Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/84d9b4bc4de8951378777c42a7161eb580dd1c62.roa
File:                     84d9b4bc4de8951378777c42a7161eb580dd1c62.roa (raw, json)
Hash identifier:          4K1L+vjwq0y+ciS5AFodzWpfQDcTRq7SgvJqoLlmiCo=
Subject key identifier:   9B:A9:9D:EE:F4:2D:87:F7:26:FE:9F:60:A2:EB:F5:79:41:D0:FB:98
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D907E
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/84d9b4bc4de8951378777c42a7161eb580dd1c62.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        186.29.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888958 (0xd907e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=84d9b4bc4de8951378777c42a7161eb580dd1c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:f2:ad:3a:35:b5:94:39:e1:d5:ed:b6:12:
                    92:5f:14:7c:e7:ae:b5:71:4b:93:fb:da:8f:da:1e:
                    40:bf:b1:72:74:4b:fa:9f:c2:d4:af:9c:d8:e8:88:
                    0d:b9:fe:d1:ce:4b:b0:87:63:1e:97:c0:54:d0:c9:
                    5c:a0:bf:f6:e0:dc:ac:48:cb:92:86:ba:69:12:91:
                    f5:74:c8:9d:59:b0:82:fa:87:97:d0:70:40:fc:bb:
                    36:db:42:ea:81:f0:64:56:d4:45:a9:a2:c0:b7:61:
                    0c:69:70:5e:48:96:bf:89:e1:f8:55:6b:2e:0a:94:
                    6e:f2:07:f6:7b:d2:c4:aa:bb:57:c9:cf:22:1a:30:
                    d3:40:f5:e8:6f:d7:e0:16:8d:67:71:93:cf:57:ac:
                    fe:b1:20:ea:b8:a8:56:f8:01:8b:0f:2e:9a:5a:97:
                    c1:9c:bf:1b:a6:5b:ad:89:61:81:07:e6:2c:08:29:
                    52:c7:47:86:67:0f:4f:7e:fc:eb:40:a0:91:9f:0a:
                    a2:08:85:06:b9:42:f5:ea:ab:3f:9e:6f:52:cf:5b:
                    a3:36:36:b5:11:04:8e:0e:82:0a:1e:bb:ab:ad:85:
                    38:bf:fa:56:eb:f9:13:c8:0c:7d:b0:81:c8:ec:60:
                    c5:a1:25:0c:0b:50:8b:46:33:19:7a:41:2b:74:f5:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:9D:EE:F4:2D:87:F7:26:FE:9F:60:A2:EB:F5:79:41:D0:FB:98
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/84d9b4bc4de8951378777c42a7161eb580dd1c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.29.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:f2:01:eb:75:96:b5:00:3b:0d:d7:3b:0f:40:34:b6:c6:
         54:8e:01:47:be:3d:d3:11:7b:67:e7:5e:6e:fb:f1:4f:c2:0a:
         18:64:42:74:7a:05:dd:f3:ce:89:fb:4a:12:d7:e1:f7:6c:8b:
         bd:a1:bb:8c:15:3f:69:75:10:f8:de:8c:65:10:fa:61:7a:22:
         78:ab:1c:d9:86:9a:50:34:88:e4:ef:a2:73:5d:76:4c:8a:b9:
         cb:1d:df:50:e8:41:8b:34:04:74:68:5c:db:56:e2:97:3b:6a:
         e4:70:30:b8:de:53:11:2c:e8:02:49:7c:f0:f3:1f:0b:b1:33:
         91:be:7f:85:7d:9d:30:58:c1:17:1e:ef:35:d7:78:23:c0:ca:
         5c:ab:f4:97:8b:0b:83:46:cb:bd:d3:0d:47:ae:d6:fe:f1:f3:
         f7:28:37:9d:91:81:08:f9:7c:2a:dd:8e:80:bc:0e:bf:cd:8c:
         66:58:5f:e1:55:e2:d9:51:7e:7c:b2:0f:ed:bf:86:30:5e:d1:
         16:7f:2b:f0:47:e3:61:db:65:a9:a2:13:92:94:6a:56:f7:86:
         6a:ca:9a:6e:87:fc:8c:2f:47:f4:c6:c1:4f:dc:1e:66:71:5a:
         75:32:d5:eb:41:90:aa:37:e2:8b:e0:2f:94:6c:81:46:09:74:
         69:72:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org