Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/709071ef9c799919fb38b2715ea5ac8a71f0d386.roa
File:                     709071ef9c799919fb38b2715ea5ac8a71f0d386.roa (raw, json)
Hash identifier:          CZ7RUZXuIPedtzV98eowGp70hkJWLEa95VHdsEX5r88=
Subject key identifier:   16:57:EF:74:D1:5B:E3:81:2E:4F:50:9E:7B:1A:A3:F0:D1:43:5D:F5
Certificate issuer:       /CN=adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8
Certificate serial:       0DC58B
Authority key identifier: 5A:89:C0:83:EE:24:78:13:17:0C:71:9F:E7:2F:9B:FF:29:BA:1B:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/709071ef9c799919fb38b2715ea5ac8a71f0d386.roa
Signing time:             Wed 24 Mar 2021 14:41:23 +0000
ROA not before:           Wed 24 Mar 2021 14:41:23 +0000
ROA not after:            Tue 24 Mar 2026 14:41:23 +0000
asID:                     61468
IP address blocks:        192.188.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902539 (0xdc58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8
        Validity
            Not Before: Mar 24 14:41:23 2021 GMT
            Not After : Mar 24 14:41:23 2026 GMT
        Subject: CN=709071ef9c799919fb38b2715ea5ac8a71f0d386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:8e:ce:ab:ee:e2:a6:e2:45:38:d6:14:08:
                    77:ae:cc:a9:62:26:80:f4:f1:c9:2c:f9:8b:ca:8d:
                    69:c6:03:b8:41:b1:e4:5a:23:aa:20:ff:87:15:6c:
                    31:9b:14:dc:65:d9:8e:bf:27:c5:81:6e:35:d7:45:
                    50:8d:81:5e:3a:64:e0:9d:00:87:8c:3b:76:11:b5:
                    46:26:55:47:bf:1e:97:d3:c3:c3:13:bd:63:54:2b:
                    38:9c:13:0e:b3:12:66:be:45:d1:cb:4b:32:a7:17:
                    f3:c5:c5:ff:0f:c9:57:df:7e:8f:68:d3:ec:7e:a8:
                    12:e5:97:4c:00:50:9b:2e:57:61:ff:40:6c:68:75:
                    51:2a:00:3a:5a:40:2f:c3:94:b9:48:53:57:74:00:
                    e6:35:b1:76:5a:21:47:b5:87:d0:40:7a:23:29:59:
                    be:41:94:9c:e1:43:55:ad:fd:7c:3e:50:82:34:fa:
                    b0:a2:10:50:6b:a8:9b:ed:7d:50:63:d6:e9:cf:b8:
                    88:55:6a:63:4d:c4:02:ac:1d:a6:4e:0a:96:13:88:
                    e4:fa:a9:81:13:8b:e3:0e:43:2d:e1:dd:4c:9d:43:
                    9c:2f:73:8d:50:c4:36:07:dc:22:99:92:72:9e:c9:
                    a9:ec:96:a4:b4:ef:1d:a1:6f:2b:1e:c9:23:42:76:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:57:EF:74:D1:5B:E3:81:2E:4F:50:9E:7B:1A:A3:F0:D1:43:5D:F5
            X509v3 Authority Key Identifier:
                keyid:5A:89:C0:83:EE:24:78:13:17:0C:71:9F:E7:2F:9B:FF:29:BA:1B:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/709071ef9c799919fb38b2715ea5ac8a71f0d386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f3:cc:9b:01:f2:69:da:eb:41:ff:71:5e:d9:15:6c:82:24:
         c1:d7:ac:ee:74:13:2f:1d:f8:00:5f:51:81:c6:4a:0f:87:74:
         75:67:a6:37:aa:db:88:b4:86:8e:95:9a:a9:39:5e:98:23:a4:
         e6:b5:90:df:81:cf:c9:cc:32:8d:0f:0e:97:e0:48:11:b1:60:
         17:91:5a:37:5d:cc:b8:1f:a0:8f:ab:e5:4c:d3:7c:92:b5:20:
         d8:84:47:22:d8:9b:fe:74:0c:bd:a4:6b:57:83:ad:15:8b:22:
         a9:fe:61:7a:3c:e4:b2:d8:30:28:dd:6c:b1:a9:f3:99:c9:c3:
         70:57:71:5d:34:e6:75:35:e4:de:86:8e:bb:f5:72:fd:00:48:
         cd:a8:62:29:38:df:0b:17:d8:a2:90:8c:72:de:90:9f:02:32:
         53:e2:07:64:af:de:c3:bb:e8:1d:72:24:03:7f:ee:40:b0:a4:
         bd:d7:d7:95:9f:78:d5:1f:65:84:bc:9f:82:58:06:0a:2a:62:
         be:1d:3d:90:3e:15:54:80:b8:e1:85:68:e5:5e:e8:1c:32:0a:
         c7:ac:6c:43:04:d6:6e:a8:87:32:01:f4:6e:89:ab:70:73:77:
         71:5e:57:2c:09:54:28:e8:53:9b:86:0b:11:ad:cf:66:12:b3:
         14:08:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org