Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/e57a9ed913b9cd5e7ac88c78356e3d1a432e8682.roa
File:                     e57a9ed913b9cd5e7ac88c78356e3d1a432e8682.roa (raw, json)
Hash identifier:          PYrbXYSJUpd7w9wcHcoRnME5gUVf8iFV6rlf8Ie40vY=
Subject key identifier:   7C:74:5C:03:8A:C8:69:9D:26:C4:DC:6F:3E:54:92:AB:66:1C:D5:96
Certificate issuer:       /CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
Certificate serial:       0D13C9
Authority key identifier: D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/e57a9ed913b9cd5e7ac88c78356e3d1a432e8682.roa
Signing time:             Wed 24 Mar 2021 14:40:05 +0000
ROA not before:           Wed 24 Mar 2021 14:40:04 +0000
ROA not after:            Tue 24 Mar 2026 14:40:04 +0000
asID:                     264668
IP address blocks:        164.163.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857033 (0xd13c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
        Validity
            Not Before: Mar 24 14:40:04 2021 GMT
            Not After : Mar 24 14:40:04 2026 GMT
        Subject: CN=e57a9ed913b9cd5e7ac88c78356e3d1a432e8682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:d7:19:70:9f:b2:9d:85:68:1a:c9:8a:76:
                    8c:34:3e:c5:fa:0f:12:1e:bb:2d:45:f3:22:bc:5e:
                    53:1c:6c:59:a1:c6:7a:a7:96:7a:fd:21:3e:b4:d0:
                    01:38:f6:25:03:ac:46:ee:86:11:84:0e:bf:41:1b:
                    7e:f7:b6:f8:79:88:d3:08:09:4d:84:19:95:d5:80:
                    d5:7f:84:3b:ef:79:a2:e2:fb:f0:02:67:c2:46:17:
                    dc:5d:de:52:5e:a2:08:75:df:b7:d1:10:a3:aa:90:
                    91:e0:5a:7b:ca:25:df:59:5b:47:19:d7:8b:44:63:
                    56:7c:47:30:b1:88:4f:32:f1:d4:2c:47:49:a4:83:
                    07:78:eb:53:10:72:ad:4a:aa:ed:ae:01:9a:37:55:
                    90:ab:b5:32:91:58:89:47:42:d3:4c:ae:a0:e9:f1:
                    cf:9e:fc:e2:a2:80:72:0c:7e:e2:9e:27:5e:06:cb:
                    0c:3f:30:d6:8b:51:d9:c8:4f:5e:df:5e:55:a0:ac:
                    5f:19:82:7c:f6:ec:88:15:10:03:8f:32:0c:4d:cc:
                    24:45:66:06:86:cc:91:9f:ac:4e:34:e5:e8:cc:40:
                    04:2f:0c:cf:44:8f:5c:1b:92:6b:c5:5d:fd:ad:be:
                    60:de:73:33:af:e1:d1:b1:ba:0e:b0:22:62:34:42:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:74:5C:03:8A:C8:69:9D:26:C4:DC:6F:3E:54:92:AB:66:1C:D5:96
            X509v3 Authority Key Identifier:
                keyid:D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/e57a9ed913b9cd5e7ac88c78356e3d1a432e8682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/27dd18c956e9fcc73465d89de8aa38f3385acb6e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:cc:7f:93:0c:f7:28:29:fe:4a:aa:cd:06:e6:d4:e1:da:
         da:54:b5:7e:61:93:3d:83:2f:e1:ed:8e:bc:1a:06:82:9e:d7:
         cf:8b:a8:cb:87:b4:a0:27:41:1b:0e:30:7e:79:d2:36:30:8b:
         43:a5:67:b7:4e:af:77:38:94:c3:ac:80:6a:98:ae:83:71:87:
         96:72:de:49:9b:c1:d1:e8:a8:c5:cd:5b:0b:6f:9b:87:f6:d4:
         33:76:c4:8e:b1:c7:3f:d7:67:cb:de:fa:b4:b3:0b:e2:37:f5:
         27:96:12:dc:df:7d:fe:cd:6f:ef:d2:19:23:d3:67:26:c9:a5:
         19:77:25:13:c5:96:ff:62:90:f9:51:be:7c:dd:61:54:67:7c:
         40:62:b9:4a:c1:03:c5:21:82:ce:be:2c:9f:87:dc:93:08:bd:
         43:5a:fe:0e:f4:4f:65:b3:0a:4f:7a:d5:6a:4b:d0:44:16:a9:
         0a:86:ef:24:2e:a8:4d:b7:c3:bf:1e:79:07:a3:31:76:24:51:
         e5:01:94:73:bf:00:51:c0:c4:dd:80:46:74:12:78:5b:ca:ff:
         97:e2:e5:7a:bc:ab:4f:48:a2:85:ed:cc:5a:9a:85:84:ec:2e:
         da:44:dc:43:8d:be:db:5b:2f:7c:6c:66:f6:84:d8:12:18:9a:
         c0:f6:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org