Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/eef381fdd15240d03af8cab04bcc71508383a0cd.roa
File:                     eef381fdd15240d03af8cab04bcc71508383a0cd.roa (raw, json)
Hash identifier:          mKPeOvc4siFXQv8BMWreDiQerCtldow074T8uJPHMaE=
Subject key identifier:   30:DA:3E:F6:76:00:DE:6D:51:0D:C8:B8:04:36:33:C3:DE:34:2C:EE
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0DC0CE
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/eef381fdd15240d03af8cab04bcc71508383a0cd.roa
Signing time:             Wed 24 Mar 2021 14:36:27 +0000
ROA not before:           Wed 24 Mar 2021 14:36:26 +0000
ROA not after:            Tue 24 Mar 2026 14:36:26 +0000
asID:                     52468
IP address blocks:        190.61.46.0/24 maxlen: 24
                          190.61.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901326 (0xdc0ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 14:36:26 2021 GMT
            Not After : Mar 24 14:36:26 2026 GMT
        Subject: CN=eef381fdd15240d03af8cab04bcc71508383a0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:03:4a:09:50:fb:18:2d:e8:e8:9e:bd:f4:
                    e5:40:35:fc:5e:44:dd:b4:89:af:72:ab:95:2b:7f:
                    a7:67:52:ae:dd:dc:86:60:60:50:ba:1a:7b:61:66:
                    a7:52:bb:a4:cb:b9:85:55:7e:dd:a0:08:3a:22:dd:
                    89:c1:14:2f:d5:22:32:07:34:6f:77:0c:94:0d:1a:
                    c5:00:0c:90:56:e5:b6:28:20:44:32:d6:8f:06:7d:
                    f0:d1:24:d0:9f:d4:8f:38:a9:54:7e:df:81:83:8c:
                    fa:14:96:c4:76:6b:a0:df:4d:e2:ba:f3:70:8e:58:
                    59:0d:ce:ef:51:e2:52:8a:10:0a:e4:b7:56:17:93:
                    84:21:f1:5c:8f:32:7b:16:dd:20:9e:35:0c:f2:be:
                    10:57:28:6c:f3:ab:ca:fe:c1:1f:44:87:6e:63:2b:
                    de:75:21:0e:c9:1d:06:fc:4c:b7:5c:9c:3e:a0:8b:
                    85:ef:1a:f8:46:f3:ad:00:ec:b2:69:fc:8e:51:39:
                    47:db:9b:b3:5b:d6:c3:84:02:89:60:76:e3:05:20:
                    78:8a:18:6d:8e:a7:43:2a:b8:9f:e5:c0:43:63:2e:
                    8a:b8:1c:0f:a0:d2:ff:7e:af:17:8c:fd:e5:49:f3:
                    c4:29:18:20:b4:aa:46:51:c6:f2:20:dd:4e:c4:e3:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:3E:F6:76:00:DE:6D:51:0D:C8:B8:04:36:33:C3:DE:34:2C:EE
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/eef381fdd15240d03af8cab04bcc71508383a0cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:80:ae:91:ee:cd:34:a6:0c:4a:df:68:11:98:b1:92:9e:
         78:a9:90:b6:a8:ac:55:94:33:22:a1:d0:3e:93:52:ef:25:74:
         4f:e9:15:a7:31:e6:31:2c:45:05:4c:55:34:f9:38:c1:eb:15:
         47:28:1e:b7:11:98:71:c7:ec:1e:09:1a:22:9a:57:4f:55:21:
         a1:cc:5f:30:98:82:be:75:48:44:b3:80:81:44:ac:af:de:e1:
         52:21:1a:44:33:2b:ff:01:6c:47:bf:11:01:f1:ac:57:01:f9:
         6d:73:9f:1e:1a:4a:26:98:b8:fb:17:53:42:5e:6c:ae:eb:62:
         2e:47:dc:39:af:9b:56:f6:ce:df:8a:58:93:51:3f:24:bb:b0:
         d4:12:2f:60:9a:ce:5b:85:75:b5:fb:c7:77:df:f6:96:50:63:
         f8:e7:25:ef:e9:d8:8a:5d:44:61:32:dd:29:81:40:d0:71:40:
         b3:e8:bf:e0:c6:74:99:f2:ec:17:7e:a7:97:fc:91:49:e1:41:
         ab:07:20:aa:62:6e:82:12:85:49:a5:d6:b3:cf:e8:28:f5:f7:
         53:ab:5b:7d:54:a4:8d:37:16:49:47:44:f0:6e:f5:ba:cc:1e:
         b3:9e:b8:f7:3e:34:f3:7f:c8:e7:3c:2a:55:42:c6:17:13:82:
         66:bd:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org