Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f75c6c1d93a28296d7acc85076fd65d9d8c9b3fb.roa
File:                     f75c6c1d93a28296d7acc85076fd65d9d8c9b3fb.roa (raw, json)
Hash identifier:          PIr9kupltrMANeWA+KPHLluaRh9vHiIz1pX2Ru5KALM=
Subject key identifier:   A3:D4:71:77:AD:05:3B:B6:85:5F:5D:3D:4F:33:04:B6:81:42:90:7E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FB72F
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f75c6c1d93a28296d7acc85076fd65d9d8c9b3fb.roa
Signing time:             Wed 24 Mar 2021 14:44:04 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029935 (0xfb72f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=f75c6c1d93a28296d7acc85076fd65d9d8c9b3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:9b:a4:11:41:f7:1f:ab:93:3c:2e:69:de:
                    57:e0:98:d5:1a:94:59:ac:cf:7f:06:53:c3:96:4a:
                    51:31:88:cb:14:51:ec:61:61:d3:68:b6:3f:02:5d:
                    a4:48:ea:42:84:7d:69:87:f8:00:68:9c:a6:e3:a6:
                    d3:ec:2f:0d:7a:22:cc:6d:f5:a3:f6:5e:17:9a:40:
                    b8:39:1f:49:75:e4:0f:39:ab:8c:dc:b0:e3:11:52:
                    04:8e:ec:91:e3:af:9b:d7:77:fa:bc:18:b2:7c:a2:
                    9d:31:3d:6f:09:d3:92:4a:8f:48:fa:d7:41:45:ce:
                    39:cc:3a:96:19:c7:80:f7:80:f9:cc:e2:47:e0:27:
                    23:8c:21:c8:c9:ab:6e:71:90:a2:b7:42:0d:91:e2:
                    c4:21:9a:f2:5a:b5:4a:8e:ec:91:08:ee:d7:d0:ae:
                    17:57:0c:d3:2e:59:50:01:8a:74:f9:8f:eb:16:35:
                    af:a3:37:b7:84:bc:5b:60:be:3d:63:9d:80:fb:cd:
                    78:d4:0c:97:d3:17:7f:3a:4c:a7:4f:83:78:9e:53:
                    e7:a7:ab:07:ec:fb:bb:a8:13:5e:18:2b:f9:7e:e7:
                    1d:5e:ba:5f:a6:54:f0:d1:ff:2f:35:05:58:25:19:
                    0b:59:72:59:a7:c4:27:3e:39:fe:3e:f9:3a:23:b3:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D4:71:77:AD:05:3B:B6:85:5F:5D:3D:4F:33:04:B6:81:42:90:7E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f75c6c1d93a28296d7acc85076fd65d9d8c9b3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6c:38:64:b2:f0:1b:22:7b:98:9f:ef:0a:e4:9c:9f:bc:46:
         f9:d7:85:87:6a:11:20:4e:1f:b7:ab:21:c6:ce:c4:38:7b:c4:
         06:7f:b4:7a:32:a2:83:7b:b9:85:c4:22:26:80:c7:4f:f3:0f:
         ca:16:05:4a:2e:cd:27:10:77:ca:52:b7:ec:a3:c8:23:14:7b:
         46:37:0b:95:e0:c5:59:49:a1:e9:e5:55:09:69:d0:c2:ca:15:
         4a:e9:20:2a:91:b0:f8:b7:e4:15:17:c3:eb:a3:17:fc:6a:15:
         98:54:d9:8c:23:42:4f:2d:22:49:76:57:5e:24:36:34:d8:5b:
         8b:e9:dc:30:55:7d:70:11:06:39:74:66:24:15:de:87:f3:85:
         ff:5f:02:e1:08:a2:ad:44:10:5e:9e:5b:56:be:2d:0b:0b:52:
         66:60:af:33:21:be:46:30:85:aa:60:3e:67:f3:07:f9:3f:ee:
         87:99:bd:d9:e5:40:dd:47:cf:82:66:86:9f:a8:ab:5d:79:02:
         32:a5:9d:fe:33:a3:86:72:1f:16:7a:f2:ef:9e:22:66:97:03:
         a3:2c:0e:bf:38:e7:1b:3b:7e:94:d8:45:53:54:c4:4b:b8:93:
         36:11:e2:ee:93:72:10:9f:b2:b8:dc:92:da:c4:6b:d9:2e:e0:
         00:32:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org