Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/cc554a0ed2d6923ca667a6356293c9d440dc624c.roa
File:                     cc554a0ed2d6923ca667a6356293c9d440dc624c.roa (raw, json)
Hash identifier:          vaZPZCUQTVbwUlaqnM7hkA8qxCWdyw9ODBqi1ID89D4=
Subject key identifier:   65:16:2D:6B:AE:61:8C:EE:8D:F3:D1:87:0A:76:17:08:AA:B7:70:0D
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0DBEBB
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/cc554a0ed2d6923ca667a6356293c9d440dc624c.roa
Signing time:             Wed 24 Mar 2021 14:36:27 +0000
ROA not before:           Wed 24 Mar 2021 14:36:26 +0000
ROA not after:            Tue 24 Mar 2026 14:36:26 +0000
asID:                     52468
IP address blocks:        190.61.40.0/24 maxlen: 24
                          190.61.41.0/24 maxlen: 24
                          190.61.42.0/24 maxlen: 24
                          190.61.43.0/24 maxlen: 24
                          190.61.44.0/24 maxlen: 24
                          190.61.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900795 (0xdbebb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 14:36:26 2021 GMT
            Not After : Mar 24 14:36:26 2026 GMT
        Subject: CN=cc554a0ed2d6923ca667a6356293c9d440dc624c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:79:df:19:68:c5:87:c4:75:23:b2:e0:5d:
                    46:cd:47:83:51:27:81:24:e5:7d:81:04:3b:a2:81:
                    c9:fe:c2:95:18:f2:82:e5:7c:1d:a9:df:ed:f9:88:
                    da:59:1e:01:be:04:9d:ae:e5:38:cf:fc:ee:50:a2:
                    df:be:10:ae:5a:8b:bd:63:3b:4a:c4:59:b8:39:f6:
                    16:26:79:3f:05:4e:44:bb:22:4d:11:46:19:d8:7a:
                    d0:5a:1b:48:fa:45:05:7a:6f:36:bd:1a:16:95:ff:
                    05:53:7d:31:6b:6b:86:99:65:c0:85:e8:51:7f:f4:
                    49:cd:fe:04:e2:b3:69:74:35:52:9f:93:3d:6c:12:
                    3e:bb:a2:4c:8e:fb:52:48:a2:89:8d:cf:af:1d:7b:
                    c0:24:bc:75:77:06:21:20:7e:00:7f:1a:94:bd:38:
                    ae:86:1c:5a:54:a1:2c:42:73:01:00:aa:e9:bf:9b:
                    97:51:09:68:4b:88:16:b9:43:86:e5:e3:b4:d5:12:
                    a4:18:8f:98:88:e8:eb:b5:f0:54:60:ba:d3:33:76:
                    a3:6e:20:63:ae:c9:36:6e:69:3b:80:b5:42:97:6b:
                    c4:bf:62:ec:f7:27:6d:da:91:a8:ce:94:32:fe:fd:
                    80:34:6d:5f:1d:84:45:02:73:f3:60:a7:9f:ea:a7:
                    f4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:2D:6B:AE:61:8C:EE:8D:F3:D1:87:0A:76:17:08:AA:B7:70:0D
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/cc554a0ed2d6923ca667a6356293c9d440dc624c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.40.0-190.61.45.255

    Signature Algorithm: sha256WithRSAEncryption
         10:f4:b5:8b:bc:63:1c:ff:f4:e6:e5:7e:d2:f9:75:9e:be:57:
         db:fc:86:98:85:b7:de:2a:e3:5c:90:f9:fc:3e:00:bd:58:0b:
         a3:42:68:ca:af:6e:0c:e1:97:5f:eb:10:71:7a:3a:67:16:c3:
         9c:13:c9:5b:87:4d:9a:8e:7e:75:b8:78:2f:78:38:96:ec:a9:
         a3:a4:14:1b:d6:c5:98:ab:15:06:21:3f:32:a3:d2:f6:e1:13:
         a6:95:3c:c5:fc:d9:e4:d0:a0:a9:d3:56:43:9e:a5:cd:22:c0:
         eb:ec:32:ee:93:9d:23:eb:7b:ee:f1:63:e9:87:e0:c4:48:77:
         74:5d:05:6a:92:85:90:ee:4c:7f:22:a9:2c:e2:b5:ae:6c:e7:
         35:78:49:f6:a0:4c:59:11:de:aa:09:4d:5c:37:dc:a1:79:e8:
         3a:ae:b8:60:aa:13:ec:51:f6:b5:cc:b1:c6:ea:84:e3:d6:cf:
         86:fd:88:1f:73:54:26:44:be:7c:ac:85:13:2f:4d:fb:9a:c0:
         be:10:46:5f:8b:d7:af:1d:6f:dc:fd:8e:bf:50:ea:96:c4:e1:
         82:34:4b:94:77:0c:7c:6c:35:8a:93:e3:1c:05:33:21:e5:05:
         a1:33:6e:17:b4:3c:8c:32:db:51:72:5b:81:c3:53:ab:73:f0:
         44:64:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org