Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/e034e8a3ed89b769b634257e1d1b8b93e59ddcfc.roa
File:                     e034e8a3ed89b769b634257e1d1b8b93e59ddcfc.roa (raw, json)
Hash identifier:          tF9fBrP2ND3I9kUHSnAK1vnwgRclaxlIE6Y4Icp4vHg=
Subject key identifier:   36:5F:DA:8F:F9:F4:9B:36:64:56:7E:39:20:82:F9:62:86:EF:21:57
Certificate issuer:       /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial:       0BF679
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/e034e8a3ed89b769b634257e1d1b8b93e59ddcfc.roa
Signing time:             Wed 24 Mar 2021 14:44:34 +0000
ROA not before:           Wed 24 Mar 2021 14:44:33 +0000
ROA not after:            Tue 24 Mar 2026 14:44:33 +0000
asID:                     8151
IP address blocks:        189.235.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783993 (0xbf679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Validity
            Not Before: Mar 24 14:44:33 2021 GMT
            Not After : Mar 24 14:44:33 2026 GMT
        Subject: CN=e034e8a3ed89b769b634257e1d1b8b93e59ddcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:7d:79:9e:4f:50:02:e6:9f:e3:fe:9f:77:
                    f5:3e:84:ca:85:b3:00:f2:12:70:ec:ab:33:b7:7a:
                    4a:da:f6:a1:4b:26:ed:b1:ba:6f:fe:39:61:48:69:
                    fe:53:e6:d6:ff:14:0d:da:31:59:31:d2:d8:87:52:
                    d2:e7:f4:dc:f8:ad:2b:a4:3b:e4:0f:da:db:b3:b9:
                    69:a7:07:58:ef:50:2c:b2:6e:5e:d1:80:3f:02:39:
                    05:c1:5a:49:51:09:dc:c5:d9:33:e7:33:25:52:bc:
                    09:d1:82:25:69:cb:5a:61:13:95:b6:7a:e3:e8:b4:
                    1e:54:06:1e:df:fe:4f:54:cf:51:3f:dd:04:fe:be:
                    95:4e:21:c2:e7:fb:27:dc:c2:67:02:54:84:ba:d7:
                    28:82:46:75:b0:0a:7d:9a:91:fd:60:7f:da:6c:ed:
                    ca:2e:e8:f7:92:a8:c3:34:32:a0:d5:26:ab:8e:b3:
                    a3:da:e5:53:c1:2c:a1:86:75:43:17:07:f9:a5:c7:
                    43:29:a9:17:1d:19:c8:e4:b4:68:f1:2b:05:8f:10:
                    65:04:78:b3:d8:9f:41:16:5f:fb:af:e4:fc:32:b7:
                    e9:35:56:48:c4:72:64:97:76:6d:ff:fe:e5:22:ac:
                    d6:71:21:92:bf:1e:c5:d2:67:99:87:47:a1:4b:9e:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5F:DA:8F:F9:F4:9B:36:64:56:7E:39:20:82:F9:62:86:EF:21:57
            X509v3 Authority Key Identifier:
                keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/e034e8a3ed89b769b634257e1d1b8b93e59ddcfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.235.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:8b:f0:53:da:2d:db:6f:39:29:f4:7c:57:ef:16:0b:11:1b:
         9c:e2:c5:ea:ac:a0:64:72:72:a0:4a:30:04:e1:db:8a:89:8f:
         60:e7:88:ad:bb:5f:e2:8b:e7:06:ed:31:a9:4b:82:5b:2e:f6:
         aa:2d:32:94:6e:fa:7c:9a:99:97:17:0a:7f:03:64:22:bc:44:
         2f:4b:5b:45:cb:dc:c9:49:42:f7:d2:17:07:02:36:b8:eb:f9:
         41:99:3c:93:f1:a7:0d:c6:43:10:d7:ee:32:55:92:d7:df:bb:
         f5:9b:af:23:b2:be:18:b0:db:97:2e:97:f9:64:89:3c:4c:26:
         39:e1:36:aa:a8:f3:3a:c3:8d:fa:60:96:ef:0e:61:67:42:12:
         39:13:ad:62:b7:6c:de:53:3b:88:34:96:04:ec:77:64:94:dc:
         55:de:ba:f6:37:75:72:76:c1:6f:fe:68:52:b8:4c:5a:82:14:
         5a:8b:b4:8b:1b:9f:1d:01:c7:cb:d2:3f:cc:05:e6:8d:e2:1c:
         29:e9:cf:97:25:bd:42:aa:71:2f:c9:25:81:f0:b5:d2:55:cd:
         0d:0b:a0:78:3c:d6:03:7a:fa:50:ac:94:ff:91:ff:b3:23:f0:
         35:40:b7:01:4f:27:e6:ae:42:d3:8f:ac:81:bb:96:f1:19:a5:
         20:d2:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org