Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/55a86e792f1a1b2bdddf1164636c7e5fd9b25fbe.roa
File:                     55a86e792f1a1b2bdddf1164636c7e5fd9b25fbe.roa (raw, json)
Hash identifier:          75YkYFWe44UPQiXMaqD/lCjX6/pVZdgqBLcskAh540U=
Subject key identifier:   F9:65:FA:12:C2:4E:CC:BE:91:B9:DD:A0:01:62:7D:51:74:3E:D7:0D
Certificate issuer:       /CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
Certificate serial:       0D37F4
Authority key identifier: F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/55a86e792f1a1b2bdddf1164636c7e5fd9b25fbe.roa
Signing time:             Wed 24 Mar 2021 14:36:13 +0000
ROA not before:           Wed 24 Mar 2021 14:36:13 +0000
ROA not after:            Tue 24 Mar 2026 14:36:13 +0000
asID:                     52330
IP address blocks:        190.184.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866292 (0xd37f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
        Validity
            Not Before: Mar 24 14:36:13 2021 GMT
            Not After : Mar 24 14:36:13 2026 GMT
        Subject: CN=55a86e792f1a1b2bdddf1164636c7e5fd9b25fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:ee:f6:d8:3e:d7:96:7e:4b:41:88:7f:90:
                    c7:65:0e:5d:f2:51:c9:6b:a9:86:5c:d4:85:ab:9a:
                    5a:f1:1e:ea:91:c4:40:32:69:c2:9e:79:e8:61:eb:
                    33:19:f0:e9:b7:b9:df:a5:fa:ee:ec:e2:b3:bc:23:
                    6b:a2:56:ce:36:13:24:3a:d6:59:78:b8:ee:fa:25:
                    5c:b5:41:11:bd:0f:89:09:f0:4d:6a:f8:df:dd:94:
                    e0:6d:94:5e:34:73:bb:2d:21:b4:ad:a0:ea:27:1a:
                    75:6e:b0:e3:98:87:92:6e:f7:95:a7:ff:2d:b2:b2:
                    05:d7:32:01:4b:36:89:d7:cf:99:3f:6b:e9:95:6c:
                    ee:3c:58:10:77:a1:32:4b:b0:f8:bf:9b:95:1e:9e:
                    e2:4a:7e:d4:fd:c7:52:5d:62:40:58:9a:90:10:1e:
                    51:ff:00:8c:9a:eb:8f:9f:96:35:b8:17:c1:54:80:
                    a7:27:f3:e6:97:40:b8:18:19:20:02:88:c0:00:c1:
                    ba:aa:dc:76:12:52:ed:6c:4d:22:e4:d3:90:29:33:
                    51:49:82:92:12:7b:91:be:90:f1:18:d0:1a:e4:0e:
                    83:c3:5f:4b:8d:71:74:40:5f:36:d0:27:f4:78:0d:
                    42:01:6c:09:3d:5a:a2:62:a6:aa:08:1e:24:50:06:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:65:FA:12:C2:4E:CC:BE:91:B9:DD:A0:01:62:7D:51:74:3E:D7:0D
            X509v3 Authority Key Identifier:
                keyid:F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/55a86e792f1a1b2bdddf1164636c7e5fd9b25fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/ff1cca9f77f27742b485aae3810060fa869e1fa9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:67:9f:f3:2e:72:6e:c5:f2:70:96:ea:8e:eb:5d:12:26:72:
         a2:e3:cc:d1:ca:97:dc:c0:51:fa:70:e2:d2:31:1a:39:a8:b4:
         96:ba:ed:d9:6b:4c:ca:fb:20:5d:f6:f3:42:86:62:11:3c:71:
         b6:37:2c:b1:9b:86:fa:0f:7a:53:f5:d3:cb:6b:81:a4:c8:46:
         ee:4e:29:2d:17:09:21:90:6e:9a:b0:08:09:65:6d:ca:45:8c:
         6f:30:ef:80:71:82:2d:09:26:a0:b0:ee:7f:f3:50:05:fe:62:
         b0:07:ed:48:3a:45:d5:2d:2e:47:b7:6a:68:97:4e:a9:e4:0d:
         b8:c1:a8:68:55:5a:cd:76:38:07:66:60:c0:19:0b:41:66:6c:
         57:0c:f8:b5:b0:43:c6:9d:52:1d:09:b6:d9:ec:e8:89:01:18:
         10:26:0e:ff:88:dc:25:48:af:06:55:0a:c0:1a:ee:c3:43:6c:
         2e:e6:49:1c:be:5a:0c:b1:5b:3e:dc:3a:3d:70:0b:22:99:84:
         e5:64:8e:d1:0a:75:7a:fb:2c:9e:57:72:df:ef:f7:89:91:0d:
         46:86:46:20:6e:7a:b5:4a:7c:91:0c:39:9d:67:f4:6c:4b:29:
         0a:8e:c9:7f:84:ec:de:6a:e2:e8:1f:c8:8b:7b:f3:6e:0f:68:
         82:1f:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org