Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9ab34a95fdedc5985c9f8c04657e3177ee569135.roa
File:                     9ab34a95fdedc5985c9f8c04657e3177ee569135.roa (raw, json)
Hash identifier:          p6i7AAX76dv+QT8S8OiQk3TRQB93ypq66QqtVWQGWuM=
Subject key identifier:   12:12:69:FA:AE:35:56:9E:14:19:E7:96:AB:DC:9F:C4:5C:73:38:FD
Certificate issuer:       /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial:       0BF1D4
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9ab34a95fdedc5985c9f8c04657e3177ee569135.roa
Signing time:             Wed 24 Mar 2021 14:44:34 +0000
ROA not before:           Wed 24 Mar 2021 14:44:33 +0000
ROA not after:            Tue 24 Mar 2026 14:44:33 +0000
asID:                     8151
IP address blocks:        187.222.0.0/16 maxlen: 24
                          187.223.0.0/16 maxlen: 24
                          187.224.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782804 (0xbf1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Validity
            Not Before: Mar 24 14:44:33 2021 GMT
            Not After : Mar 24 14:44:33 2026 GMT
        Subject: CN=9ab34a95fdedc5985c9f8c04657e3177ee569135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2f:71:e9:92:0e:3b:5f:bc:95:7a:15:89:5e:
                    91:9f:8d:ca:04:7f:d3:b0:7b:d8:a2:c7:29:b6:3e:
                    d9:50:61:38:3a:a2:4b:14:e4:12:0d:92:a6:65:bc:
                    5d:18:73:d3:e7:f6:7a:5b:77:1e:3e:85:ba:bc:dd:
                    b3:f7:75:5e:11:81:8b:46:ee:4d:56:73:ef:7e:aa:
                    cd:b6:d7:ed:7f:ac:b0:cd:d1:de:ae:a9:b8:85:34:
                    df:0f:17:3c:05:fb:2e:c3:79:fa:e6:0a:8e:be:21:
                    a2:9e:97:ce:e6:8d:c2:de:b5:be:d6:a3:b3:88:06:
                    5e:e4:ab:5a:15:06:1f:36:8b:10:ad:e0:4e:87:c0:
                    e6:49:34:9e:5e:1c:fc:c5:8a:78:4e:f3:e8:b7:0f:
                    fb:c3:3b:9f:e9:f0:80:36:4d:99:b6:cb:b3:cc:76:
                    8a:ea:0c:ca:d2:d0:9c:44:df:f3:a3:f4:b0:20:24:
                    b8:1f:83:ad:c7:d7:81:10:61:88:b6:10:c0:f7:29:
                    50:15:9c:93:a9:f8:05:34:66:b4:d6:db:e7:68:af:
                    c9:fd:d2:72:ca:15:16:e4:3b:ce:4f:bc:f3:fc:a9:
                    26:eb:46:7a:2c:5d:67:93:16:80:4f:6a:b7:ab:91:
                    48:ed:d4:96:98:40:01:25:8b:46:38:af:4d:e2:34:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:12:69:FA:AE:35:56:9E:14:19:E7:96:AB:DC:9F:C4:5C:73:38:FD
            X509v3 Authority Key Identifier:
                keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9ab34a95fdedc5985c9f8c04657e3177ee569135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.222.0.0-187.224.255.255

    Signature Algorithm: sha256WithRSAEncryption
         31:71:bb:84:51:01:60:ad:90:e9:86:16:3c:03:49:2b:87:ed:
         36:78:f6:57:56:38:6f:c1:50:60:01:66:58:56:eb:fe:b3:99:
         d2:e5:fc:2b:37:67:a6:be:55:7c:6c:42:a0:e1:9b:e4:16:2a:
         c7:b7:22:9e:5d:4b:91:c5:94:74:05:64:ef:5a:2c:ab:26:88:
         13:5d:af:fa:19:16:bb:e5:91:19:f5:bc:fd:67:f8:ae:f9:e7:
         97:fb:50:cb:91:49:44:6c:5e:21:4b:2e:9f:a3:08:e3:e0:58:
         e2:63:4d:f6:39:1f:0d:e7:02:18:2e:d6:1a:43:a6:eb:37:81:
         0d:c0:7f:2d:ba:48:b2:b1:b7:c3:0c:1f:be:09:38:1b:b0:f5:
         0f:d3:eb:2f:d4:70:2f:73:97:ea:9a:0a:db:02:bf:93:80:2c:
         7a:3e:df:db:a7:87:33:33:36:9f:e9:5b:ae:e3:5f:45:1e:b6:
         3b:bf:a2:ff:35:41:84:af:41:0c:3e:0f:5e:3f:4a:13:d2:19:
         39:08:0d:56:04:fa:b6:81:2d:45:5d:59:06:e9:0b:07:c2:40:
         87:08:68:37:49:60:d0:7f:36:1a:36:c7:ea:ee:c7:41:cf:b3:
         dd:17:8d:a2:24:c3:da:b0:36:4e:0a:3e:33:99:6c:54:c7:44:
         23:ce:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org