Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/eb47f780bc4f231bd3496e167c78f8dc76440ffc.roa
File:                     eb47f780bc4f231bd3496e167c78f8dc76440ffc.roa (raw, json)
Hash identifier:          zU0DxPAiJAOStMdRkBlBYObTWty1OKjFfUj/hXIYYU0=
Subject key identifier:   A2:8A:FE:12:4C:8C:B0:0F:D3:A8:E9:A0:49:68:97:F6:71:84:66:4D
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09FAB2
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/eb47f780bc4f231bd3496e167c78f8dc76440ffc.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     265541
IP address blocks:        189.204.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654002 (0x9fab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=eb47f780bc4f231bd3496e167c78f8dc76440ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:29:7c:79:96:10:9b:fd:97:6b:47:3c:83:
                    f3:84:43:2a:a0:2f:b7:7a:52:5e:0d:1f:84:73:14:
                    ab:85:1d:78:48:a1:a9:b7:82:59:20:07:17:2d:1f:
                    6b:d4:38:3a:4d:ad:2e:46:3d:da:ed:7c:70:9e:cb:
                    e8:25:cc:73:19:4e:a6:85:99:60:de:54:e8:af:14:
                    37:51:ac:f3:90:f7:bd:a4:79:a8:36:01:bd:34:8a:
                    c0:61:36:ad:56:18:80:a7:b1:3f:2e:20:1a:da:8a:
                    4a:a2:88:5c:7b:cb:ba:ab:de:3a:ef:fc:b8:4f:76:
                    02:ff:c7:41:32:ab:03:2d:cc:74:98:7a:1a:df:a1:
                    37:85:82:9e:56:f6:fa:43:d1:57:23:c3:9c:38:39:
                    2f:0f:00:da:f9:cc:2f:4d:64:73:df:63:eb:fd:7c:
                    3e:7b:ff:cb:04:5b:3b:61:91:0c:f4:3a:ab:a8:d2:
                    d5:d2:5e:72:39:1a:b9:39:96:0e:55:00:ad:33:92:
                    f4:e8:d2:1e:a8:9c:b8:ec:c8:2d:9c:74:05:5e:48:
                    11:af:9e:d0:92:7b:b0:c7:5e:a7:4a:91:52:b6:36:
                    9a:6a:bc:1b:05:78:6b:2e:11:c1:1b:09:a7:4e:52:
                    70:ae:f4:bc:05:e3:a6:ea:e2:c9:70:76:6a:d0:b9:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8A:FE:12:4C:8C:B0:0F:D3:A8:E9:A0:49:68:97:F6:71:84:66:4D
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/eb47f780bc4f231bd3496e167c78f8dc76440ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:bc:2f:ea:a3:4b:a0:eb:40:bf:dc:ad:4d:51:15:35:c7:
         db:a6:97:14:68:d0:a1:b0:3d:10:c3:10:77:65:7c:3e:54:25:
         97:81:57:62:7f:70:e6:26:46:e2:37:27:69:a7:70:6b:b6:29:
         d6:86:64:06:44:5d:f8:6c:21:2e:50:eb:26:c8:01:48:db:2b:
         2c:ef:cb:c3:57:f9:ef:a6:ea:5b:c4:b2:9e:01:ee:02:04:18:
         8c:1b:c0:fc:c9:aa:48:b4:78:36:1a:3f:21:2e:89:21:1a:b4:
         02:e0:36:9d:c1:65:ea:30:ee:00:0f:d7:94:fe:08:39:d7:ac:
         ac:df:14:30:aa:5e:d4:94:71:12:3b:b6:cb:3c:23:e2:0a:08:
         bd:85:5b:b1:7d:ff:84:d8:6c:a2:3d:f0:fb:eb:b5:dc:58:08:
         dd:f7:c3:12:ed:4b:81:be:62:41:55:92:6a:00:5c:9e:a4:51:
         c7:dd:54:9e:e1:39:df:86:b1:3e:53:d4:ca:33:43:06:19:25:
         e1:97:45:89:1e:a9:5c:6f:df:99:3b:2f:dd:03:91:13:46:ef:
         cc:7f:63:7e:0d:51:3b:8a:c7:ba:62:c6:63:4c:90:ba:04:14:
         70:d0:d5:47:c5:25:b2:f4:8f:22:42:05:d8:9d:36:3c:eb:aa:
         dc:b9:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org