Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e26313e9abb50bdddafcd578a73e136182a4056d.roa
File:                     e26313e9abb50bdddafcd578a73e136182a4056d.roa (raw, json)
Hash identifier:          qGZsnkkWxyJFAnaM4gHeFs1dFtxUspMwAsYr8p6Asb0=
Subject key identifier:   27:1B:2D:17:6D:09:CD:D2:67:01:D3:8B:6F:87:90:2D:DF:16:8B:55
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14D00B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e26313e9abb50bdddafcd578a73e136182a4056d.roa
Signing time:             Wed 18 Aug 2021 16:35:35 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:602a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363979 (0x14d00b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=e26313e9abb50bdddafcd578a73e136182a4056d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:99:9e:51:66:35:76:cb:d5:5c:19:21:e9:
                    79:2f:a3:5b:4c:45:8d:c0:cf:00:31:2a:f4:c2:66:
                    cf:8a:9e:9a:24:6a:f6:ba:ae:6e:80:cb:46:04:3f:
                    ee:dc:5d:02:38:1d:f0:54:43:33:49:68:cc:7a:b1:
                    1a:86:73:dd:82:ae:59:c3:e5:88:58:16:d9:d4:8f:
                    be:ed:15:b7:5d:9b:ed:e9:4a:71:2f:c6:7e:ff:5e:
                    38:34:30:16:db:17:e5:41:4e:ea:bb:91:66:2a:2f:
                    54:a3:1c:6e:eb:14:d9:3a:3b:b3:77:71:32:fb:e7:
                    c5:7b:1e:4b:f8:8a:07:13:dc:9a:7c:0b:05:56:7b:
                    1d:d6:03:53:d9:b6:0e:24:b8:db:07:15:0e:e8:28:
                    fd:40:15:e5:24:98:0e:67:1f:01:30:16:a0:c6:d4:
                    5f:5b:d8:a7:0a:20:11:94:e9:27:7a:1c:aa:fe:b1:
                    92:62:68:60:5d:ad:eb:dd:b6:e0:34:9d:b1:5a:eb:
                    11:8f:87:6a:26:b8:c0:68:04:c0:f3:b2:28:da:91:
                    52:8f:4b:3e:1e:99:4d:a2:73:cd:5f:6b:4d:92:d6:
                    52:8a:b3:c0:a5:be:f1:69:9d:b6:ee:13:11:c7:54:
                    35:60:70:5c:fb:d0:bf:58:14:fd:35:72:2e:40:dd:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1B:2D:17:6D:09:CD:D2:67:01:D3:8B:6F:87:90:2D:DF:16:8B:55
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e26313e9abb50bdddafcd578a73e136182a4056d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:602a::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:6a:81:84:67:19:ff:fb:50:3b:9a:3b:b3:fb:57:51:c8:
         6f:65:26:ac:70:bf:80:bf:82:7c:ce:19:ab:2b:64:7f:c4:07:
         ce:91:b6:e8:7b:b4:25:a6:e8:fe:33:a1:02:88:c2:11:a5:c5:
         00:4e:86:ce:b2:c0:9d:9e:69:65:be:2d:6b:42:36:d0:97:d8:
         0f:54:6b:91:fc:89:a7:6a:dc:c5:b6:b2:9a:5a:de:5a:d4:ea:
         46:ff:ac:04:c7:a1:1d:13:59:cf:87:97:f1:37:0d:72:42:00:
         b2:57:ec:c5:df:7e:f3:97:0e:f9:9f:72:ea:5a:b6:3d:9d:7e:
         a1:76:c5:14:c3:99:83:98:04:51:f1:98:49:6c:3e:27:3d:f4:
         de:07:7b:79:15:73:af:58:b5:e3:d6:52:6d:05:78:d2:0d:62:
         e0:a5:89:9a:4b:f5:51:fa:bb:22:25:e2:c5:30:b0:7f:62:ac:
         af:d6:3f:9c:bd:98:60:be:99:c2:e1:87:29:7a:f7:d4:5d:f2:
         5d:d2:7c:03:b7:eb:35:d2:a4:b9:f3:d9:8f:cb:33:60:4a:bb:
         d8:c2:0d:fb:18:2e:bb:5f:fc:65:09:dd:c7:e2:3f:3b:08:d9:
         22:e2:97:73:f5:e2:48:9f:1b:08:c1:83:09:f9:81:e9:66:22:
         8c:30:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org