Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/30456356ffdc040a94ac6b8e5e16385afda3f39d.roa
File:                     30456356ffdc040a94ac6b8e5e16385afda3f39d.roa (raw, json)
Hash identifier:          DE3AiOJ53cwaLgCL8opB5eezkU3d7BXPcXmh9QhpRDo=
Subject key identifier:   EA:2B:3C:3B:BA:A3:A6:E1:AD:3A:04:82:CB:B3:BB:C9:CA:DF:79:DB
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       106923
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/30456356ffdc040a94ac6b8e5e16385afda3f39d.roa
Signing time:             Wed 24 Mar 2021 14:44:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075491 (0x106923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=30456356ffdc040a94ac6b8e5e16385afda3f39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:f1:e1:46:7f:b0:40:a2:6c:65:94:8f:4a:
                    f0:17:5e:c6:27:40:6f:1f:f1:fe:cb:07:c8:e7:f2:
                    6a:ee:e7:42:0c:e6:f0:f2:fc:8f:de:59:69:20:81:
                    03:ec:3f:6f:f5:73:47:c9:0b:97:7c:19:d4:bc:32:
                    77:de:f5:2b:61:ac:f6:bb:8c:b9:a3:d3:31:50:a1:
                    59:25:77:3f:b4:e6:1f:d0:a5:ce:17:1e:14:f0:de:
                    89:91:de:5c:bd:d2:bf:81:a3:bf:43:32:fe:15:bb:
                    75:2d:e0:16:8e:6d:3f:6e:63:70:a2:0e:05:f8:69:
                    fb:0e:33:98:35:6f:26:d3:63:e1:c2:91:1d:ae:0e:
                    0b:af:1d:1a:ec:2b:86:36:68:af:33:a9:ea:ee:89:
                    85:50:89:68:6f:00:e0:b7:c9:d7:11:45:4c:f4:bc:
                    8d:c8:bf:da:e0:9e:7f:7f:24:37:c3:2a:83:13:fb:
                    1f:90:d1:85:f1:4d:81:9d:aa:19:f7:6c:0e:d7:ad:
                    7d:85:0d:67:76:d6:a4:6f:01:98:84:a4:a3:b3:a5:
                    87:17:eb:63:4b:c9:a1:87:fe:5d:2d:37:26:e7:8d:
                    e3:3a:ec:2b:37:6f:e1:2a:f0:48:f5:48:6d:86:6c:
                    92:69:93:52:9f:30:45:a0:88:18:db:5c:fa:15:40:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2B:3C:3B:BA:A3:A6:E1:AD:3A:04:82:CB:B3:BB:C9:CA:DF:79:DB
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/30456356ffdc040a94ac6b8e5e16385afda3f39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:91:e9:86:0a:20:1b:0c:3f:df:95:34:d0:86:49:10:40:
         dc:f5:71:a9:92:c2:c0:d8:ce:74:b3:c0:ee:57:4b:99:2b:66:
         ce:d9:6d:d6:f5:5b:e1:c9:a7:5e:c2:bc:a9:a8:b1:23:49:d3:
         99:ed:f0:b6:fc:34:42:1a:99:f4:42:f0:6a:03:af:32:37:3d:
         0c:c4:6b:77:4a:1b:c1:94:e9:02:0c:bc:bc:ae:eb:5c:4b:8a:
         46:25:12:a9:73:af:2b:bb:e0:71:42:c6:e8:b4:24:b0:d7:5a:
         2c:bb:4c:14:02:40:5d:b3:0d:f9:a2:6b:76:0b:f8:5b:56:28:
         41:5e:de:41:a9:96:2d:a7:4b:88:06:df:ad:19:9c:66:09:c7:
         47:3d:4c:e3:41:72:bc:c8:ff:8a:f7:f8:34:7e:55:2c:46:01:
         a1:7c:10:ff:2b:c0:68:07:03:e4:08:d3:bb:ac:b0:0a:1c:db:
         f8:84:74:96:2c:7d:f7:c4:65:4b:72:36:8e:c2:27:7d:3f:a8:
         b4:d7:d8:3b:31:c2:6b:a4:1a:29:82:6b:b1:22:ba:b5:23:1b:
         be:70:83:a8:15:fe:2e:d7:60:cd:81:9f:c6:68:06:63:a5:a2:
         47:19:34:4c:31:62:98:18:37:21:f0:45:6b:f6:5d:7f:2e:63:
         72:5a:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org