Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/81a6ecb314ea8021e61875a4630a7708b0df8ae3.roa
File:                     81a6ecb314ea8021e61875a4630a7708b0df8ae3.roa (raw, json)
Hash identifier:          C0Qh+6S/0RPvSRJgiF0nWJf3Irn5XoDYD4tZNXWK+MU=
Subject key identifier:   C4:F3:A9:12:A6:24:4A:ED:D0:E7:E8:EE:D8:E3:57:02:79:C7:25:53
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A0DC5
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/81a6ecb314ea8021e61875a4630a7708b0df8ae3.roa
Signing time:             Wed 24 Mar 2021 14:43:18 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        189.202.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658885 (0xa0dc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=81a6ecb314ea8021e61875a4630a7708b0df8ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:3d:f4:60:e8:22:47:94:88:29:df:65:3f:
                    18:e4:4e:f0:70:87:9a:ea:e5:2b:ba:5d:cc:b9:91:
                    ec:03:28:7f:54:4f:23:6f:f9:dc:1d:9d:8c:1b:65:
                    be:f6:41:77:00:51:c2:70:e5:59:21:97:b8:dd:52:
                    a8:81:88:a3:1d:11:63:7c:42:ca:e7:0c:20:8e:ae:
                    94:fd:0d:2c:e9:ce:70:64:1f:60:ab:53:a4:a1:74:
                    88:e5:f0:9a:66:79:fa:e3:17:84:ba:44:5c:78:c8:
                    16:e9:28:29:8e:94:5d:7d:07:46:26:a8:09:32:7b:
                    04:8d:78:74:06:4d:ed:68:27:8e:61:48:db:b3:57:
                    b4:2e:f0:43:64:77:9b:78:c1:21:5b:e2:ee:8f:29:
                    2a:79:2e:78:92:7f:5e:92:17:ea:2d:92:2d:2a:62:
                    7f:f2:6d:2b:4f:86:0a:75:51:bd:2a:8b:9c:ab:ce:
                    52:34:6b:9a:a2:c3:6e:04:67:33:d4:4d:ab:22:40:
                    6e:98:a0:08:70:23:66:11:2b:0e:e8:58:0c:99:4c:
                    b7:c1:32:02:a0:be:08:f4:e9:7b:eb:b1:44:dd:75:
                    9d:65:f6:64:7a:19:1b:cd:e3:16:55:5a:bc:dd:25:
                    2b:cd:4f:d3:7f:af:9e:74:af:5c:93:10:68:d5:0b:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:A9:12:A6:24:4A:ED:D0:E7:E8:EE:D8:E3:57:02:79:C7:25:53
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/81a6ecb314ea8021e61875a4630a7708b0df8ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:38:ef:cf:02:75:33:51:d7:3f:f8:04:24:99:f9:72:e9:d3:
         a5:d2:b8:b3:3c:12:29:73:4f:df:2f:cd:57:a8:47:7c:44:37:
         0b:d2:42:87:bb:63:fc:80:1e:e0:38:4e:b7:9a:7e:22:d6:37:
         0c:d7:07:11:1f:8c:8c:90:84:3f:73:0b:2b:66:ba:52:01:51:
         48:83:b1:7e:82:23:63:21:e8:ee:68:75:f2:76:4d:42:5d:e7:
         d2:a0:04:af:94:40:7f:83:69:eb:6b:d6:a1:9d:71:5c:b6:4d:
         c9:a7:9c:16:46:b8:9d:25:48:b4:e8:11:df:3d:13:d2:58:81:
         11:1d:24:91:d3:5a:10:a6:52:64:bc:04:0d:29:9c:4c:96:7c:
         74:03:45:5b:8b:a7:e7:ee:76:c0:d6:8b:09:bd:a0:ae:69:29:
         3c:a9:8e:e0:24:fd:09:c0:11:89:81:1f:e3:29:31:10:b2:d9:
         8b:db:22:9a:46:fa:2e:28:08:bd:84:a1:bf:ef:8e:74:53:31:
         a4:33:2f:77:86:37:64:f3:c3:02:dc:70:4d:a5:d1:ba:d0:9a:
         e2:f9:12:36:44:82:2d:e5:5a:64:a0:44:af:cf:14:30:1d:02:
         1e:68:24:39:5e:a6:ef:e1:40:f3:99:31:6d:df:b2:5e:75:32:
         1b:64:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org