Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5252ba14251e972321666184080bbdb03e9975ec.roa
File:                     5252ba14251e972321666184080bbdb03e9975ec.roa (raw, json)
Hash identifier:          YC+9V0bCC9JZeMCHqp01iPe/yOcQ4arC76P0ipcl3Sg=
Subject key identifier:   C9:6A:B6:1B:7B:5B:2F:1C:0A:09:FF:CF:9C:90:4E:33:6F:22:7D:4D
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D9D60
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5252ba14251e972321666184080bbdb03e9975ec.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        190.27.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892256 (0xd9d60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=5252ba14251e972321666184080bbdb03e9975ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ce:96:be:61:ac:43:a0:df:ee:ad:3b:5a:0f:
                    5c:ba:7a:3b:e0:82:e4:c5:e4:4e:28:dc:1a:25:21:
                    23:6d:99:78:98:18:5a:81:8a:f7:0f:0c:ee:47:80:
                    1e:f2:81:33:09:1d:ba:29:bc:8f:ce:46:6e:cc:01:
                    dc:10:dd:c2:99:91:7b:e0:fb:d5:0b:ca:be:9f:42:
                    09:ca:a8:51:e2:b8:d3:5e:b8:14:08:3d:9d:59:68:
                    a2:ec:0f:66:65:a7:4e:1d:da:5e:28:70:c0:03:93:
                    29:c8:6c:b9:cb:ae:ee:3c:6e:4e:a5:7c:a8:ec:98:
                    a7:90:54:d4:32:5e:ba:ad:d5:6a:ad:b3:94:2d:d8:
                    2c:7c:ca:d8:cc:d7:68:69:d6:82:f9:7c:7a:96:1b:
                    ed:4a:da:3f:04:c5:3a:b6:69:2d:06:87:62:52:61:
                    c3:01:18:f5:1d:01:1d:2d:7e:3e:5a:d5:1f:16:48:
                    9d:32:e4:aa:8a:d8:81:39:3d:2f:50:17:ad:ea:30:
                    49:3d:88:0b:eb:10:33:b2:60:c2:26:c6:0f:9a:da:
                    25:b4:b7:b3:79:c3:cd:da:64:5e:01:12:28:82:1d:
                    9d:2f:24:5b:25:43:b9:f2:81:a5:b1:26:2e:8e:3c:
                    a5:2d:f2:46:bd:c8:ea:93:a7:ef:76:62:d2:21:96:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6A:B6:1B:7B:5B:2F:1C:0A:09:FF:CF:9C:90:4E:33:6F:22:7D:4D
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5252ba14251e972321666184080bbdb03e9975ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:ea:b2:f6:9e:3a:b5:93:35:ef:c8:ab:f5:33:1b:27:b1:
         a6:93:6a:e1:94:d0:55:09:c8:94:64:00:9b:25:04:9f:a0:98:
         15:10:92:c7:ab:07:5a:10:ef:43:9e:72:0a:53:e1:fe:c9:e6:
         81:de:9d:f8:e6:36:ca:02:70:7b:ac:b8:7c:16:45:9a:35:48:
         bc:4b:cc:6a:ef:85:fc:f4:ee:33:99:68:bb:24:88:b0:b1:be:
         56:72:de:b6:02:2f:3e:c0:1e:f9:c0:0d:5d:5d:15:6e:8f:f9:
         61:dd:28:c0:97:3b:a4:c8:17:3a:ab:3d:19:15:52:c2:86:4e:
         44:bd:dd:b5:37:60:d1:5d:7f:91:b1:9e:8c:74:24:73:7d:79:
         ec:6a:e2:9b:65:f9:17:53:4d:3f:7f:52:d9:e8:42:81:b1:37:
         ba:6c:a1:d0:6e:68:ca:a4:11:88:f6:c8:8d:a7:75:4b:b3:b8:
         3b:f5:f2:56:7d:aa:d1:81:a6:ce:bc:f9:f2:bb:59:17:7c:63:
         d5:ce:f9:85:9e:fa:e5:5d:0d:39:e6:68:d7:d8:2b:00:5d:86:
         6f:a6:24:ab:bf:40:53:c7:29:8f:ba:2f:f4:10:74:b2:12:93:
         67:10:37:98:64:f6:3e:1d:bf:cb:65:e8:fb:fa:27:e5:43:cb:
         00:de:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org