Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/5dd07813ea99468c3562c7a3b25c279367c672fd.roa
File:                     5dd07813ea99468c3562c7a3b25c279367c672fd.roa (raw, json)
Hash identifier:          ZTO0ChcfU6yQHVqbcGICZ1Mnl0+KTEiX+DohEwr5f3I=
Subject key identifier:   F5:41:08:E7:37:5D:9C:21:A4:95:EE:04:3A:69:B8:F5:BB:97:04:B3
Certificate issuer:       /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial:       0BEE86
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/5dd07813ea99468c3562c7a3b25c279367c672fd.roa
Signing time:             Wed 24 Mar 2021 14:44:34 +0000
ROA not before:           Wed 24 Mar 2021 14:44:33 +0000
ROA not after:            Tue 24 Mar 2026 14:44:33 +0000
asID:                     8151
IP address blocks:        187.221.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781958 (0xbee86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Validity
            Not Before: Mar 24 14:44:33 2021 GMT
            Not After : Mar 24 14:44:33 2026 GMT
        Subject: CN=5dd07813ea99468c3562c7a3b25c279367c672fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d5:76:d1:34:9a:97:a7:75:98:64:d3:cb:1b:
                    dd:13:ce:28:9e:b1:c2:36:cb:a5:cd:b2:3e:08:43:
                    19:74:6d:ff:44:ac:3d:8c:ca:67:db:58:7f:49:45:
                    79:51:6d:4d:43:01:9c:02:7e:4e:26:f3:5d:4e:2f:
                    ac:b6:3c:c4:19:76:13:4b:bc:f0:28:bb:8e:29:fd:
                    26:8d:05:a2:28:03:99:50:1d:5f:49:30:19:a7:8a:
                    53:a1:25:67:2c:25:6a:33:6d:fd:0e:85:35:0d:76:
                    82:a6:0f:27:08:2a:94:42:f7:c3:34:44:57:9b:1c:
                    ea:b1:07:b9:12:0a:af:23:11:03:86:4f:35:38:27:
                    0e:44:e9:c2:7c:3d:61:81:d4:17:0d:c5:ad:cd:84:
                    3a:a2:a0:11:db:48:1e:70:57:20:0e:f9:75:ba:ff:
                    1f:d0:ba:9e:8b:fb:ce:c7:b1:44:63:61:1f:59:11:
                    46:76:7e:08:78:32:a0:d4:10:0b:53:22:d8:dd:cf:
                    ff:94:b2:ec:1a:ad:26:8e:fd:fd:8d:8d:c0:84:6e:
                    4d:2a:22:59:2d:74:14:49:76:14:20:56:f9:f8:10:
                    ae:3e:32:50:03:ad:1d:c9:c7:da:fd:b8:a5:66:7f:
                    97:8f:47:d4:42:61:85:63:f3:c3:d6:96:a6:b1:da:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:41:08:E7:37:5D:9C:21:A4:95:EE:04:3A:69:B8:F5:BB:97:04:B3
            X509v3 Authority Key Identifier:
                keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/5dd07813ea99468c3562c7a3b25c279367c672fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:69:af:6f:92:c5:2c:23:f3:27:40:3a:43:63:66:b0:22:
         5b:e2:cc:08:56:06:0d:e6:9b:7a:0d:b0:df:c6:8e:f9:3b:11:
         da:52:62:e4:bf:63:18:43:af:18:47:ad:b1:0b:06:65:da:c0:
         7e:be:2d:99:c7:13:3d:de:15:a0:97:ab:61:cb:b1:1e:da:de:
         fe:cb:a1:91:a6:78:c2:0e:8f:67:dd:8c:0a:10:74:e8:35:86:
         3d:32:3b:49:ee:a1:9c:40:4f:26:a0:47:3d:04:13:bc:1d:91:
         e6:d6:a0:98:6e:f1:90:97:8b:a6:c6:32:41:65:19:a5:00:3e:
         f2:69:df:3e:38:53:57:4f:ed:56:45:b1:7d:2c:8c:d6:df:bd:
         be:45:fc:87:f0:9e:29:e6:b4:88:c2:5a:f1:a8:9d:33:88:fa:
         f3:e7:51:3a:f5:a0:08:46:f6:b8:8b:d1:a5:06:fb:8c:ba:d9:
         35:2d:ed:16:79:6f:12:5c:c4:b4:7a:4f:91:62:eb:c7:f8:85:
         7c:2d:f5:a3:fe:e8:9d:a7:53:df:2b:f1:81:d6:cc:7f:66:44:
         24:01:a0:da:d4:10:de:ab:d3:25:19:12:32:eb:c9:62:30:af:
         ce:34:71:16:4e:d4:8f:f5:a0:32:df:79:f2:ac:d5:41:61:49:
         ee:bd:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org