Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/d6a8628ef101fe75794ab7a48fe3fe063700086e.roa
File:                     d6a8628ef101fe75794ab7a48fe3fe063700086e.roa (raw, json)
Hash identifier:          DjYDp6eQVKGtFXzm6YT8VHT7lvP2LT+C14nTtgDP2M8=
Subject key identifier:   49:4B:31:CB:C6:60:89:94:78:41:F5:9E:61:45:7A:03:F4:DB:35:49
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A2BEF
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/d6a8628ef101fe75794ab7a48fe3fe063700086e.roa
Signing time:             Wed 24 Mar 2021 14:43:21 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     28548
IP address blocks:        189.202.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666607 (0xa2bef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=d6a8628ef101fe75794ab7a48fe3fe063700086e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:31:2c:6a:20:7d:2c:f9:75:81:9d:38:3e:
                    d0:ee:f5:e1:68:63:4f:cd:7d:83:0b:0a:5f:54:64:
                    28:ac:3f:bf:41:9e:89:dd:1b:13:d2:e6:c4:4e:e1:
                    9c:81:69:cc:48:54:10:13:82:5d:f0:59:58:39:0d:
                    39:5f:9c:50:89:62:18:a9:b7:7f:71:6d:60:68:1d:
                    b1:81:52:74:d9:4b:51:28:cc:ae:15:c8:af:6d:cf:
                    1b:75:94:10:56:b4:ba:0d:aa:4f:1b:47:8a:58:71:
                    b5:ab:78:8b:31:9e:84:d8:69:c1:81:d7:54:80:7d:
                    ee:8d:ac:8f:b1:05:a9:52:4a:11:41:9d:fb:62:af:
                    63:65:28:bd:60:1b:b1:35:55:56:f7:7f:8d:d7:55:
                    76:39:1b:a8:32:55:f5:14:50:79:aa:6b:1e:4c:21:
                    d7:4c:21:65:51:af:ae:04:91:39:2c:8d:0f:63:e6:
                    52:50:6e:75:da:f8:f8:6d:ba:aa:be:a6:89:31:03:
                    aa:d7:8f:1e:9e:7c:85:63:36:c8:ce:6c:fc:b3:7d:
                    48:71:e0:2b:77:66:09:7d:c7:85:2b:b3:c6:6e:48:
                    10:40:60:53:1a:b5:e4:26:50:2d:e2:c9:73:79:63:
                    cb:2a:25:d4:25:38:c0:7a:2e:e0:aa:ef:6e:44:0d:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4B:31:CB:C6:60:89:94:78:41:F5:9E:61:45:7A:03:F4:DB:35:49
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/d6a8628ef101fe75794ab7a48fe3fe063700086e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:6a:0a:54:7f:d0:a1:62:37:68:74:89:34:65:b5:99:aa:ec:
         54:dc:fa:e9:54:9d:80:78:91:6e:65:f7:c3:fe:3e:13:69:0d:
         7a:24:ac:0e:0e:9d:65:57:f5:d4:0f:50:c3:a4:0d:be:2f:7b:
         7d:3f:94:0b:5e:04:47:08:92:29:43:e2:ba:46:61:04:9a:e9:
         6b:6f:a8:32:3d:3c:58:72:39:60:67:23:20:58:2b:aa:b0:51:
         32:ab:a0:f3:9f:15:a8:90:19:b5:1b:39:4d:82:99:a2:28:a5:
         5c:e7:cf:f8:b6:7c:81:99:db:ea:9a:ea:46:b1:46:1f:8f:b4:
         79:dc:ac:77:2e:a4:85:9f:73:ab:5b:df:48:92:c6:ee:44:90:
         93:b5:c2:dc:f5:b6:39:5f:1e:0b:0f:9e:d8:ec:0f:af:89:e4:
         28:75:24:26:85:72:0c:7c:db:10:87:60:fe:80:8d:01:34:05:
         9e:ac:9e:c6:bf:43:c3:b2:67:61:b7:9d:ea:78:6c:21:fd:f0:
         c2:92:21:c2:33:2e:62:dc:e2:3a:5a:84:dd:bf:57:35:93:ee:
         c2:3a:17:34:61:f1:4f:83:f5:73:5b:b9:3a:d2:e7:c1:42:a9:
         72:cb:b7:15:46:5e:80:55:dd:be:09:a3:d5:c9:52:4d:4e:5a:
         3d:dc:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org