Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92142a74-1778-410d-bd44-01664f7a9d1c/3c1bcfeab63689b5d13099c0436bf315a6efd65a.roa
File:                     3c1bcfeab63689b5d13099c0436bf315a6efd65a.roa (raw, json)
Hash identifier:          68yZQYoeYjNlfxgPN5J4+YjRwLmDSrsKrtsLjHtD1bI=
Subject key identifier:   AB:8E:F4:6C:43:42:DA:CD:FF:BE:AA:5A:BA:21:C4:C1:F4:5A:29:11
Certificate issuer:       /CN=bb4fd535c300d54ba9be3ddfdc8df3424c4467d4
Certificate serial:       0337D5
Authority key identifier: 53:45:61:AD:EE:66:46:6B:06:3A:56:80:93:87:9F:18:C1:E2:7A:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb4fd535c300d54ba9be3ddfdc8df3424c4467d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92142a74-1778-410d-bd44-01664f7a9d1c/3c1bcfeab63689b5d13099c0436bf315a6efd65a.roa
Signing time:             Wed 24 Mar 2021 14:29:04 +0000
ROA not before:           Wed 24 Mar 2021 14:29:04 +0000
ROA not after:            Tue 24 Mar 2026 14:29:04 +0000
asID:                     52453
IP address blocks:        181.224.184.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210901 (0x337d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4fd535c300d54ba9be3ddfdc8df3424c4467d4
        Validity
            Not Before: Mar 24 14:29:04 2021 GMT
            Not After : Mar 24 14:29:04 2026 GMT
        Subject: CN=3c1bcfeab63689b5d13099c0436bf315a6efd65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:20:53:3d:a3:d3:53:1e:6a:ea:8b:22:e6:a7:
                    b8:ff:10:35:71:dc:d7:58:59:89:e1:4c:7a:08:5f:
                    5b:c4:64:cc:0e:cc:50:38:09:21:af:ac:ef:a9:94:
                    d0:60:d8:5f:2f:7a:a9:1c:9d:31:82:a3:70:7a:f0:
                    ea:59:0d:c2:79:1f:53:be:e9:1b:07:0a:7b:2c:99:
                    2e:31:8e:8b:4c:3e:2f:67:13:4a:95:6b:f8:2f:bd:
                    4b:c5:d9:bd:62:74:92:12:8c:43:55:06:dc:4f:f0:
                    8a:3b:33:2d:83:cd:89:a6:c0:15:ba:08:9c:04:52:
                    b2:3a:74:c7:a1:43:2a:c4:58:61:12:10:1f:92:ca:
                    5b:48:60:36:a2:dd:e6:6b:97:13:ca:3f:52:3c:20:
                    bc:bc:5e:48:02:12:bd:aa:20:e0:b7:fa:c3:8b:13:
                    79:a3:35:81:55:af:95:fe:d2:b9:fa:af:cc:09:3c:
                    ad:05:2e:fe:98:46:41:78:2d:57:24:66:23:35:2b:
                    16:81:eb:81:70:59:a0:50:4d:e9:59:19:88:fa:2d:
                    29:b8:8c:15:d9:14:54:d2:bf:68:ed:34:d9:36:6b:
                    f5:2e:3d:c5:13:df:ca:82:bd:44:aa:11:06:a1:20:
                    84:20:5a:18:92:32:f5:b2:e6:27:ad:e3:2d:af:79:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8E:F4:6C:43:42:DA:CD:FF:BE:AA:5A:BA:21:C4:C1:F4:5A:29:11
            X509v3 Authority Key Identifier:
                keyid:53:45:61:AD:EE:66:46:6B:06:3A:56:80:93:87:9F:18:C1:E2:7A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb4fd535c300d54ba9be3ddfdc8df3424c4467d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92142a74-1778-410d-bd44-01664f7a9d1c/3c1bcfeab63689b5d13099c0436bf315a6efd65a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92142a74-1778-410d-bd44-01664f7a9d1c/bb4fd535c300d54ba9be3ddfdc8df3424c4467d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:22:98:30:40:92:40:be:5b:67:19:75:b2:d2:a1:29:c8:bb:
         3d:d4:70:5e:40:4b:bf:e9:e1:94:75:b2:ab:d5:20:af:6b:ee:
         34:bc:b1:80:5f:cf:27:cb:9a:e3:5f:9a:60:07:5b:b3:fe:ce:
         f3:2e:c6:8f:03:ed:be:8c:93:ee:a5:e7:1d:be:0b:d8:1d:1b:
         bb:01:80:74:53:6b:61:52:84:df:a4:31:a9:e7:68:be:8e:ae:
         81:25:48:ff:7c:41:3b:e0:48:78:2f:ea:ba:d1:ec:9e:7d:98:
         94:3e:0d:e7:e3:0a:8f:18:88:6d:12:91:26:14:51:55:92:20:
         a7:ae:7a:55:71:30:a4:4f:54:de:b7:0d:0e:39:75:b9:28:f7:
         ed:e6:7c:5b:42:ec:86:cc:15:7e:04:6f:d4:64:8d:0f:d7:d9:
         ee:8c:5e:a0:db:26:d0:60:48:9f:c0:57:c5:5c:54:d9:f3:30:
         10:f1:bb:6d:49:4f:73:7f:c6:a1:f2:4f:d1:9a:62:07:84:0e:
         05:ec:d5:5c:d1:13:9e:45:8f:e9:79:64:c2:02:06:d2:58:ed:
         20:70:ca:7f:9f:0a:e6:25:1b:cf:c7:1a:10:7e:07:b5:7c:ec:
         56:5a:52:08:8f:3e:92:4c:78:5b:b2:17:4a:cd:06:83:90:b0:
         c1:83:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org