Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/196726917e797d06221f33ce11773ca09a4ebd44.roa
File:                     196726917e797d06221f33ce11773ca09a4ebd44.roa (raw, json)
Hash identifier:          H05tXp0oCKjRv3xazWclJ0pRtey5boT7ZkvW0rr2vIo=
Subject key identifier:   05:8B:D9:F8:D3:EC:2D:F3:CD:2D:D0:6D:E7:4D:2B:BA:21:43:7A:5A
Certificate issuer:       /CN=ebff371d4ac1a6161db3e53f836c346c32163491
Certificate serial:       0642
Authority key identifier: 76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/196726917e797d06221f33ce11773ca09a4ebd44.roa
Signing time:             Tue 20 Apr 2021 14:44:01 +0000
ROA not before:           Tue 20 Apr 2021 03:00:00 +0000
ROA not after:            Thu 20 Apr 2023 03:00:00 +0000
asID:                     61509
IP address blocks:        143.255.136.0/22 maxlen: 22
                          170.83.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebff371d4ac1a6161db3e53f836c346c32163491
        Validity
            Not Before: Apr 20 03:00:00 2021 GMT
            Not After : Apr 20 03:00:00 2023 GMT
        Subject: CN=196726917e797d06221f33ce11773ca09a4ebd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:82:d4:a5:ea:90:38:df:47:34:e0:ef:dc:
                    ec:8a:53:f4:3e:41:5e:3f:6e:25:93:71:a7:a5:af:
                    a2:b4:05:2a:55:a9:d9:fe:7e:bf:3a:1e:3d:50:ac:
                    bb:d2:56:81:47:25:71:7a:3f:74:5f:e6:91:8f:db:
                    d4:d0:98:1b:b6:f8:b4:a3:12:d3:9f:96:19:29:f6:
                    d8:17:e0:38:0d:8e:0c:a7:14:94:a2:51:e2:be:5e:
                    df:58:bb:57:0e:ef:cc:15:03:72:a7:64:ce:15:fd:
                    4d:a3:35:0d:a0:a7:eb:0e:2b:61:d9:9e:f0:fb:92:
                    de:c6:a5:be:cc:32:7f:c9:fb:28:64:fa:c1:48:0d:
                    aa:63:73:df:55:84:eb:1a:ad:59:32:0a:b1:fb:fc:
                    a8:72:e6:12:20:0f:d3:86:06:de:b1:ef:09:d1:7a:
                    67:76:8f:90:d7:99:68:62:6c:30:7b:8f:8c:60:cb:
                    56:43:62:92:ad:a9:32:6e:eb:ef:cb:67:b0:b1:5f:
                    05:5c:ab:7a:24:5d:4f:23:f1:6b:8c:f4:60:a5:fa:
                    10:1c:83:02:06:9b:7b:6a:08:6c:aa:0f:79:5b:e2:
                    bc:f3:c2:86:24:4e:e1:fa:1e:7b:a0:e4:64:c8:bf:
                    e9:81:6b:2f:ce:d8:83:c9:07:4b:87:1c:b4:2c:02:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8B:D9:F8:D3:EC:2D:F3:CD:2D:D0:6D:E7:4D:2B:BA:21:43:7A:5A
            X509v3 Authority Key Identifier:
                keyid:76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/196726917e797d06221f33ce11773ca09a4ebd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/ebff371d4ac1a6161db3e53f836c346c32163491.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.136.0/22
                  170.83.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:65:e7:18:d4:f6:b1:98:62:02:4e:9f:ba:c6:63:12:7e:
         3b:87:f8:a2:9f:6d:4e:c0:05:17:cd:97:8e:bb:23:e3:aa:2c:
         28:aa:9b:8f:48:2d:bc:eb:d3:dd:16:8e:85:b2:ac:fd:07:dd:
         1c:44:3a:3d:c0:1b:e1:a5:b1:0a:88:d8:f2:e2:8d:dd:57:66:
         33:d7:00:69:c9:d4:f4:22:ab:4f:67:65:dc:46:f3:ad:14:22:
         30:ea:8c:29:76:e2:d1:07:4d:b5:c8:a5:e1:8e:05:04:05:71:
         97:30:49:12:6a:dd:e1:08:dd:7e:6a:d6:e0:35:44:d3:0f:75:
         99:17:b6:74:89:37:86:39:e0:1c:66:ac:f7:ef:4f:95:7e:20:
         8c:ba:f5:4d:d7:24:ff:9a:4b:20:51:32:ce:cd:43:a4:b8:29:
         49:37:21:30:4b:0f:e9:8e:07:49:53:4d:2f:b6:16:07:af:aa:
         1c:08:c6:2c:ba:47:0a:ed:cd:6f:94:fe:4e:09:1c:61:80:c4:
         eb:4b:4d:2d:1a:e8:1b:00:97:fd:b9:78:c9:9b:bd:7e:cb:9b:
         b7:12:9c:40:de:13:96:0c:9c:b3:21:9f:61:6b:29:dd:e0:dc:
         0f:ed:da:1c:57:b6:35:a3:45:6e:6f:1f:e5:54:6b:d6:ec:b3:
         da:a8:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org