Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/cbca17ccc8d8037676279360e690d5c9a0a642e9.roa
File:                     cbca17ccc8d8037676279360e690d5c9a0a642e9.roa (raw, json)
Hash identifier:          vWqY7uBdzad2mQRXa4X9hTQVkd+gt8Ix6gsqOnBTp/0=
Subject key identifier:   EB:05:61:CE:B0:A1:EF:EC:74:8F:FA:97:2D:10:A3:8D:67:D8:A1:34
Certificate issuer:       /CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
Certificate serial:       0BF47B
Authority key identifier: 0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/cbca17ccc8d8037676279360e690d5c9a0a642e9.roa
Signing time:             Wed 24 Mar 2021 14:33:11 +0000
ROA not before:           Wed 24 Mar 2021 14:33:11 +0000
ROA not after:            Tue 24 Mar 2026 14:33:11 +0000
asID:                     52439
IP address blocks:        160.19.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783483 (0xbf47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
        Validity
            Not Before: Mar 24 14:33:11 2021 GMT
            Not After : Mar 24 14:33:11 2026 GMT
        Subject: CN=cbca17ccc8d8037676279360e690d5c9a0a642e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:89:67:b1:f6:ac:27:76:23:d5:ea:ca:b1:
                    4a:f8:ab:7a:05:36:62:47:39:bf:7a:d9:9f:5d:99:
                    7f:57:e3:f4:9a:20:9d:01:e4:37:c9:84:2e:25:c1:
                    d4:5d:70:50:b2:f0:e9:60:fa:b1:a6:e5:87:18:4e:
                    6d:4f:ce:43:6e:cf:24:47:49:59:b2:7c:d2:7e:69:
                    f2:66:08:1f:b5:e3:49:36:85:1f:68:58:60:5d:ae:
                    9a:97:c0:b5:70:cc:3d:5d:23:d1:59:14:51:01:83:
                    3f:54:e4:f0:c9:3b:ef:bd:d8:85:a2:9c:2f:3d:d4:
                    ee:07:99:be:b8:c6:1c:a5:68:71:a3:36:d8:a8:ba:
                    53:0a:d0:31:c2:cc:d7:db:d6:e9:65:c2:73:4b:a3:
                    c5:f2:94:9e:d2:57:18:5e:7f:a5:32:16:bf:82:98:
                    57:dc:56:9b:27:7c:36:b4:1b:4d:77:88:9b:be:dc:
                    c8:cd:57:e5:42:69:de:a3:2f:19:6c:b9:b3:cb:6d:
                    b0:4d:c7:08:ea:1d:61:9f:29:11:81:de:31:d2:a9:
                    a7:15:e5:fa:89:e3:9d:12:41:d4:bf:19:3c:b7:0b:
                    e5:aa:2b:f6:01:09:77:3d:99:f7:9e:fa:66:41:d0:
                    2b:fb:a5:a6:e1:24:13:62:64:86:c0:36:6b:ed:f8:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:05:61:CE:B0:A1:EF:EC:74:8F:FA:97:2D:10:A3:8D:67:D8:A1:34
            X509v3 Authority Key Identifier:
                keyid:0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/cbca17ccc8d8037676279360e690d5c9a0a642e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/73c0dcfd4c271be5c9e543e84783482d9b25ef39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:bd:b8:3c:ef:a0:38:ff:6c:60:85:cb:c4:f9:ab:df:90:
         17:64:1d:c8:4c:ae:8a:dd:b5:73:aa:37:ec:d8:00:45:9e:63:
         c6:84:34:1b:cf:d0:d2:91:0a:48:d0:95:49:72:4e:5d:d7:f2:
         a6:90:43:0f:8f:e1:a8:df:3d:1f:9a:2b:e5:d2:75:18:ae:bf:
         17:a5:e4:28:44:12:d7:c4:0e:4d:93:99:ee:bc:9d:93:ac:02:
         dd:9d:ff:35:e2:17:d4:97:be:43:47:86:19:31:22:10:c5:65:
         18:e6:80:d9:38:d3:89:c9:09:dd:2b:f2:d7:34:b0:a4:c8:dc:
         d9:f6:7c:da:0e:9d:2b:dc:15:2a:ae:26:d1:de:c1:04:5c:1a:
         bd:62:ec:35:a9:c1:fd:e1:cf:4b:74:b1:a9:de:e3:87:81:51:
         ed:48:97:b1:e7:23:73:f0:db:f7:31:7a:7c:ef:ac:09:af:17:
         88:02:34:6b:12:b8:df:9b:a4:c6:6d:c3:f5:2a:d0:03:99:08:
         c3:8a:4e:a5:3b:4a:b4:ba:bf:ec:9d:51:38:24:69:68:01:26:
         ce:d8:5f:cc:bb:84:59:2a:5e:a3:99:09:a8:8d:f9:99:59:30:
         cf:55:1b:2f:9f:ba:d1:51:34:e8:6f:9c:0a:4d:73:e0:f7:1f:
         f2:36:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org