Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/391c1b64cc3e3f2ad410dd704fd9d9fef263069b.roa
File:                     391c1b64cc3e3f2ad410dd704fd9d9fef263069b.roa (raw, json)
Hash identifier:          A3MV1R9FLtZLA8Nzb4OwKepkrslaoO27xgXSU5mliPI=
Subject key identifier:   61:39:47:88:22:F6:DD:2D:D3:0B:33:91:F7:19:AD:E0:82:80:A6:B4
Certificate issuer:       /CN=cc1e84cc9e304aced62b019d9b2c50e9387e605f
Certificate serial:       087C
Authority key identifier: F6:BA:F4:16:80:14:29:12:8C:64:54:AB:D0:5B:4F:11:A8:AF:EB:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc1e84cc9e304aced62b019d9b2c50e9387e605f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/391c1b64cc3e3f2ad410dd704fd9d9fef263069b.roa
Signing time:             Mon 13 Jun 2022 23:34:43 +0000
ROA not before:           Mon 13 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     265823
IP address blocks:        132.255.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1e84cc9e304aced62b019d9b2c50e9387e605f
        Validity
            Not Before: Jun 13 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=391c1b64cc3e3f2ad410dd704fd9d9fef263069b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:08:d5:26:58:23:3f:ec:62:9d:d9:26:7a:
                    7e:1c:28:7f:8b:db:00:a2:80:61:33:35:1e:e5:e9:
                    25:0c:7a:e4:8c:a9:7a:6d:f1:5b:19:ec:42:26:fb:
                    8f:58:a3:23:71:f0:b9:dd:6c:23:dc:d4:ea:8f:64:
                    b4:ab:e8:cb:db:4b:64:65:9e:e0:91:d2:1b:96:8d:
                    33:9a:3a:7f:cd:e4:ab:4a:8d:0a:9d:cd:63:08:cb:
                    2a:76:3f:a9:19:4d:82:8a:80:9d:a5:4d:81:7d:58:
                    03:fd:8a:98:47:ce:b4:df:9f:ab:83:0c:8e:68:0c:
                    62:a3:3c:2a:35:5c:3f:03:35:f7:99:20:0f:d9:e4:
                    27:fc:17:98:a8:f1:29:c3:e3:48:2d:f1:55:94:76:
                    f8:23:d6:0e:48:70:2e:cb:0d:ee:27:74:09:88:1c:
                    2d:5c:bb:0d:4a:79:62:cd:be:c9:63:e6:a8:85:3a:
                    1a:78:e9:0a:ec:3f:eb:94:a3:cd:1b:52:73:e9:8d:
                    1e:55:cf:8e:8f:bf:de:97:7e:35:e9:ed:15:9d:30:
                    5e:3d:90:ca:92:fc:3f:f5:7a:8d:b6:1f:09:ae:69:
                    02:70:c1:b4:b9:5a:99:6b:76:8d:a3:8f:c2:b0:51:
                    ac:51:e6:3b:67:52:18:e4:23:e3:9a:fe:91:6c:b0:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:39:47:88:22:F6:DD:2D:D3:0B:33:91:F7:19:AD:E0:82:80:A6:B4
            X509v3 Authority Key Identifier:
                keyid:F6:BA:F4:16:80:14:29:12:8C:64:54:AB:D0:5B:4F:11:A8:AF:EB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc1e84cc9e304aced62b019d9b2c50e9387e605f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/391c1b64cc3e3f2ad410dd704fd9d9fef263069b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/cc1e84cc9e304aced62b019d9b2c50e9387e605f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:53:9e:fd:07:c8:9a:34:fa:59:86:97:0f:1a:b4:82:78:da:
         d1:98:ba:fe:26:e8:84:f1:e6:99:77:94:4b:87:5a:f6:fe:8f:
         cf:72:77:c7:b9:d2:ac:a5:d3:f8:f1:2f:f4:fc:e4:43:14:89:
         f6:c5:c0:4a:9e:9a:05:f4:94:13:94:6f:c3:ca:38:08:30:0e:
         9f:cc:57:40:ab:98:c7:45:db:a2:b9:81:8f:ee:16:e2:e7:ca:
         3f:2e:d8:b5:4f:d4:e8:04:70:41:3a:42:cf:5c:41:42:14:af:
         db:8f:fc:0d:38:bb:76:50:61:5c:06:ca:08:3b:20:a5:68:7e:
         ce:9f:43:5d:2d:c5:db:06:39:98:a9:ec:24:32:ed:ca:71:ca:
         e5:35:f7:59:4b:68:ed:78:56:03:8f:51:10:fc:41:0e:dc:53:
         1f:3d:2a:97:2c:4f:3a:ab:13:34:00:9b:d5:f6:db:08:e3:90:
         8a:a0:f0:fa:dd:1e:d9:0e:3c:8f:50:02:18:d7:30:9b:dd:75:
         86:7a:87:e1:d3:f8:ab:f7:a6:5a:2b:72:4e:bc:84:c6:eb:55:
         25:22:36:dc:3b:ef:cb:4f:ca:c1:de:4c:71:67:d6:11:0b:60:
         94:50:73:53:bb:af:74:cb:cc:96:25:dc:cb:7e:5c:ce:84:c6:
         28:5d:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org