Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/a25d3618bb24be2fc24e76aea9fef7baf76c8883.roa
File:                     a25d3618bb24be2fc24e76aea9fef7baf76c8883.roa (raw, json)
Hash identifier:          RULrIV1iQSZjWacqTN1eTlu0RZZ8l114w2t0x5ZAFGw=
Subject key identifier:   C9:1F:64:9D:80:3F:91:BA:19:EA:BA:6B:A0:07:3D:DE:2E:8B:C4:21
Certificate issuer:       /CN=a142b246def171452a54ef8b8244c598c34ccff0
Certificate serial:       08DA3E
Authority key identifier: ED:5F:4A:84:5C:88:A9:FD:FF:09:3E:84:FB:FF:7D:42:2A:25:9F:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a142b246def171452a54ef8b8244c598c34ccff0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/a25d3618bb24be2fc24e76aea9fef7baf76c8883.roa
Signing time:             Wed 24 Mar 2021 14:39:31 +0000
ROA not before:           Wed 24 Mar 2021 14:39:31 +0000
ROA not after:            Tue 24 Mar 2026 14:39:31 +0000
asID:                     269935
IP address blocks:        190.83.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580158 (0x8da3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a142b246def171452a54ef8b8244c598c34ccff0
        Validity
            Not Before: Mar 24 14:39:31 2021 GMT
            Not After : Mar 24 14:39:31 2026 GMT
        Subject: CN=a25d3618bb24be2fc24e76aea9fef7baf76c8883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:fb:6b:94:5b:d1:5c:b8:b3:aa:7d:a0:c9:
                    5d:8f:ba:3a:95:78:c7:5d:65:24:f4:ed:dc:69:8d:
                    7d:ac:3a:6f:b8:30:11:91:67:5b:ec:f6:fa:b9:d0:
                    f4:95:0e:51:f9:18:90:66:e6:9c:08:d3:c6:39:6e:
                    22:ce:09:fa:4e:81:15:35:4c:b6:00:13:87:6f:c2:
                    98:e3:64:63:2b:61:3c:54:9b:ec:d1:ee:95:99:f6:
                    40:e0:74:08:68:9c:ac:53:fd:9c:11:b2:57:dc:9a:
                    4b:dd:c2:6b:a4:ef:da:45:8b:5b:51:4d:29:29:5d:
                    88:50:f2:4b:13:21:f7:3f:12:77:43:0c:72:7e:12:
                    4d:7d:da:a0:1d:49:ee:ee:0d:1d:15:f8:69:19:a2:
                    6c:d2:89:2e:98:04:0e:f3:b6:fd:20:3d:93:9e:18:
                    f6:07:ed:fd:e0:d2:06:c8:ab:6f:a9:13:5b:20:4b:
                    b9:d4:63:3d:c1:4b:85:eb:1f:3b:75:fc:bc:a1:4c:
                    68:c9:51:40:38:14:ca:e5:a4:e0:ac:1a:c5:98:53:
                    37:64:b7:b8:4f:8d:3d:5a:84:b5:dd:b0:15:88:e7:
                    d8:ff:2b:ce:1f:4b:03:ed:dc:e5:6c:30:e2:96:a7:
                    a4:ff:75:6b:6f:a0:9a:e1:e7:6d:d5:b2:1b:38:9e:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1F:64:9D:80:3F:91:BA:19:EA:BA:6B:A0:07:3D:DE:2E:8B:C4:21
            X509v3 Authority Key Identifier:
                keyid:ED:5F:4A:84:5C:88:A9:FD:FF:09:3E:84:FB:FF:7D:42:2A:25:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a142b246def171452a54ef8b8244c598c34ccff0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/a25d3618bb24be2fc24e76aea9fef7baf76c8883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/a142b246def171452a54ef8b8244c598c34ccff0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:4e:4c:02:03:82:dd:3e:81:c7:4d:81:0b:03:ef:98:3c:
         7c:ed:ec:b3:9e:f9:7c:1e:0a:3e:d3:02:4a:11:78:57:05:a9:
         2e:03:c5:96:8c:ba:69:60:4a:27:bc:e8:4e:6f:7b:e4:e3:45:
         61:11:ca:c2:e7:d2:27:54:71:ba:48:c1:5d:bd:9f:20:63:a5:
         78:30:08:22:36:1f:e0:71:70:31:f8:97:a6:d9:44:54:a8:df:
         51:ac:f6:15:7e:af:3c:54:cb:40:6b:e7:aa:9f:13:35:1d:f3:
         04:98:d8:46:59:d5:29:8b:29:30:0c:ce:40:46:71:3b:da:4d:
         b0:0d:e3:b4:52:0c:99:83:ad:02:d3:46:2f:bd:71:af:21:89:
         62:12:ed:36:bc:45:1c:a4:58:32:31:97:be:e1:cd:59:07:cd:
         7d:70:55:a1:85:dd:a8:98:df:d7:c7:3c:46:4c:d9:ec:7e:4e:
         62:02:fe:34:9a:38:e4:ca:95:8a:dc:da:b5:83:8d:00:79:64:
         79:a5:ba:9d:4b:8d:b5:70:c7:12:28:a0:c2:ff:a5:1d:49:2a:
         c7:ec:8e:48:53:6e:4f:0a:79:21:e6:0b:e2:22:e1:52:16:54:
         30:bd:37:1b:69:7d:87:18:62:1e:2e:47:ca:1d:f6:9e:11:7d:
         d2:9b:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org