Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/3cd2fe7f62cf0e5b6ae14d779ab7842f181db826.roa
File:                     3cd2fe7f62cf0e5b6ae14d779ab7842f181db826.roa (raw, json)
Hash identifier:          0F/QtzU/oSfRnxgudxfLyHRWx2/J75Ve8kc8M9eDTsM=
Subject key identifier:   26:F9:A2:FB:86:E4:D5:3C:2A:65:4E:98:56:F6:5A:81:67:5F:71:49
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E4998
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/3cd2fe7f62cf0e5b6ae14d779ab7842f181db826.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     262212
IP address blocks:        190.15.139.0/24 maxlen: 24
                          2800:68:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936344 (0xe4998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=3cd2fe7f62cf0e5b6ae14d779ab7842f181db826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:1b:6f:22:15:9c:90:7a:7a:a2:a5:35:34:
                    bb:85:97:58:d8:4e:0e:98:ad:8f:70:67:a9:94:23:
                    3d:5a:9e:d7:9b:50:70:55:0d:55:7a:3e:4c:c9:3b:
                    39:1e:f7:75:fd:24:72:03:ed:18:55:e8:ee:24:16:
                    e2:9a:e2:05:7e:b0:f7:ad:5b:6e:f3:fb:52:45:ff:
                    23:86:42:6d:a3:e5:61:c4:cc:cb:5d:dc:05:6d:19:
                    36:10:11:ee:d3:3e:37:40:91:34:93:08:fc:8d:df:
                    4a:c6:4f:ba:92:cc:5f:e8:d2:45:b3:7e:75:b6:2d:
                    ac:94:dc:9d:70:eb:91:d7:3a:10:8b:e6:71:26:3f:
                    9f:22:90:f0:2c:f3:ba:9d:b9:64:e2:c5:60:a7:9d:
                    67:09:ac:96:ed:43:c5:35:9b:57:01:ce:30:a6:92:
                    83:b2:49:96:26:7b:54:33:dc:35:db:6c:ed:03:ef:
                    aa:4e:20:3f:af:cc:8e:2b:9c:ae:1d:d0:71:e6:93:
                    83:01:05:a4:11:f9:59:ec:34:0a:08:7f:6c:35:47:
                    34:19:7f:ae:04:ce:df:6a:2b:fa:bd:a0:d4:c0:05:
                    0f:04:4d:b0:0d:f4:70:04:af:d7:8d:6e:80:ee:cc:
                    de:92:f6:7d:be:fb:d6:0f:c5:dd:5c:4b:a8:a4:9e:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:A2:FB:86:E4:D5:3C:2A:65:4E:98:56:F6:5A:81:67:5F:71:49
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/3cd2fe7f62cf0e5b6ae14d779ab7842f181db826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.139.0/24
                IPv6:
                  2800:68:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:5f:45:68:69:5e:5a:bc:88:f9:4d:a0:1b:08:0c:13:a5:eb:
         44:6d:4e:34:c4:0f:e7:84:a7:f2:12:37:38:73:d2:a7:62:6a:
         0c:62:60:21:66:8f:29:28:57:5e:3d:e1:6c:0a:36:24:12:62:
         61:20:7b:54:75:aa:37:32:bd:9f:f8:61:8a:a2:3f:95:f8:3e:
         42:60:f3:28:6a:8a:17:bc:95:65:57:58:8f:c6:c9:ea:15:97:
         ee:70:9f:46:b0:54:7a:e4:e9:a1:82:48:5b:6c:9b:34:4c:ed:
         2d:d5:5d:b4:4f:aa:0c:06:5d:3c:8a:58:27:b7:d6:41:ec:76:
         c6:0f:3a:6f:d9:ab:ab:b7:2d:1f:49:42:a7:d0:3c:84:70:02:
         cf:63:7f:1a:64:3c:d0:ba:fb:6a:7e:68:b7:9f:85:f6:ba:b4:
         e6:7e:24:e8:0e:1a:14:f0:02:49:1a:6e:e8:90:e0:21:b8:fa:
         a8:3b:c4:e6:bd:fe:f0:ab:85:56:63:b0:5d:b9:50:00:65:3c:
         54:79:15:b9:64:87:68:62:1c:79:fe:7c:32:7f:2a:32:44:44:
         81:74:df:31:cb:fe:f6:ba:95:b8:e1:e6:df:82:95:74:0e:0c:
         20:ba:22:98:14:f9:cf:5c:26:78:f7:ef:71:3e:bd:c1:c2:5a:
         b9:51:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org