Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/704d8557-45f3-48d0-b3fd-0706c1139c38/b99473e28ea39743c5839a179c75fb0527c42abf.roa
File:                     b99473e28ea39743c5839a179c75fb0527c42abf.roa (raw, json)
Hash identifier:          v2oreI8bEPGwOREKv5dHN81g/BOdAiTBJtN1BO4iDfI=
Subject key identifier:   8F:B6:AE:F1:1B:69:E7:61:A6:04:DB:66:F5:06:7F:B0:2F:37:D6:F8
Certificate issuer:       /CN=983c7a1c6d682e269399f93e326b0b466b04fa64
Certificate serial:       05FF25
Authority key identifier: B1:D0:8F:AA:FC:42:75:A6:9C:03:A2:A9:14:E7:9A:2D:3C:25:6D:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/983c7a1c6d682e269399f93e326b0b466b04fa64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/704d8557-45f3-48d0-b3fd-0706c1139c38/b99473e28ea39743c5839a179c75fb0527c42abf.roa
Signing time:             Wed 24 Mar 2021 14:32:34 +0000
ROA not before:           Wed 24 Mar 2021 14:32:34 +0000
ROA not after:            Tue 24 Mar 2026 14:32:34 +0000
asID:                     263697
IP address blocks:        132.255.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392997 (0x5ff25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983c7a1c6d682e269399f93e326b0b466b04fa64
        Validity
            Not Before: Mar 24 14:32:34 2021 GMT
            Not After : Mar 24 14:32:34 2026 GMT
        Subject: CN=b99473e28ea39743c5839a179c75fb0527c42abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:a2:85:fe:c3:f2:1e:3d:1d:1c:d0:79:82:
                    2d:b9:bc:69:fb:9f:ce:ad:ad:fe:6d:df:8e:5a:25:
                    35:ed:d3:60:2b:78:3d:bc:9a:bb:f6:ab:0c:06:f2:
                    6d:28:5c:d4:90:9d:c2:20:56:80:32:0d:be:dd:44:
                    51:f5:55:60:4b:42:44:d0:b3:3c:83:f0:94:62:35:
                    a9:74:20:8b:dc:ed:2c:2e:40:01:12:55:34:06:82:
                    d5:cf:cb:46:30:20:ae:94:64:f7:71:99:44:24:a1:
                    f9:74:10:68:73:f1:03:2d:41:8c:5d:75:66:d8:11:
                    90:e0:d1:50:d2:c0:7e:01:8c:77:7e:58:c3:c7:40:
                    b1:b8:ec:8e:bc:0e:ab:2e:19:f7:13:d2:84:47:99:
                    55:2a:12:c2:e9:bb:d4:28:7f:d1:47:aa:a8:bd:10:
                    cb:5b:c2:00:a7:22:46:70:c3:c4:ca:70:b0:63:78:
                    6d:ae:18:e8:96:42:78:e2:da:f6:d8:27:fe:aa:17:
                    cb:26:10:83:f4:95:ee:f3:af:e4:22:68:09:be:f0:
                    82:de:d7:62:cd:8a:59:f3:67:3e:a2:e5:6e:6a:13:
                    87:2f:c6:45:74:23:35:d6:f6:83:0e:8f:46:18:90:
                    99:02:3d:39:1b:31:51:48:af:3f:b8:95:7d:3c:42:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:AE:F1:1B:69:E7:61:A6:04:DB:66:F5:06:7F:B0:2F:37:D6:F8
            X509v3 Authority Key Identifier:
                keyid:B1:D0:8F:AA:FC:42:75:A6:9C:03:A2:A9:14:E7:9A:2D:3C:25:6D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/983c7a1c6d682e269399f93e326b0b466b04fa64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/704d8557-45f3-48d0-b3fd-0706c1139c38/b99473e28ea39743c5839a179c75fb0527c42abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/704d8557-45f3-48d0-b3fd-0706c1139c38/983c7a1c6d682e269399f93e326b0b466b04fa64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d0:1b:6e:8d:5e:aa:a3:55:e7:76:be:38:75:86:ec:69:bb:
         bf:cc:b2:f1:e6:05:04:b1:39:35:4c:6f:66:69:60:16:0a:2e:
         ce:8c:a9:90:f7:e1:d1:24:0f:6f:3c:b7:59:01:07:3d:18:a0:
         fa:9a:0d:b7:24:87:3c:73:dd:b2:3c:1e:44:27:7b:55:c1:e9:
         a1:51:cb:31:6a:05:42:51:40:de:7f:87:d8:64:df:30:b8:bb:
         90:c3:bd:46:6d:6c:25:4f:c0:27:b3:7e:04:d3:b2:a9:63:84:
         dc:70:f6:ae:af:a2:21:6b:79:e7:e6:26:e5:83:86:fb:b7:49:
         53:d9:4d:20:38:11:72:7c:50:c9:3f:d4:41:33:5d:a6:b7:26:
         0e:a4:cf:68:64:b3:ca:37:92:86:af:87:02:05:c8:6b:e3:d5:
         61:af:b2:8a:56:3c:a5:dc:89:e6:65:86:f0:38:7e:ed:df:94:
         9a:5c:67:60:78:9f:ca:3c:e4:2d:c1:8f:32:34:39:2f:0d:3a:
         f2:49:c8:39:92:4d:eb:f6:6b:af:38:a4:43:9c:22:e5:5a:27:
         d0:71:75:2a:94:3b:9a:aa:87:7f:1e:89:2f:73:0a:02:fd:ed:
         45:a5:ad:ee:bc:35:6c:99:1d:66:2c:3d:3d:00:d0:5f:b6:3b:
         91:2b:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org