.105.195.0/24 maxlen: 24
                          190.121.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858266 (0xd189a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
        Validity
            Not Before: Mar 24 14:28:35 2021 GMT
            Not After : Mar 24 14:28:35 2026 GMT
        Subject: CN=20154acb90507f45987fd245005bf50cc27638e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:14:e8:d8:c9:24:e4:59:0c:c1:ff:21:32:
                    a9:64:ff:a8:a9:bc:0f:e9:b9:3a:a1:90:96:fd:3d:
                    41:52:a8:33:a9:2a:9f:e9:8d:51:ee:0c:74:a1:32:
                    9a:91:ee:aa:ca:f9:07:84:42:c0:9d:2e:c9:ef:57:
                    23:cf:f5:b2:57:ef:18:10:9e:5e:11:98:c2:90:76:
                    93:90:75:a4:39:78:84:cd:a8:c8:db:0f:07:98:46:
                    4f:7e:7c:23:37:f7:90:25:e4:2d:7f:27:08:11:58:
                    a4:b0:9e:20:94:bc:23:51:27:33:16:88:52:e6:fc:
                    be:ae:b9:da:87:ea:b3:84:0a:6d:69:17:fd:b0:b7:
                    f8:d1:c3:25:2f:51:ee:15:64:87:18:c0:34:01:5e:
                    22:c0:5f:ee:2d:c9:11:27:e3:74:12:ad:fa:9a:e8:
                    1b:d7:de:44:65:b5:24:36:04:ed:18:4c:37:c8:6c:
                    8e:51:f0:94:da:aa:06:1c:a7:57:1e:be:6d:28:e9:
                    cd:56:37:ab:58:88:c3:b2:ee:e1:1d:69:69:0b:5e:
                    de:6b:a6:8c:7c:f0:d0:9e:8d:08:d1:a0:58:fc:34:
                    1f:0d:40:90:0c:14:1a:c1:91:61:16:fd:85:2e:91:
                    30:c5:00:c2:8e:b9:5d:08:8d:09:5b:5f:f4:40:f2:
                    23:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AF:F9:E8:11:64:FA:61:DB:6C:C9:3D:B4:96:96:26:F8:84:57:30
            X509v3 Authority Key Identifier:
                keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/20154acb90507f45987fd245005bf50cc27638e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.193.0/24
                  190.105.195.0/24
                  190.121.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:dd:3c:29:84:59:9b:89:0f:3a:de:ee:35:8b:e4:29:75:32:
         d0:41:bb:d8:c5:1c:78:ae:04:2e:28:ae:1f:67:7c:54:4a:4f:
         a3:99:53:cd:72:51:8a:61:7c:6b:3f:c2:9c:d8:9b:f8:08:7e:
         89:6a:00:0d:35:15:62:52:63:51:b9:5f:a2:28:c6:fa:bd:fa:
         4d:7d:ea:50:c2:65:09:60:82:a2:a9:88:3a:40:61:c1:c4:fa:
         90:b7:06:11:04:13:79:c5:68:c7:ab:09:69:d1:3a:59:f7:da:
         52:86:ac:af:1c:57:ed:95:83:19:cc:bb:20:9a:36:38:87:59:
         4c:bd:50:c4:dc:2c:ad:12:ca:23:3d:a8:c5:6e:36:23:8f:b1:
         8e:43:80:5d:a4:82:66:6a:a5:1f:4c:6b:9d:dd:e6:d1:4d:3d:
         8b:f3:50:36:70:bb:f7:e8:b3:d9:45:16:40:31:88:c1:38:56:
         e9:28:71:c0:d0:84:af:7c:75:ea:c6:ba:ba:5f:40:9d:0e:35:
         a3:21:62:7e:36:0f:6e:35:c3:c6:23:21:b1:6e:ed:cf:bc:d6:
         69:22:39:2a:2a:37:ef:f2:68:4c:c6:51:86:0b:53:ee:0e:67:
         a9:30:df:8b:8d:8d:3a:12:69:a8:3e:7c:0c:a3:16:14:53:cd:
         55:7a:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 16:02:54 2024 by rpki-client on console-fra.rpki-client.org