Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7830e4bc-3188-493e-8637-029c791e1e63/91286b924519cbe8e9e524ba004c2187ee8a19d7.roa
File:                     91286b924519cbe8e9e524ba004c2187ee8a19d7.roa (raw, json)
Hash identifier:          TQ7ZGkpSA8VtmYWr/ATBRFQbM+GAhSeUp/Y/73bYM+s=
Subject key identifier:   11:61:04:E0:3B:B9:83:F9:5A:6C:FB:BE:D6:51:7D:F3:52:A1:97:64
Certificate issuer:       /CN=a10a8b73fd213995d47d2eca2033b107bb07940a
Certificate serial:       0D5BFA
Authority key identifier: 5F:8F:9C:50:2C:1D:D8:45:4D:A2:0D:26:21:D8:4C:7A:F7:50:2C:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a10a8b73fd213995d47d2eca2033b107bb07940a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7830e4bc-3188-493e-8637-029c791e1e63/91286b924519cbe8e9e524ba004c2187ee8a19d7.roa
Signing time:             Wed 24 Mar 2021 14:32:44 +0000
ROA not before:           Wed 24 Mar 2021 14:32:44 +0000
ROA not after:            Tue 24 Mar 2026 14:32:44 +0000
asID:                     264781
IP address blocks:        168.197.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875514 (0xd5bfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a10a8b73fd213995d47d2eca2033b107bb07940a
        Validity
            Not Before: Mar 24 14:32:44 2021 GMT
            Not After : Mar 24 14:32:44 2026 GMT
        Subject: CN=91286b924519cbe8e9e524ba004c2187ee8a19d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:01:e7:46:46:dd:a1:c7:88:05:8a:29:60:
                    ac:e7:b3:7e:54:8f:f1:8d:17:39:04:23:0f:0e:bf:
                    7a:47:15:ba:d0:47:bf:15:3a:57:79:56:db:b5:91:
                    11:0f:1a:3e:3b:6f:d7:94:55:a6:96:28:6e:ee:73:
                    58:05:5a:aa:c8:14:bd:a6:35:ea:d2:d6:77:87:d8:
                    93:ae:7e:0d:4e:67:a0:bd:fe:98:6b:d3:88:93:ae:
                    17:8e:6c:be:a9:52:3e:7c:fa:87:ff:15:11:b1:e0:
                    f3:42:61:bb:ed:90:c9:84:d3:94:18:0a:1a:8e:d0:
                    3e:09:2c:02:ff:63:83:bc:4f:c2:c7:63:3d:e2:83:
                    a4:34:57:08:0b:2d:a1:01:bb:08:10:0a:58:47:1e:
                    a5:52:4c:89:af:4a:ad:b6:c3:b8:aa:2d:25:82:20:
                    22:42:6f:14:50:c9:7e:b4:ff:56:c5:83:7a:14:90:
                    56:24:8b:40:93:a7:90:90:db:a3:a6:22:13:5f:3f:
                    38:ee:8a:ea:10:1f:64:c5:d6:4f:2f:2d:a7:47:6e:
                    59:d6:fd:f1:e0:7f:9c:0c:68:84:08:04:4d:2a:d8:
                    dd:0b:6d:86:b8:07:34:dd:53:45:43:44:ab:3e:91:
                    9b:72:c8:1a:8c:59:09:ec:c5:7e:79:ad:07:4a:48:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:61:04:E0:3B:B9:83:F9:5A:6C:FB:BE:D6:51:7D:F3:52:A1:97:64
            X509v3 Authority Key Identifier:
                keyid:5F:8F:9C:50:2C:1D:D8:45:4D:A2:0D:26:21:D8:4C:7A:F7:50:2C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a10a8b73fd213995d47d2eca2033b107bb07940a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7830e4bc-3188-493e-8637-029c791e1e63/91286b924519cbe8e9e524ba004c2187ee8a19d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7830e4bc-3188-493e-8637-029c791e1e63/a10a8b73fd213995d47d2eca2033b107bb07940a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:05:a0:90:0d:1a:14:aa:ef:39:d5:2e:db:0c:4b:68:ac:60:
         d6:9d:09:5a:0e:85:c4:c3:13:71:6d:5e:67:2e:17:74:f9:75:
         3f:8f:f2:48:16:ba:39:ed:7d:fa:31:5d:0d:64:4a:44:58:f2:
         ba:73:4d:5d:e5:80:48:b5:e5:84:56:d9:e8:b3:d8:73:d9:ed:
         6b:e2:89:ec:ef:3b:9e:f2:a4:3a:09:ef:a9:b0:55:fb:16:24:
         ea:df:07:fa:1f:96:df:ae:b6:c5:31:86:b7:1d:0e:99:2b:c9:
         e9:21:cd:c3:90:ae:4f:2a:99:3d:53:f6:18:1a:83:af:9a:08:
         59:e6:a6:2b:4a:dd:48:f3:95:91:2f:82:2a:03:68:1d:6f:2c:
         ba:f8:42:b4:d7:6f:63:54:ed:d2:47:8b:fc:07:72:0c:41:e4:
         c9:75:78:39:3c:83:17:5d:98:58:7b:ab:81:29:35:73:a2:48:
         76:ef:63:b9:cd:62:8c:8f:c9:4a:be:db:27:0e:29:a8:43:ec:
         7b:5f:9f:44:ee:27:f7:39:5e:d2:70:78:ed:1f:a9:75:51:de:
         0d:b0:d1:82:c1:b0:b6:f8:17:23:4b:87:d5:14:25:15:ef:fb:
         a9:56:d3:27:9f:94:a5:63:e5:19:64:69:2f:fe:13:53:1c:1f:
         7a:31:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org