Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9d61ff96cc2947e6494e9d60f1658553ea7b7a30.roa
File:                     9d61ff96cc2947e6494e9d60f1658553ea7b7a30.roa (raw, json)
Hash identifier:          dxKqy8BE2kPv7urqVW7zt2jRZVXHontMHBUigfFO+zc=
Subject key identifier:   AD:16:A9:A9:DC:DF:AB:6A:D1:82:64:35:2C:F2:2F:D6:0F:B9:C3:79
Certificate issuer:       /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial:       0BECCA
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9d61ff96cc2947e6494e9d60f1658553ea7b7a30.roa
Signing time:             Wed 24 Mar 2021 14:44:34 +0000
ROA not before:           Wed 24 Mar 2021 14:44:33 +0000
ROA not after:            Tue 24 Mar 2026 14:44:33 +0000
asID:                     8151
IP address blocks:        187.220.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781514 (0xbecca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Validity
            Not Before: Mar 24 14:44:33 2021 GMT
            Not After : Mar 24 14:44:33 2026 GMT
        Subject: CN=9d61ff96cc2947e6494e9d60f1658553ea7b7a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:89:b0:e9:69:a5:ae:95:38:f1:7c:2a:64:
                    00:d4:fe:43:1d:1e:7c:a0:53:0f:a0:3b:1e:a9:62:
                    18:09:1d:ef:2b:c9:eb:84:e2:93:3a:23:72:7e:b0:
                    41:aa:9d:1d:a3:7c:ab:88:49:87:5e:df:41:70:7f:
                    ef:32:0d:72:0d:79:c2:e4:24:e7:3b:14:0f:ed:ac:
                    ba:46:dc:01:a8:f8:08:91:01:4b:21:66:48:3f:9c:
                    04:e3:91:ba:98:ac:b4:41:26:db:a8:8b:62:61:9c:
                    59:35:fd:64:58:64:cb:1c:26:37:ca:c0:fd:8d:db:
                    a0:09:07:72:92:a0:8e:de:5a:4e:da:b9:f4:d5:de:
                    d5:85:b8:6e:2a:22:d3:5f:e2:5b:c5:19:b5:64:95:
                    e6:49:8d:2f:e4:5f:32:a6:0b:76:c5:cd:55:01:d3:
                    01:73:e2:b5:1a:1f:c4:af:08:55:74:78:9b:4d:ac:
                    ec:7b:49:a2:4e:97:17:ac:17:10:cf:ee:bc:06:e1:
                    d4:91:d6:14:0c:ec:1a:41:a1:57:e0:b5:96:33:84:
                    41:4d:ae:c5:74:6e:52:d1:86:3a:75:ad:ed:52:33:
                    6f:6c:88:6e:18:10:8a:16:ac:ca:58:5c:35:72:e9:
                    21:ac:3a:f5:e2:e1:a7:18:ef:7e:ae:95:af:9b:58:
                    b6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:16:A9:A9:DC:DF:AB:6A:D1:82:64:35:2C:F2:2F:D6:0F:B9:C3:79
            X509v3 Authority Key Identifier:
                keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9d61ff96cc2947e6494e9d60f1658553ea7b7a30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.220.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:89:ec:86:d7:5c:47:3c:ab:56:d0:f0:d5:cf:ca:69:1d:31:
         bf:aa:a1:da:bf:fd:f2:a4:2b:ee:79:88:2b:0a:21:25:5f:12:
         da:57:7f:03:89:7a:45:83:e8:0d:f6:f4:2a:92:70:da:f6:73:
         fb:79:bc:40:18:a8:8b:80:da:87:5a:30:33:18:1b:11:07:32:
         4a:f7:db:23:bc:34:fc:9b:5c:ee:ee:de:c5:17:f6:34:1a:db:
         bd:30:83:ff:c1:16:4c:8a:70:8f:bb:92:ab:29:a6:f7:7b:53:
         a6:9c:9f:66:42:39:0a:c7:fd:4b:f1:31:a6:b9:2a:71:04:ef:
         9a:9f:b9:7c:24:9f:72:e7:dc:d0:79:8a:fe:f3:04:29:63:02:
         d8:3f:99:b6:61:af:b9:cd:95:7c:5a:2b:3c:46:ba:ec:9a:af:
         f8:ec:5f:15:8f:4d:c5:6f:f7:07:8a:92:4c:ff:98:45:c7:d8:
         a3:53:bf:a3:92:25:d7:db:d1:9b:4f:15:60:dd:d0:18:1a:61:
         89:a2:f4:14:84:66:84:e1:f7:5b:bc:39:6f:b2:8a:35:0e:b6:
         3f:c7:08:09:a7:01:41:1c:58:05:6a:2b:da:db:f7:c2:b4:57:
         4a:1c:fd:14:5c:a2:a4:15:ef:51:e7:7f:64:0a:b0:c0:65:81:
         2c:3c:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org