Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/bcf0d7c081f03d2ffa6d92684572312c18dc2e95.roa
File:                     bcf0d7c081f03d2ffa6d92684572312c18dc2e95.roa (raw, json)
Hash identifier:          6pj6WQu9X4mDBNDhDBCmjVFUJ95IoV1SD4eTAnifD3k=
Subject key identifier:   35:90:1A:3F:F4:F7:3A:FB:97:71:4B:A3:C7:B7:20:81:9B:DE:DE:1D
Certificate issuer:       /CN=e6a7db40416bd409764df01fa1a52259576b328e
Certificate serial:       0DB9D9
Authority key identifier: 0E:81:41:66:36:1F:C6:D0:91:01:77:BD:04:5C:F6:F0:F9:3F:0F:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6a7db40416bd409764df01fa1a52259576b328e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/bcf0d7c081f03d2ffa6d92684572312c18dc2e95.roa
Signing time:             Wed 24 Mar 2021 14:40:19 +0000
ROA not before:           Wed 24 Mar 2021 14:40:19 +0000
ROA not after:            Tue 24 Mar 2026 14:40:19 +0000
asID:                     27740
IP address blocks:        190.11.240.0/20 maxlen: 24
                          190.108.64.0/21 maxlen: 24
                          2800:b30::/31 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899545 (0xdb9d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a7db40416bd409764df01fa1a52259576b328e
        Validity
            Not Before: Mar 24 14:40:19 2021 GMT
            Not After : Mar 24 14:40:19 2026 GMT
        Subject: CN=bcf0d7c081f03d2ffa6d92684572312c18dc2e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:69:78:91:fc:4f:65:06:14:0b:e0:40:47:
                    40:c5:75:4e:59:9c:3b:b7:59:22:77:01:bd:d9:95:
                    fb:03:4f:fd:ba:ed:6a:cd:f1:c8:e8:e7:ad:5c:98:
                    0a:13:2f:81:f4:86:e0:65:ee:0d:9d:5d:24:75:e7:
                    25:b0:6e:e0:4d:6b:77:5a:7c:d6:94:c1:2b:e7:79:
                    b6:14:f5:ec:59:a1:7c:df:e2:fb:7b:2c:16:3d:ed:
                    37:53:4b:0e:e4:b9:19:49:77:84:46:75:6b:e3:9a:
                    83:da:20:fb:7a:fe:6c:db:a3:97:46:57:bb:90:49:
                    af:a4:84:a2:b4:aa:fe:63:56:56:25:97:f5:00:ff:
                    aa:c0:29:f5:75:99:63:82:04:c2:ed:cb:03:5b:42:
                    88:1a:7c:89:9a:38:67:90:b5:8c:8e:8d:d7:57:fb:
                    fc:14:01:8a:69:67:c5:95:33:ba:62:55:b3:2a:28:
                    0a:47:e4:79:89:11:6a:10:8c:da:ed:8a:70:b0:f3:
                    1e:1c:93:33:43:02:38:e4:82:96:78:3c:e7:48:1f:
                    1c:33:d0:30:4b:b9:c4:f2:57:54:db:23:fd:ee:af:
                    84:21:ec:c1:ab:2e:7b:2e:b7:9b:d0:4f:64:06:aa:
                    b1:f3:22:25:27:b2:cf:05:0f:a8:d9:83:27:f4:a1:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:90:1A:3F:F4:F7:3A:FB:97:71:4B:A3:C7:B7:20:81:9B:DE:DE:1D
            X509v3 Authority Key Identifier:
                keyid:0E:81:41:66:36:1F:C6:D0:91:01:77:BD:04:5C:F6:F0:F9:3F:0F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6a7db40416bd409764df01fa1a52259576b328e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/bcf0d7c081f03d2ffa6d92684572312c18dc2e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9066c3cf-f942-4b00-97f3-a2d300024e70/e6a7db40416bd409764df01fa1a52259576b328e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.240.0/20
                  190.108.64.0/21
                IPv6:
                  2800:b30::/31

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:ee:30:34:9a:e8:26:10:a9:ce:b7:1f:03:16:ff:eb:02:
         9c:79:e8:ba:d0:23:b8:b3:c6:bd:82:73:70:e5:66:53:c2:8e:
         73:3e:f3:1c:04:7d:3d:bd:8b:97:55:9f:b9:4d:dc:93:c4:30:
         15:c6:a3:b5:d1:cb:4e:8f:e9:b3:23:b6:4c:04:ce:4f:06:9d:
         aa:6a:54:77:37:61:36:5b:63:79:52:56:e1:70:40:d8:fb:1c:
         ce:f6:d6:17:39:90:90:6e:7f:5b:55:36:11:2b:02:13:47:7b:
         a7:17:62:b3:66:41:5d:54:de:e7:91:92:5c:eb:27:2b:3f:cc:
         40:38:a6:ab:49:36:7a:d9:be:0d:3d:d9:93:8f:10:1b:c6:82:
         f1:d3:65:3d:a9:34:96:86:81:ea:46:8c:d6:8c:55:af:10:7e:
         37:b5:30:cf:31:f0:ac:1c:cf:5d:65:fd:d1:cd:e8:c5:78:78:
         ed:e1:1a:4f:7b:ed:ac:01:a3:af:ac:48:b5:06:57:98:f9:65:
         61:ff:11:77:85:ab:0e:a5:b7:32:0d:bd:94:4f:79:b8:0e:7f:
         8b:96:9d:e0:be:ec:ac:85:04:f2:c5:c8:42:84:2b:2f:7a:12:
         44:0a:0c:df:1d:43:c0:8b:5d:1c:d6:47:9a:6e:b8:af:79:b2:
         49:c0:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org