Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/a0bb3649aff9bd21643ba229c070b1081b079feb.roa
File:                     a0bb3649aff9bd21643ba229c070b1081b079feb.roa (raw, json)
Hash identifier:          72xQsjkVKPivl/K/31rgQ2FR/8Ri0Zp2u0FxKwvWxeY=
Subject key identifier:   31:65:50:5E:0D:D5:73:1D:E2:4C:67:62:65:27:4F:AE:68:A4:EF:29
Certificate issuer:       /CN=1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1
Certificate serial:       050ECB
Authority key identifier: 88:56:92:F1:4F:3F:CD:E6:0E:28:08:F2:BE:0C:7F:9D:18:FB:F1:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/a0bb3649aff9bd21643ba229c070b1081b079feb.roa
Signing time:             Wed 24 Mar 2021 14:30:57 +0000
ROA not before:           Wed 24 Mar 2021 14:30:57 +0000
ROA not after:            Tue 24 Mar 2026 14:30:57 +0000
asID:                     270099
IP address blocks:        190.109.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331467 (0x50ecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1
        Validity
            Not Before: Mar 24 14:30:57 2021 GMT
            Not After : Mar 24 14:30:57 2026 GMT
        Subject: CN=a0bb3649aff9bd21643ba229c070b1081b079feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:34:3e:21:7b:7e:bd:3f:cf:cf:52:8b:69:
                    49:33:e9:b1:70:af:c3:d3:db:0e:6a:5b:d2:54:96:
                    c0:a4:8f:f5:d2:c2:ee:cc:34:83:30:0f:af:20:5d:
                    b0:b1:9d:f7:00:29:67:5d:02:f0:b8:c9:90:d6:e8:
                    d5:8c:cd:43:8b:68:53:63:92:1f:fa:53:37:be:2d:
                    00:1c:72:42:cb:e5:4d:2e:11:f0:98:55:f3:fb:a5:
                    95:1e:50:0d:73:83:43:0d:1e:d7:21:18:c3:92:3b:
                    58:a1:70:9c:8e:1f:48:a5:8c:ec:8b:3b:fe:13:be:
                    e6:7a:52:e2:d9:1b:5a:4a:a2:e6:71:29:3f:f4:00:
                    fa:5a:57:a5:f3:6c:3f:c3:9f:f2:ba:0b:1a:55:b4:
                    b9:a2:29:20:fa:0c:af:65:98:85:eb:30:10:30:94:
                    9f:e3:c3:ec:21:9e:33:f6:fe:1f:ac:56:98:7b:32:
                    fc:25:3e:3b:d8:34:1e:a9:41:5e:83:15:5d:ad:2d:
                    d5:de:d8:6f:46:2e:1f:dd:25:79:fc:16:a4:c1:8f:
                    b5:b6:bd:aa:1e:53:11:e1:2e:2e:25:c8:6e:13:c6:
                    75:bb:4c:ba:55:32:b9:7b:52:86:1e:0e:1e:13:6b:
                    bd:82:3f:15:a4:b9:50:09:c6:d0:ad:8b:02:d4:ee:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:65:50:5E:0D:D5:73:1D:E2:4C:67:62:65:27:4F:AE:68:A4:EF:29
            X509v3 Authority Key Identifier:
                keyid:88:56:92:F1:4F:3F:CD:E6:0E:28:08:F2:BE:0C:7F:9D:18:FB:F1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/a0bb3649aff9bd21643ba229c070b1081b079feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:02:1d:01:97:a2:7b:83:3c:03:41:da:44:79:22:45:03:
         24:87:75:54:ac:57:c4:ed:0a:fc:79:77:4c:84:91:c5:38:3c:
         8a:1e:4c:29:62:f4:2c:9f:8e:c3:35:32:6d:b8:2a:0e:bb:d4:
         33:3b:5f:cd:7a:4a:08:cf:f6:32:a8:14:3b:64:b9:14:b4:b3:
         b5:9c:92:e6:8a:71:2b:54:9b:9a:92:8d:70:82:17:e4:02:fa:
         e5:cc:4f:0d:6b:5d:39:8f:51:c0:66:d8:bc:0e:ea:74:1b:62:
         85:ba:26:14:7f:1b:a5:19:59:8c:d2:e0:8f:2f:08:e7:84:c1:
         bb:79:ed:f4:c9:10:06:13:75:a1:f3:f2:30:a0:99:6a:5d:68:
         fd:74:ad:2c:7e:8e:41:52:4c:07:68:5c:7f:2c:1e:71:96:3f:
         1a:c1:98:44:43:fe:c4:35:7e:a7:17:d0:a0:bf:29:9e:6b:dd:
         1a:03:eb:f7:13:44:0f:29:1a:30:1c:53:63:f7:fe:1d:4c:e5:
         0f:46:7e:b6:01:8d:36:ff:d7:d2:a9:7c:56:e2:f3:d0:5d:06:
         03:9a:e6:09:3f:0c:6b:a9:a5:9c:c5:5b:ba:85:9c:48:69:70:
         fc:2d:b8:32:0c:9f:2b:cf:cd:a5:db:2c:f6:f3:e3:2a:7e:52:
         e8:e2:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org