Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/3b01a6a027dba0e473a9fea342041986a6771eb0.roa
File:                     3b01a6a027dba0e473a9fea342041986a6771eb0.roa (raw, json)
Hash identifier:          Z1LpYggH0BrREFnxrvtcx/Vs+wGOd3gyQAlwFML2vdI=
Subject key identifier:   1C:3A:C3:A3:F6:0E:C7:DB:6E:A0:B2:85:9D:AB:6F:74:A8:0B:14:B9
Certificate issuer:       /CN=24dd0c2e45ab4767cf1938370eb67d9303fc8de7
Certificate serial:       0C819F
Authority key identifier: 05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/3b01a6a027dba0e473a9fea342041986a6771eb0.roa
Signing time:             Wed 24 Mar 2021 14:38:17 +0000
ROA not before:           Wed 24 Mar 2021 14:38:17 +0000
ROA not after:            Tue 24 Mar 2026 14:38:17 +0000
asID:                     28053
IP address blocks:        190.52.224.0/20 maxlen: 24
                          190.52.240.0/20 maxlen: 24
                          200.89.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819615 (0xc819f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24dd0c2e45ab4767cf1938370eb67d9303fc8de7
        Validity
            Not Before: Mar 24 14:38:17 2021 GMT
            Not After : Mar 24 14:38:17 2026 GMT
        Subject: CN=3b01a6a027dba0e473a9fea342041986a6771eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:0e:a6:f6:2c:f9:71:82:1e:68:c5:6e:19:
                    75:91:67:fa:2d:3e:4c:7a:94:40:44:93:2c:ea:e9:
                    d0:d4:b9:09:86:ee:4f:4f:32:81:d0:bb:c4:13:b0:
                    fc:c4:71:a6:fb:39:dd:9c:ef:dc:f1:2e:53:c2:bf:
                    01:54:df:79:6e:df:3a:d2:61:79:d4:3c:4e:4c:52:
                    fb:bc:fc:20:50:d7:c1:a3:2e:63:eb:36:43:67:71:
                    f4:f7:2e:78:41:5f:22:f3:d5:25:f3:f1:8b:d9:1f:
                    a9:b9:78:f8:ae:7f:21:9d:e6:04:e1:75:75:cb:94:
                    7d:26:9b:43:27:a0:bb:29:7b:42:7c:7f:af:b1:83:
                    b9:1c:fb:43:0a:9d:ee:a4:d1:1b:d0:57:37:cc:3a:
                    d1:bb:92:09:99:c7:2f:47:98:a2:20:46:53:31:46:
                    94:01:a0:1f:e1:0c:ac:73:aa:0d:b2:96:f1:56:e3:
                    cb:e2:6a:a0:ae:49:97:42:a4:f6:e9:90:58:68:96:
                    39:fe:4f:f1:a9:da:c4:69:c4:b3:a2:0b:f1:ff:80:
                    1f:0b:b2:1d:5b:8e:c0:42:77:ec:d7:df:1d:89:bd:
                    80:14:be:70:43:ee:56:ce:7c:68:32:c6:02:50:61:
                    3a:a4:da:f9:f9:1c:89:37:3a:4a:34:61:2d:8d:75:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3A:C3:A3:F6:0E:C7:DB:6E:A0:B2:85:9D:AB:6F:74:A8:0B:14:B9
            X509v3 Authority Key Identifier:
                keyid:05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/3b01a6a027dba0e473a9fea342041986a6771eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.224.0/19
                  200.89.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:68:38:69:ed:29:ef:97:5c:9a:3c:22:e9:31:3a:f7:9a:e3:
         3b:4a:fb:eb:81:5e:e1:1a:49:a9:e1:70:98:b6:e3:8a:22:59:
         32:13:0d:ae:c2:35:cf:e6:5b:78:dd:5c:ee:df:15:d7:41:67:
         74:98:a3:25:f5:03:6d:42:f8:17:25:d2:1e:24:24:d2:60:98:
         54:9e:66:e8:9d:f8:98:08:9f:16:fc:2a:68:36:19:a9:95:ec:
         ad:8a:e2:0f:2c:d7:ce:60:43:4c:c3:16:23:b5:db:e4:52:ce:
         5f:79:52:09:5f:11:9a:0d:82:ee:95:d5:32:73:03:0f:55:ab:
         11:88:14:b7:3b:59:0f:43:1d:10:31:cc:ad:c0:93:10:1f:6c:
         ad:ca:73:fa:69:e3:21:1c:bc:f9:53:b2:95:aa:cb:bc:fc:e0:
         23:78:66:8c:b9:56:e8:51:73:5b:ce:a8:e6:64:17:e1:3d:c5:
         5c:26:a5:e6:eb:34:1d:46:da:62:c3:96:59:f3:18:f4:ae:64:
         33:45:69:f8:7e:f8:92:3a:2d:84:7f:51:bf:12:5d:57:c7:4e:
         12:80:78:0b:a4:0c:6c:01:59:b3:eb:64:6e:5f:b0:88:c0:6f:
         c2:71:ba:3e:3a:72:36:bd:0d:fb:a7:fb:44:11:d2:7c:5b:9d:
         df:97:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org