Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/c5796b905c769d232931aad47e7ab4be2edb21fe.roa
File:                     c5796b905c769d232931aad47e7ab4be2edb21fe.roa (raw, json)
Hash identifier:          kr0jcB4jvv0mOGYsUJXJbtkNUbGb/0JfdULxySOSNDg=
Subject key identifier:   AF:2E:D0:2E:76:68:7F:02:A4:1E:2C:52:3E:08:33:20:5A:88:82:56
Certificate issuer:       /CN=e0570a0eb0a8dba45212b35153e2892214274417
Certificate serial:       0CC7C0
Authority key identifier: C3:12:E4:39:E2:A3:64:74:97:AF:33:7C:A7:F7:D9:54:6B:12:3B:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0570a0eb0a8dba45212b35153e2892214274417.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/c5796b905c769d232931aad47e7ab4be2edb21fe.roa
Signing time:             Wed 24 Mar 2021 14:40:03 +0000
ROA not before:           Wed 24 Mar 2021 14:40:03 +0000
ROA not after:            Tue 24 Mar 2026 14:40:03 +0000
asID:                     61468
IP address blocks:        192.188.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837568 (0xcc7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0570a0eb0a8dba45212b35153e2892214274417
        Validity
            Not Before: Mar 24 14:40:03 2021 GMT
            Not After : Mar 24 14:40:03 2026 GMT
        Subject: CN=c5796b905c769d232931aad47e7ab4be2edb21fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:18:50:31:ce:b3:16:4c:ba:d4:13:5f:50:
                    66:e0:c1:57:33:72:d2:99:09:f2:d9:5d:fb:f4:9a:
                    7b:86:d5:b0:a4:ee:44:08:aa:ae:e0:46:10:0e:c2:
                    13:bd:37:d2:93:34:5e:4a:a1:32:96:19:40:1d:c7:
                    03:8a:36:c3:cf:1e:e0:1a:f1:b6:9a:de:7e:85:19:
                    4b:23:e6:f0:5d:b3:61:61:e0:7b:16:6a:6f:86:62:
                    08:4d:48:61:00:ee:67:ff:71:e5:0a:26:1c:1a:25:
                    3c:ec:88:3f:1b:9f:b1:e2:21:e8:95:12:55:a6:49:
                    ba:91:9e:06:6e:d4:54:8e:f0:aa:4d:86:a2:0c:d8:
                    3c:25:33:9f:a9:a2:bc:d5:f0:33:cf:b1:05:c3:cc:
                    f0:b9:7c:e3:4d:d5:e8:c4:6c:a5:a6:4a:35:5d:ad:
                    11:fd:2e:9e:b7:f5:ee:e7:75:e6:29:51:bd:c3:3b:
                    b9:31:e1:54:be:c3:52:e7:43:77:07:46:37:7e:34:
                    1b:e7:93:6c:f3:03:5c:fa:66:36:f6:fa:a3:4a:a2:
                    79:3c:23:37:9c:00:45:65:fb:2c:af:e6:e0:26:41:
                    55:d3:b8:7d:04:24:09:9a:7b:ae:3e:c1:b9:d9:36:
                    e6:4f:a3:a9:4c:4d:97:16:1c:20:99:fd:0b:ac:d0:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2E:D0:2E:76:68:7F:02:A4:1E:2C:52:3E:08:33:20:5A:88:82:56
            X509v3 Authority Key Identifier:
                keyid:C3:12:E4:39:E2:A3:64:74:97:AF:33:7C:A7:F7:D9:54:6B:12:3B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0570a0eb0a8dba45212b35153e2892214274417.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/c5796b905c769d232931aad47e7ab4be2edb21fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/e0570a0eb0a8dba45212b35153e2892214274417.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:60:81:d0:80:9d:99:af:8d:70:f3:d7:15:a2:9f:27:f7:df:
         05:2e:83:a9:8b:ba:f2:4d:40:bc:1a:f7:b1:33:ee:a5:7c:f7:
         97:bc:c5:4f:79:7b:67:dc:cd:42:2f:40:38:5a:d2:d5:47:ba:
         aa:1f:5f:88:ee:05:04:b6:e2:a9:c5:f0:70:af:72:3c:03:af:
         f9:4c:1c:0d:e0:f7:42:8f:f4:94:6c:02:96:d6:90:68:62:8a:
         5c:29:3a:a3:dc:81:ad:45:a3:a6:11:7b:d7:3b:c1:66:a8:5a:
         a5:a2:dc:2b:40:7e:1f:50:a4:4a:bf:78:6e:02:1a:51:8a:0b:
         d5:63:23:17:2d:46:39:00:34:80:81:33:5f:63:fa:72:c2:3c:
         ab:56:59:89:32:44:f3:d9:a8:84:f8:b6:37:1d:fe:8b:c8:43:
         81:13:0d:21:2c:11:10:0d:81:da:e8:96:ea:0f:72:f9:c3:04:
         8f:af:85:73:13:e1:e1:b3:63:69:01:e0:7b:a7:f3:c2:c6:98:
         6d:a0:72:83:f2:ee:cf:2c:45:6c:25:5f:f2:e7:f6:51:d0:c8:
         40:aa:05:e9:bf:8f:de:c0:f3:a4:12:b5:90:57:46:7a:4e:49:
         7e:da:19:93:1c:fc:54:c8:f8:32:69:65:5a:8f:50:6d:10:e0:
         23:0b:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org