Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/44173a013ca8ec9733c71b018a90ea8f825f4ebf.roa
File:                     44173a013ca8ec9733c71b018a90ea8f825f4ebf.roa (raw, json)
Hash identifier:          HX/0HkA0999LqU19jLpAor63y74snNLRRmeERSNz1E0=
Subject key identifier:   8D:23:F0:E3:09:B3:AC:6C:7C:F6:DE:E5:65:5B:EE:27:9F:B4:69:40
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A1B40
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/44173a013ca8ec9733c71b018a90ea8f825f4ebf.roa
Signing time:             Wed 24 Mar 2021 14:43:19 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        189.204.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662336 (0xa1b40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=44173a013ca8ec9733c71b018a90ea8f825f4ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:c9:97:12:9e:e7:d7:99:30:7e:5a:54:2b:
                    e8:ad:6f:9e:ef:c8:41:45:ec:a6:b9:1b:57:d9:4b:
                    60:46:ea:16:87:02:4c:03:09:37:6f:24:ae:b6:98:
                    14:81:fb:d9:71:58:b6:b8:e2:7f:8d:3c:63:aa:5c:
                    63:7a:1d:85:7b:9b:ba:45:26:93:12:15:37:2e:16:
                    3a:5f:63:b8:57:48:83:69:b5:e5:f5:df:a8:54:62:
                    c7:a1:a7:4f:b2:6c:99:cb:bf:a7:51:03:ca:23:29:
                    92:c6:0d:0d:c4:68:90:c4:e1:5c:fb:6f:76:11:77:
                    05:e6:ef:09:61:48:50:ed:65:55:14:36:49:d1:22:
                    ec:2c:c9:a3:00:69:ef:62:fd:be:60:58:03:8a:9e:
                    78:c0:d5:05:dd:1a:49:2f:27:7b:ef:f5:46:74:49:
                    e0:ae:40:72:bc:19:03:25:ee:7c:96:fa:7d:6e:74:
                    db:7a:a6:9a:69:f0:91:e0:bc:65:69:fa:6b:9c:ea:
                    c6:a9:36:56:e3:a2:57:3f:df:e4:5f:b5:b1:b2:d5:
                    af:8e:49:b8:16:d0:c1:71:93:92:8c:f2:62:de:ef:
                    dd:54:b2:16:45:44:7b:2e:41:53:ab:30:44:4e:b0:
                    16:7c:9e:75:d5:30:58:71:c9:ba:27:4e:75:1c:7e:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:23:F0:E3:09:B3:AC:6C:7C:F6:DE:E5:65:5B:EE:27:9F:B4:69:40
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/44173a013ca8ec9733c71b018a90ea8f825f4ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:37:0c:29:aa:ab:51:6e:09:a8:b3:54:5c:ab:e9:27:42:10:
         4e:5c:b2:74:b1:a3:25:e4:40:64:fd:37:6c:8a:a0:b7:2d:8d:
         da:dd:ba:04:18:df:64:5e:02:b4:6b:08:77:a3:be:8d:61:be:
         35:16:88:25:bf:8c:5a:de:a6:e0:d3:b9:55:d9:89:90:f7:56:
         00:fd:58:03:7e:bb:13:08:11:1b:e9:02:f5:ec:0d:22:97:17:
         3d:d3:8b:e7:46:48:10:fe:66:62:47:05:b7:a1:68:f8:1f:02:
         5f:62:2c:3b:a6:1c:14:db:4f:a5:37:7c:fc:2b:2c:37:1c:99:
         1e:37:08:70:d2:3b:8b:d6:34:12:4f:b0:50:af:8b:1d:60:92:
         cc:5f:99:1a:be:dc:48:6c:4f:d4:e6:d7:6a:95:e5:14:e8:50:
         88:5a:ec:1e:0b:18:8d:1d:d5:14:e5:cf:1c:61:68:c0:d6:6c:
         33:be:2e:3f:dd:95:96:39:b3:30:24:55:83:99:dd:34:74:fd:
         fc:66:90:88:96:11:6e:ba:8a:c2:54:75:b2:0b:05:a2:59:e6:
         4a:c4:3b:ac:02:15:ed:2b:f4:2d:11:16:75:94:91:71:e5:8e:
         1a:2f:f2:65:b1:c9:0d:62:2c:a2:6e:80:30:5c:ae:03:7c:d4:
         2a:51:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org