Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/641a4d2757099c0ad711a03167d4b6f35e4e831a.roa
File:                     641a4d2757099c0ad711a03167d4b6f35e4e831a.roa (raw, json)
Hash identifier:          sZk4GTc5ubJ3rWcTrBqK5Pgw1XdSeFwucvgiSq2UoQ4=
Subject key identifier:   C5:66:BD:DB:28:96:3F:BA:82:79:EA:07:E2:8D:09:41:B1:A5:88:79
Certificate issuer:       /CN=9c12854c0688e59705e41e3c1e61e06fe3bdebc3
Certificate serial:       0BBA3A
Authority key identifier: 5B:6E:D2:E6:53:ED:49:5A:76:EB:35:CD:73:4A:72:84:C2:91:17:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/641a4d2757099c0ad711a03167d4b6f35e4e831a.roa
Signing time:             Wed 24 Mar 2021 14:30:36 +0000
ROA not before:           Wed 24 Mar 2021 14:30:36 +0000
ROA not after:            Tue 24 Mar 2026 14:30:36 +0000
asID:                     28109
IP address blocks:        190.124.192.0/20 maxlen: 20
                          190.124.208.0/21 maxlen: 21
                          2801:0:90::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768570 (0xbba3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12854c0688e59705e41e3c1e61e06fe3bdebc3
        Validity
            Not Before: Mar 24 14:30:36 2021 GMT
            Not After : Mar 24 14:30:36 2026 GMT
        Subject: CN=641a4d2757099c0ad711a03167d4b6f35e4e831a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:1e:a8:cb:b1:e7:a8:c0:7e:7b:7b:55:a2:
                    c5:7f:e3:c0:0f:7c:75:26:15:a6:e9:79:ea:2b:ca:
                    f6:ec:7b:c4:f5:3a:57:86:64:a0:36:8f:bc:f6:3f:
                    be:ad:59:8e:91:c0:e3:fe:b2:01:70:a4:e1:86:3f:
                    18:0e:db:20:3c:58:35:83:51:cb:1d:29:07:1f:e9:
                    35:10:3c:9d:3e:e0:11:95:e7:0a:b9:2a:3d:72:b0:
                    b0:fe:42:d6:dd:b6:ba:a3:39:7a:9e:7a:38:ab:07:
                    c0:8f:59:d7:f3:64:07:7b:d7:2b:ad:e2:c5:14:bc:
                    f3:7a:2a:bb:60:a3:4e:1f:95:51:37:d6:04:a8:07:
                    34:20:3c:f1:1a:c7:6f:4b:9f:4a:04:29:e5:75:89:
                    6e:b2:b0:52:d6:2d:d2:ea:1f:a1:79:a6:cb:7e:ae:
                    01:43:88:30:c0:a2:59:39:e3:d6:6e:10:4a:6c:2a:
                    fa:9d:47:66:97:0d:76:b3:b1:ff:8c:bb:ec:42:a0:
                    4e:18:89:22:67:78:97:12:11:9f:fd:c3:61:29:67:
                    4e:80:a2:2e:a4:2f:18:e7:6f:d8:1b:00:69:c9:51:
                    d4:c3:15:23:6e:12:e5:a6:89:9f:e2:47:01:14:d6:
                    28:51:c6:80:a2:2f:0e:1f:ff:16:8f:92:7d:a1:45:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:66:BD:DB:28:96:3F:BA:82:79:EA:07:E2:8D:09:41:B1:A5:88:79
            X509v3 Authority Key Identifier:
                keyid:5B:6E:D2:E6:53:ED:49:5A:76:EB:35:CD:73:4A:72:84:C2:91:17:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/641a4d2757099c0ad711a03167d4b6f35e4e831a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.192.0-190.124.215.255
                IPv6:
                  2801:0:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:f0:80:a9:9f:29:88:b2:29:a7:54:55:34:c8:e1:21:6a:
         4e:fe:de:61:6b:62:6d:4a:a1:2d:88:f0:cf:9d:a8:88:61:c2:
         b6:12:f1:5a:a6:bd:28:5d:52:42:71:02:aa:37:1c:04:ff:fb:
         df:c9:85:45:da:72:a0:7c:5a:11:e3:29:de:f0:40:a6:ca:4f:
         0a:59:aa:44:00:8e:5c:22:c2:1f:3d:87:c1:80:7d:90:f7:6e:
         37:00:34:a8:85:8b:99:b1:36:bf:ae:2c:61:07:61:e2:7b:06:
         02:0e:55:42:af:34:1c:74:83:7a:ac:bf:a5:63:86:e7:a3:00:
         e4:52:96:98:c4:a9:cd:82:2b:de:a7:46:d0:f4:4d:9b:55:7a:
         68:04:a0:88:9b:80:c4:50:d7:96:9f:4f:ef:97:80:71:a5:3d:
         44:e1:db:83:4d:8a:c5:a2:39:a8:20:bb:97:97:da:78:b2:e2:
         53:42:d6:6b:9c:54:0b:e3:e7:18:1b:85:cc:5b:7f:ea:a3:d8:
         a1:f2:6a:52:3f:e2:2d:f4:1f:2f:31:7d:69:7b:f2:11:4c:81:
         f3:bc:4f:a1:9a:78:6a:07:5a:18:22:8e:3a:c3:b2:45:de:1a:
         36:f1:c0:d7:44:eb:d0:02:77:e5:2d:8d:6d:f5:39:1e:a4:df:
         18:80:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org