Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/7e7c3b8bdcac6692b1f2242e8802e4a9230b47d3.roa
File:                     7e7c3b8bdcac6692b1f2242e8802e4a9230b47d3.roa (raw, json)
Hash identifier:          DkpxSd72jhN9IuSISUn3IqgnHwjrP7bYiNqzqyOLi1A=
Subject key identifier:   2E:30:26:77:04:26:B9:10:01:53:A8:6A:B8:54:B8:92:10:E8:AC:A1
Certificate issuer:       /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial:       0D1C91
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/7e7c3b8bdcac6692b1f2242e8802e4a9230b47d3.roa
Signing time:             Wed 24 Mar 2021 14:28:36 +0000
ROA not before:           Wed 24 Mar 2021 14:28:35 +0000
ROA not after:            Tue 24 Mar 2026 14:28:35 +0000
asID:                     36351
IP address blocks:        190.105.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859281 (0xd1c91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
        Validity
            Not Before: Mar 24 14:28:35 2021 GMT
            Not After : Mar 24 14:28:35 2026 GMT
        Subject: CN=7e7c3b8bdcac6692b1f2242e8802e4a9230b47d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:42:cc:27:88:d0:e6:14:15:b2:1d:29:20:
                    6e:45:01:29:e2:bf:e6:43:5c:d7:f3:4d:92:cc:52:
                    3b:88:5b:62:dd:b9:7a:0f:51:6b:06:14:3f:7f:ef:
                    95:37:61:6f:d7:66:c8:e7:65:41:9e:bb:b8:18:61:
                    49:a9:65:7a:74:da:e0:00:98:b8:51:e5:59:67:6e:
                    9c:22:01:f5:3a:9d:5f:fc:83:2e:e9:1c:b2:d5:6f:
                    70:3e:f7:f9:a4:44:9f:ca:79:db:51:53:6b:d6:15:
                    ba:15:3f:04:61:8c:7d:27:97:17:f3:43:53:c6:03:
                    b3:4e:9d:5c:46:02:68:40:2f:63:73:39:02:e9:3f:
                    e1:fd:96:1a:b0:af:d0:44:20:61:fb:78:61:0a:94:
                    8b:00:6a:a5:0b:23:14:d0:3d:7f:0f:c7:68:be:1c:
                    ab:1c:b5:47:39:c8:62:18:44:a1:7c:5f:46:eb:eb:
                    39:cc:65:5d:1f:97:bb:da:55:83:5b:37:47:98:6b:
                    80:61:92:67:54:6c:1a:9d:da:1c:92:2a:f4:f3:f5:
                    07:6b:dc:94:58:95:87:21:24:0c:36:62:08:21:d6:
                    c6:8f:52:aa:93:ee:09:fc:f5:a6:ba:4c:28:a8:5f:
                    50:96:0f:5f:c9:b6:a2:3e:aa:5e:71:10:b0:99:fc:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:30:26:77:04:26:B9:10:01:53:A8:6A:B8:54:B8:92:10:E8:AC:A1
            X509v3 Authority Key Identifier:
                keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/7e7c3b8bdcac6692b1f2242e8802e4a9230b47d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:0f:22:8b:01:6d:e0:f2:44:80:3c:bd:cd:21:76:bd:69:
         11:ac:0d:89:ca:45:fc:16:1f:d8:a0:f3:2e:b8:a6:b4:37:36:
         d2:24:e1:f7:d3:35:4c:6e:0c:10:22:3a:6a:22:72:6e:a6:86:
         3d:4a:59:26:f1:c1:d3:22:3d:e2:79:9f:38:d0:3c:31:86:bc:
         43:ae:5a:90:c8:ad:78:a5:81:2d:0f:26:41:62:dd:0f:6e:44:
         eb:ec:40:9a:f1:02:fe:86:a0:a9:84:17:4e:4a:7f:d7:e9:49:
         49:e3:d9:fa:fd:e2:a4:36:b7:63:2f:f2:73:fb:55:8b:a5:07:
         df:ce:c4:3c:81:e9:78:6d:e6:30:78:f1:57:38:ad:d4:1c:fe:
         3c:36:e7:ff:ca:80:c3:63:08:fd:0e:e0:78:e7:e5:c7:80:83:
         27:d9:a5:bd:95:9d:15:1c:24:bc:8f:ab:c0:23:7f:e1:2f:f6:
         5c:eb:85:79:db:dd:bc:18:02:80:4b:62:56:a5:ee:9c:07:81:
         42:4d:8c:d3:74:f4:6a:47:13:9c:1b:25:f0:28:38:a7:30:fc:
         0c:46:bf:61:00:b2:6a:9c:92:7d:f9:e7:a4:02:81:5e:b9:5d:
         db:f7:d8:9f:50:71:f3:17:23:dc:f7:96:ec:3a:76:e3:5d:f3:
         44:1d:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 15:15:01 2024 by rpki-client on console-ams.rpki-client.org