Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ade9823-155a-4d28-a290-701014f0dfab/50de67a52d354ec76f1c4a417593553bf4c99bab.roa
File:                     50de67a52d354ec76f1c4a417593553bf4c99bab.roa (raw, json)
Hash identifier:          C6zNxOvqlz0/qQdv+PicMbe3ETAnsp2CqiZ85mD1IAQ=
Subject key identifier:   5E:2D:DA:76:A6:CA:3B:40:A8:5A:E6:2D:46:30:F5:74:D8:2C:33:A7
Certificate issuer:       /CN=78ce920229a719aff4086516467be9df09055d5b
Certificate serial:       0D1308
Authority key identifier: D5:92:46:AB:EC:C9:8F:BC:65:00:78:CE:38:C2:04:7C:72:40:C5:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78ce920229a719aff4086516467be9df09055d5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ade9823-155a-4d28-a290-701014f0dfab/50de67a52d354ec76f1c4a417593553bf4c99bab.roa
Signing time:             Wed 24 Mar 2021 14:37:12 +0000
ROA not before:           Wed 24 Mar 2021 14:37:10 +0000
ROA not after:            Tue 24 Mar 2026 14:37:10 +0000
asID:                     396998
IP address blocks:        201.131.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856840 (0xd1308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ce920229a719aff4086516467be9df09055d5b
        Validity
            Not Before: Mar 24 14:37:10 2021 GMT
            Not After : Mar 24 14:37:10 2026 GMT
        Subject: CN=50de67a52d354ec76f1c4a417593553bf4c99bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:7e:33:75:55:a6:0c:cd:6b:aa:bc:3f:70:
                    6d:a6:3f:89:c0:82:a3:2c:10:83:37:d3:17:37:cd:
                    af:16:70:58:95:e0:67:e5:86:e7:e4:7e:92:63:91:
                    89:0b:17:91:6d:1e:a7:80:15:c6:62:d1:35:23:f2:
                    6c:2d:7d:f2:18:27:12:9b:34:96:5a:9c:97:d2:0d:
                    fd:bd:04:e4:a2:54:c5:41:b7:80:4e:30:a6:a5:2e:
                    23:ab:42:81:5a:2f:26:79:59:b0:fe:c2:82:b5:11:
                    10:2b:0f:0d:5e:54:73:3b:57:a2:b0:6c:53:9a:8b:
                    1e:8f:59:a7:6c:09:14:58:84:1b:6e:d5:9f:b8:da:
                    37:e9:4f:d0:39:00:86:60:44:54:d5:a2:40:65:24:
                    91:26:d8:c7:07:33:9c:f4:29:6a:ac:e5:00:5b:b8:
                    f1:70:c9:e5:39:a3:00:25:0c:7b:c3:15:c5:62:04:
                    82:ba:3d:23:1f:5b:d6:09:de:40:93:a6:ff:8d:e7:
                    fe:79:19:07:0c:b2:1f:05:23:75:02:45:a4:fd:f5:
                    9c:30:b7:98:fa:42:42:a8:04:96:a4:06:14:ec:9c:
                    fb:8e:42:57:78:d7:7a:d9:2c:89:0b:ae:5f:37:17:
                    53:5f:92:cd:74:40:0b:e3:8e:a6:8c:4d:c6:f8:af:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2D:DA:76:A6:CA:3B:40:A8:5A:E6:2D:46:30:F5:74:D8:2C:33:A7
            X509v3 Authority Key Identifier:
                keyid:D5:92:46:AB:EC:C9:8F:BC:65:00:78:CE:38:C2:04:7C:72:40:C5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78ce920229a719aff4086516467be9df09055d5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ade9823-155a-4d28-a290-701014f0dfab/50de67a52d354ec76f1c4a417593553bf4c99bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ade9823-155a-4d28-a290-701014f0dfab/78ce920229a719aff4086516467be9df09055d5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2c:49:5a:e3:17:bb:4b:6d:e1:dc:c7:92:dd:7d:87:19:5a:
         45:a8:26:d3:58:19:09:5e:0b:51:60:77:ba:84:1d:eb:e3:d0:
         13:48:74:e0:27:98:cd:12:67:33:c8:d1:15:cf:79:f1:ac:5f:
         e7:59:4e:cc:f3:93:42:cd:d0:30:af:88:91:70:82:b2:65:4d:
         06:e3:9c:d1:3d:76:3a:54:db:a1:09:58:f0:a6:3b:51:63:24:
         d6:f3:92:21:85:92:30:b8:3b:8c:99:23:de:b2:d4:49:29:c7:
         15:ec:38:56:54:b4:8e:ca:99:fa:28:d9:49:cf:d8:45:b9:87:
         c0:6b:2f:f0:78:00:be:06:c0:2c:5b:ea:6d:30:41:4b:8e:aa:
         2b:11:51:c3:e9:76:e8:a6:a9:1a:fd:8d:dd:7d:eb:6a:13:42:
         9e:09:13:3d:5f:d1:19:77:83:a5:9c:97:91:ba:e9:0e:2b:b6:
         f3:99:e8:97:02:e0:61:89:75:8c:ff:17:a7:a5:2c:c9:57:dd:
         61:5e:3f:4b:b3:2c:1c:02:2d:a7:30:1c:1a:5c:e1:8e:aa:53:
         33:0a:66:98:32:ba:a6:92:65:f6:c0:0d:b7:cd:aa:0f:dc:be:
         ac:9f:71:98:a7:cd:e9:6c:4e:42:ee:af:0d:03:e2:94:1c:42:
         2d:09:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org