Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/2b6e1e9ece461b8e0f8f3418028bb1012e52ad28.roa
File:                     2b6e1e9ece461b8e0f8f3418028bb1012e52ad28.roa (raw, json)
Hash identifier:          0zWNV2b2XrcfeByJl8DFv9FMn7YwGhBjOjoaJ+bDCRc=
Subject key identifier:   F0:64:78:48:26:48:A5:21:0B:69:13:F5:EE:79:E4:C5:4A:1D:03:51
Certificate issuer:       /CN=adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8
Certificate serial:       0DC46B
Authority key identifier: 5A:89:C0:83:EE:24:78:13:17:0C:71:9F:E7:2F:9B:FF:29:BA:1B:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/2b6e1e9ece461b8e0f8f3418028bb1012e52ad28.roa
Signing time:             Wed 24 Mar 2021 14:41:23 +0000
ROA not before:           Wed 24 Mar 2021 14:41:23 +0000
ROA not after:            Tue 24 Mar 2026 14:41:23 +0000
asID:                     27947
IP address blocks:        192.188.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902251 (0xdc46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8
        Validity
            Not Before: Mar 24 14:41:23 2021 GMT
            Not After : Mar 24 14:41:23 2026 GMT
        Subject: CN=2b6e1e9ece461b8e0f8f3418028bb1012e52ad28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:3d:ad:f5:1f:49:95:e4:60:2a:a8:e5:d9:
                    2d:1a:d4:70:89:6f:b6:4f:af:d7:c9:76:ce:9b:19:
                    11:31:03:35:f4:41:4d:da:78:38:15:f5:08:53:30:
                    0f:4f:68:a1:a4:eb:c0:57:bf:dc:22:ca:b7:7a:ef:
                    85:0c:60:42:92:da:c7:ed:2a:be:30:8f:2c:63:e9:
                    49:0f:60:9f:1f:73:92:22:b1:a0:04:5c:93:9d:25:
                    87:43:eb:d9:8c:82:cc:20:24:ca:4f:1e:6e:b0:44:
                    5d:3e:2b:76:ef:e8:6b:75:65:cb:3f:d3:b3:d0:6d:
                    99:c5:13:3e:3b:4f:5e:6c:d9:6c:8f:24:d9:1e:08:
                    3f:93:8d:98:b9:c6:92:e2:52:ff:70:97:a3:e5:c2:
                    e0:a4:c3:fe:0f:18:81:48:a8:08:91:09:d3:69:1d:
                    15:a8:46:a6:07:54:80:b9:36:d2:60:63:bd:5f:a6:
                    6c:38:ca:e8:c7:4e:99:82:1c:9c:45:79:04:73:b1:
                    08:22:7c:da:0c:da:b6:43:0c:51:aa:ee:b0:aa:3d:
                    be:aa:63:6d:07:2f:24:6f:83:36:d7:b0:cc:55:76:
                    6d:33:c7:92:3f:e4:07:5c:b0:0a:31:3a:3a:f6:b1:
                    a5:f0:2f:75:b8:2d:cc:07:52:ad:43:66:79:96:bd:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:64:78:48:26:48:A5:21:0B:69:13:F5:EE:79:E4:C5:4A:1D:03:51
            X509v3 Authority Key Identifier:
                keyid:5A:89:C0:83:EE:24:78:13:17:0C:71:9F:E7:2F:9B:FF:29:BA:1B:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/2b6e1e9ece461b8e0f8f3418028bb1012e52ad28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:cf:f3:1b:d0:bf:1a:b9:2e:75:aa:a9:4c:fc:c9:9e:5d:d9:
         f4:59:f8:1a:d0:01:97:96:cb:3b:ff:8b:62:5d:b5:8d:71:bc:
         b7:c4:27:6c:3a:a5:42:f4:b5:10:83:12:d3:41:2d:c7:1f:10:
         2f:05:d3:67:86:00:1c:ae:87:d3:c7:37:41:64:1e:3f:e2:a6:
         e2:d4:f3:a6:6c:b5:57:d3:e4:26:84:28:0d:ff:52:05:44:3a:
         5b:02:52:52:9e:f9:07:28:8b:1a:3b:9a:78:e6:7c:6b:29:18:
         67:c1:03:32:17:1b:06:f6:ad:4e:b4:c2:22:3d:37:97:b5:7c:
         fc:87:28:45:db:86:0c:96:c9:0d:18:97:20:83:9f:0b:fc:3c:
         2e:a4:56:ef:2b:97:4c:f6:f5:28:3e:74:00:6f:55:3d:41:b2:
         af:28:52:70:2b:9c:46:d4:fb:48:2a:a6:02:c1:d8:bc:d2:64:
         9b:f6:ac:93:ad:af:93:ac:91:bc:f9:2d:03:0b:56:88:5e:69:
         b7:71:c0:7e:ca:8a:09:81:c4:af:ad:3d:25:4a:af:fc:6a:b3:
         e8:ea:e3:89:de:be:7c:eb:f0:95:71:79:63:da:24:b4:42:32:
         4f:5b:34:a9:1e:52:da:f9:2e:d9:64:3e:59:75:67:b9:c9:bc:
         fd:dd:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org