Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/898020e9-9797-43cb-879f-470883438790/96e4668c6e3e2837b37d3b2df724acc20ab16f24.roa
File:                     96e4668c6e3e2837b37d3b2df724acc20ab16f24.roa (raw, json)
Hash identifier:          vn5KYLWT4hi9ErdrpDofhcHRhXvJLXktSGEzMP88Ct4=
Subject key identifier:   3F:C4:35:5A:59:33:F5:AD:E4:FD:92:06:8B:9F:36:09:0A:39:96:CF
Certificate issuer:       /CN=96b208ded55eae6c55f07562fbc7f58e61c7d16f
Certificate serial:       02D3C9
Authority key identifier: 8F:89:56:4D:48:D7:A0:98:73:1B:D3:C3:3C:41:A8:C3:28:8A:F5:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b208ded55eae6c55f07562fbc7f58e61c7d16f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/898020e9-9797-43cb-879f-470883438790/96e4668c6e3e2837b37d3b2df724acc20ab16f24.roa
Signing time:             Wed 24 Mar 2021 14:44:51 +0000
ROA not before:           Wed 24 Mar 2021 14:44:50 +0000
ROA not after:            Tue 24 Mar 2026 14:44:50 +0000
asID:                     27761
IP address blocks:        190.184.64.0/18 maxlen: 24
                          190.184.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185289 (0x2d3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b208ded55eae6c55f07562fbc7f58e61c7d16f
        Validity
            Not Before: Mar 24 14:44:50 2021 GMT
            Not After : Mar 24 14:44:50 2026 GMT
        Subject: CN=96e4668c6e3e2837b37d3b2df724acc20ab16f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4d:d1:6c:1c:fd:a8:ea:df:5c:11:e2:68:c9:
                    ef:0f:07:38:6a:b4:9c:71:82:dc:83:cf:20:0b:cf:
                    cc:4e:fe:9a:9e:33:d0:0f:5d:59:e8:33:07:fe:44:
                    c1:6f:7b:f2:3d:71:c6:15:1a:ad:ba:6c:07:c2:99:
                    8a:c0:15:fb:e3:44:e5:bb:39:34:59:af:d7:c7:31:
                    18:ea:41:8d:c7:a4:2a:0a:be:2b:97:c8:40:5f:f7:
                    a6:00:6e:b8:c2:68:bb:5e:2f:d9:81:98:ba:d0:71:
                    cf:08:07:7d:99:bc:e0:af:e1:d7:c3:cd:bf:c3:3c:
                    63:ad:d0:ee:e6:37:e7:f6:c1:f4:a3:20:67:8e:b3:
                    50:60:18:95:42:dd:b2:55:a3:a3:29:70:15:b8:46:
                    bc:c0:7b:94:28:f2:f8:ca:01:55:ad:44:aa:af:02:
                    c6:94:dc:1e:ff:a5:27:27:09:89:96:bd:68:e6:9e:
                    45:eb:2f:29:db:8b:3b:91:99:89:48:1b:e9:1d:9c:
                    16:68:15:67:dc:a8:5a:33:46:4b:3f:1e:6f:0e:5f:
                    d6:f4:f5:d9:5a:ce:30:34:55:4f:1a:de:6f:a6:06:
                    7a:fd:f0:df:e7:02:aa:0a:07:a2:fb:f4:58:4b:82:
                    a7:e3:d5:af:ff:97:45:ee:23:36:b1:e7:6e:23:21:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:35:5A:59:33:F5:AD:E4:FD:92:06:8B:9F:36:09:0A:39:96:CF
            X509v3 Authority Key Identifier:
                keyid:8F:89:56:4D:48:D7:A0:98:73:1B:D3:C3:3C:41:A8:C3:28:8A:F5:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b208ded55eae6c55f07562fbc7f58e61c7d16f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/898020e9-9797-43cb-879f-470883438790/96e4668c6e3e2837b37d3b2df724acc20ab16f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/898020e9-9797-43cb-879f-470883438790/96b208ded55eae6c55f07562fbc7f58e61c7d16f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:8b:85:b5:6a:99:8d:8c:45:94:5f:d2:0e:06:ff:8a:be:
         e4:6c:b8:1c:e2:ef:89:3d:b9:38:82:30:55:e5:f8:10:60:1e:
         8c:f6:7d:3c:10:91:81:d6:81:5a:ad:a6:c2:d6:8d:cb:d8:db:
         9d:a9:7c:69:51:99:c9:5f:33:27:75:63:b0:c2:61:33:18:e2:
         36:da:57:f9:a8:67:01:d8:a4:37:1a:a8:65:e3:a3:74:f2:37:
         df:6d:c8:cb:5a:c5:f4:a2:fc:83:de:94:ed:1c:ef:93:db:01:
         02:14:3a:42:96:0b:32:76:dc:e8:68:07:bb:bf:8c:84:d0:32:
         0d:e3:20:2e:13:c4:3b:aa:b4:7d:52:d4:ce:68:86:40:b7:16:
         fb:c9:73:44:79:54:0c:77:cd:26:0b:60:2f:29:17:17:f7:9c:
         12:29:23:74:bf:04:4a:16:91:06:5d:b5:16:91:18:af:87:8d:
         a3:63:c6:7d:06:c0:8b:77:c3:33:fa:ab:de:2e:a0:be:a0:1a:
         fb:ba:35:5d:d1:88:b6:ae:50:65:22:8d:e5:79:bf:72:67:43:
         2e:f8:8a:d7:fc:79:d7:7d:37:2f:3c:42:22:73:2e:e9:b3:2f:
         fa:75:73:e8:7a:21:d2:fd:e2:f8:4b:a9:61:5a:82:fc:5f:9a:
         76:3a:61:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org