Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86c4a80c-095d-42b3-8a92-45f2d6628690/a666629d99933aeccfe9956498082532dfa529d3.roa
File:                     a666629d99933aeccfe9956498082532dfa529d3.roa (raw, json)
Hash identifier:          PW0ARixNAKNQzYzYEUMjcef6I4JzbF8HbHYDg3w445o=
Subject key identifier:   2F:1B:57:0F:92:C7:F4:52:FD:B0:94:14:AD:77:2C:69:10:B3:F8:3A
Certificate issuer:       /CN=b64182d80dbafb202ea6b3a2a194eeafd9c4bd05
Certificate serial:       0DA817
Authority key identifier: B8:AD:88:E9:14:4C:8A:1B:D7:D9:CD:37:C4:E9:93:9E:FB:3F:F1:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b64182d80dbafb202ea6b3a2a194eeafd9c4bd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86c4a80c-095d-42b3-8a92-45f2d6628690/a666629d99933aeccfe9956498082532dfa529d3.roa
Signing time:             Wed 24 Mar 2021 14:30:18 +0000
ROA not before:           Wed 24 Mar 2021 14:30:17 +0000
ROA not after:            Tue 24 Mar 2026 14:30:17 +0000
asID:                     264652
IP address blocks:        143.255.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894999 (0xda817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b64182d80dbafb202ea6b3a2a194eeafd9c4bd05
        Validity
            Not Before: Mar 24 14:30:17 2021 GMT
            Not After : Mar 24 14:30:17 2026 GMT
        Subject: CN=a666629d99933aeccfe9956498082532dfa529d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:d0:77:e4:12:f0:9f:9d:7b:9f:ac:34:82:
                    5b:5e:eb:5c:d4:77:58:a8:f1:d8:0b:5c:b9:cd:a2:
                    8b:ed:3f:fc:f8:7d:63:a0:d2:db:06:74:20:b5:6e:
                    94:71:6e:2b:ae:5b:ee:0e:1d:b8:57:42:61:9e:9c:
                    f2:eb:ab:6e:d0:38:9b:91:ea:1e:7d:50:f0:ad:41:
                    6a:b4:b3:ad:31:08:4d:a7:e4:73:1a:ad:96:41:96:
                    c0:7e:b4:2d:25:74:df:b0:3a:27:c9:2d:6b:36:a5:
                    3b:da:19:09:c9:d8:ee:19:44:c6:c4:ed:53:06:4c:
                    06:7d:e3:4b:df:f8:b1:1e:17:a0:72:ce:60:a4:72:
                    dd:73:95:13:0b:ad:f9:02:09:57:a1:14:63:cc:ff:
                    8d:56:80:5e:67:ca:2d:fe:83:8d:f4:33:e2:e0:1e:
                    7e:0f:f2:ea:f0:49:9c:52:db:64:0f:b5:75:7e:f4:
                    64:05:0b:7e:76:0d:2a:67:7b:86:58:f5:99:f5:6e:
                    16:53:49:3f:57:2a:95:fa:ce:16:03:e6:c4:6e:4e:
                    d5:9f:34:69:97:9d:39:75:a7:0e:6f:7c:3d:75:50:
                    14:ce:d5:1a:08:47:5d:15:90:6c:cb:13:2d:8f:cb:
                    74:21:0c:8d:5f:57:fb:1a:1a:33:8d:93:5e:73:5e:
                    6a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1B:57:0F:92:C7:F4:52:FD:B0:94:14:AD:77:2C:69:10:B3:F8:3A
            X509v3 Authority Key Identifier:
                keyid:B8:AD:88:E9:14:4C:8A:1B:D7:D9:CD:37:C4:E9:93:9E:FB:3F:F1:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b64182d80dbafb202ea6b3a2a194eeafd9c4bd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86c4a80c-095d-42b3-8a92-45f2d6628690/a666629d99933aeccfe9956498082532dfa529d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86c4a80c-095d-42b3-8a92-45f2d6628690/b64182d80dbafb202ea6b3a2a194eeafd9c4bd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:30:09:4f:c9:ba:4a:d0:52:b6:6e:ea:93:4d:7b:e2:c9:ca:
         e0:f1:9f:bf:5a:f3:3a:cd:5d:89:6e:f0:e9:de:5a:4e:d4:48:
         f0:ab:fa:90:c0:77:99:6c:46:51:d2:47:70:ca:4d:cd:2b:7e:
         d8:5d:06:f5:fb:81:83:59:2c:a6:17:62:1f:86:77:f8:b6:79:
         d6:f7:f2:8d:9f:ba:66:95:50:08:6f:53:fb:18:1c:c1:c9:cd:
         40:6d:88:9f:f4:24:6c:79:c9:b0:9b:d3:b9:8b:8c:43:37:4b:
         39:3e:16:21:f4:67:4b:e2:0f:92:65:62:f3:18:6c:7e:b8:6d:
         36:f8:58:26:c3:a1:36:44:13:98:d0:d0:01:00:33:51:e0:a0:
         52:22:1b:33:7b:07:24:22:52:33:73:9e:20:b5:f8:69:0e:86:
         f5:50:6b:5c:45:62:ce:c9:1c:22:6e:4e:4d:53:e9:dd:1a:80:
         49:cf:37:77:69:6a:37:ef:68:60:a1:fc:e3:34:be:1b:eb:99:
         dc:bb:21:cc:56:4c:9e:00:d3:18:9b:dc:55:e9:c2:9d:e4:f3:
         e9:7e:d5:1a:67:95:f9:02:ae:11:e9:aa:91:c3:f8:10:5f:4e:
         fc:3e:81:c8:9d:b7:44:bc:a2:fa:89:bf:7d:9f:30:7b:67:7c:
         dd:4b:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org