Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d2181246d6054213bbdbba975c63491105bdca86.roa
File:                     d2181246d6054213bbdbba975c63491105bdca86.roa (raw, json)
Hash identifier:          jQbsRWq7drkq9Pw+zqRChhwyJ3r2Z7SnItHzvQvDLMY=
Subject key identifier:   72:11:E4:8D:50:6B:CD:80:37:ED:CE:26:ED:6E:0D:C9:DE:88:C8:F9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       109418
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d2181246d6054213bbdbba975c63491105bdca86.roa
Signing time:             Wed 24 Mar 2021 14:44:21 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086488 (0x109418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=d2181246d6054213bbdbba975c63491105bdca86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d6:b2:c1:ad:12:aa:89:78:8d:53:d7:54:47:
                    c2:6f:7e:9b:7b:5e:22:21:0d:10:cb:85:50:e8:03:
                    af:a4:1f:1c:18:ae:2b:b7:28:89:b0:fa:b6:a7:19:
                    69:c7:11:02:7a:88:df:35:5b:b6:57:92:fd:e7:22:
                    01:a5:6f:99:70:0f:6f:fa:dd:69:3a:d9:5e:56:4b:
                    83:04:6d:79:a9:a5:27:f5:c4:e8:f0:45:e5:60:c2:
                    c2:cc:a3:5a:be:44:60:d4:97:28:07:8a:f7:6b:6b:
                    d0:49:4b:5b:a0:fa:57:e9:57:19:94:fd:dd:75:fc:
                    d8:4f:0b:d7:32:3f:a6:d3:f5:fc:c4:80:f1:11:63:
                    0f:97:e9:93:71:c2:ab:aa:89:26:1d:42:38:ea:77:
                    85:98:32:42:90:98:c3:ff:38:39:2c:e7:73:aa:c2:
                    8c:06:ce:a4:5d:cc:61:06:2b:ab:02:7f:bd:25:f7:
                    24:f7:53:5f:47:19:5a:04:35:0e:5a:83:41:9f:3a:
                    8c:a6:f7:ab:c3:1e:ca:dd:ae:41:c5:97:fe:c9:a3:
                    21:e9:7c:7c:c1:d3:5f:ff:62:af:33:15:3a:20:08:
                    61:5f:9c:d3:fb:52:fd:79:22:55:bc:b8:0a:94:e0:
                    ff:73:4a:0f:21:7d:fe:60:a0:0c:d5:a2:74:fb:ae:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:11:E4:8D:50:6B:CD:80:37:ED:CE:26:ED:6E:0D:C9:DE:88:C8:F9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d2181246d6054213bbdbba975c63491105bdca86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:5c:08:cd:c6:82:b9:e2:76:fb:d7:52:4e:0f:b7:de:a9:
         07:a2:47:ee:9f:cc:46:fe:1a:0c:da:65:e5:37:1b:76:1c:d8:
         3b:8d:63:92:ef:3d:fb:d2:96:45:e8:af:f6:94:f5:e9:db:fc:
         32:9f:20:5a:86:36:94:5d:09:47:7b:ef:b7:90:ea:e8:f6:34:
         75:1b:86:0d:35:77:93:44:2e:ee:db:ce:07:a5:73:4f:8d:05:
         5c:99:ee:54:8d:64:4f:5f:ec:23:bd:f5:1a:74:1e:3b:04:62:
         dd:c5:91:32:c2:a2:bf:ab:4a:c0:60:4f:0c:4b:5c:12:88:55:
         e3:b0:81:ca:a7:ff:f8:c1:ff:10:bc:6c:33:6c:f7:39:87:86:
         99:f7:4f:18:b2:48:6e:cf:a1:27:47:42:38:e9:ba:14:dc:54:
         f7:5e:fa:b9:04:c2:d4:75:39:50:14:91:5c:25:d3:38:53:c2:
         48:49:b8:6d:f6:12:82:52:74:57:2a:cb:88:bd:50:e2:15:0e:
         e8:96:5b:f2:c7:dc:a1:73:a0:f2:78:47:f7:b8:4b:ff:ba:c1:
         dd:e7:6b:7b:44:79:d6:6f:61:06:ff:4b:39:75:61:f3:8b:49:
         8c:8b:3f:89:6a:e1:aa:2a:1b:a8:87:dd:0d:e0:c7:80:f8:50:
         39:69:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org