Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/8a96816ba1e0ec6da7f1a0c81d16f6205b331d90.roa
File:                     8a96816ba1e0ec6da7f1a0c81d16f6205b331d90.roa (raw, json)
Hash identifier:          T2PolQeP0ZCI9k5WLDp2UiiWjtbAZPGH4YmhOHxGKj0=
Subject key identifier:   4C:E5:4F:79:0D:FF:4E:9B:6F:C6:8F:47:F4:A0:0D:3B:99:AE:BA:68
Certificate issuer:       /CN=b5d933e43bb68e4aa0afa4157c889b4b406113c5
Certificate serial:       0BBC84
Authority key identifier: B3:37:DF:2A:CC:B3:F7:ED:65:5C:18:67:7B:E3:DB:1E:D5:AC:59:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d933e43bb68e4aa0afa4157c889b4b406113c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/8a96816ba1e0ec6da7f1a0c81d16f6205b331d90.roa
Signing time:             Wed 24 Mar 2021 14:42:28 +0000
ROA not before:           Wed 24 Mar 2021 14:42:27 +0000
ROA not after:            Tue 24 Mar 2026 14:42:27 +0000
asID:                     20299
IP address blocks:        190.181.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769156 (0xbbc84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d933e43bb68e4aa0afa4157c889b4b406113c5
        Validity
            Not Before: Mar 24 14:42:27 2021 GMT
            Not After : Mar 24 14:42:27 2026 GMT
        Subject: CN=8a96816ba1e0ec6da7f1a0c81d16f6205b331d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:79:d8:0d:46:93:a9:4c:4c:24:94:5f:3e:
                    26:03:35:5b:28:c1:b8:73:9c:7f:8e:9c:7d:bb:79:
                    a7:0f:63:3f:84:d8:de:2c:0c:01:b1:1e:5f:69:52:
                    b8:b0:ff:3d:78:39:cf:5a:7b:86:d0:06:07:a7:a8:
                    cd:ee:3a:79:43:20:4a:63:2b:51:9d:a2:a5:e8:d4:
                    0d:14:ba:7d:e5:37:0f:3a:62:73:71:a8:b7:81:3f:
                    8e:c1:03:af:3b:52:56:d7:91:0c:4a:20:bf:41:37:
                    b3:21:33:41:3b:3a:ca:3e:eb:a5:04:ef:ed:c6:37:
                    f9:cf:ec:99:ab:e6:5f:8d:4a:ad:c5:94:24:b4:0b:
                    bd:1e:1b:f3:89:cc:c3:10:0a:8a:ce:50:5a:eb:51:
                    e6:d8:d7:59:66:10:70:dd:fa:5e:7f:bb:44:aa:54:
                    27:01:98:bc:6a:84:d6:d3:88:53:80:58:dc:ae:c6:
                    a2:ab:b6:f6:aa:ea:6e:48:52:f0:e6:13:bf:6b:04:
                    91:63:86:a5:91:4d:6a:c9:cf:48:11:18:1e:fe:8f:
                    b4:15:38:70:62:e2:97:9b:22:ea:37:32:38:ce:64:
                    91:d6:05:ba:17:aa:a4:8f:45:1e:17:6e:ca:15:2b:
                    a4:d6:2a:d3:42:27:0c:23:46:04:d3:8b:8a:f3:54:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:4F:79:0D:FF:4E:9B:6F:C6:8F:47:F4:A0:0D:3B:99:AE:BA:68
            X509v3 Authority Key Identifier:
                keyid:B3:37:DF:2A:CC:B3:F7:ED:65:5C:18:67:7B:E3:DB:1E:D5:AC:59:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d933e43bb68e4aa0afa4157c889b4b406113c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/8a96816ba1e0ec6da7f1a0c81d16f6205b331d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/b5d933e43bb68e4aa0afa4157c889b4b406113c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:f8:8d:b2:e2:01:4a:d2:78:3f:3d:19:7c:5c:93:f3:7a:0f:
         51:82:4b:93:83:b0:4d:4e:63:8d:9a:90:57:d9:12:43:40:c3:
         3c:a0:eb:31:e9:e7:0a:04:7c:7e:29:16:8f:37:27:a9:6b:9e:
         83:78:ab:ce:be:2a:eb:b6:f6:8f:85:4c:bb:db:cd:cb:07:7d:
         b4:6f:ff:bd:d7:93:cb:db:f3:89:b6:c2:d1:44:3d:a6:66:7e:
         46:02:3b:32:5b:0d:33:07:d6:a2:08:d7:2c:6b:78:4d:3f:f7:
         61:4e:9d:68:9c:54:99:0b:90:bd:ee:fb:f0:8a:54:4c:97:96:
         8e:aa:fa:7e:9a:cb:9f:d8:9d:fe:ed:74:3f:d9:6c:0d:c2:f2:
         71:71:6c:1d:98:4a:11:41:84:1c:2f:90:46:ab:3f:0c:97:af:
         37:96:9d:b7:cd:8e:58:a1:81:54:b3:2e:0d:8c:25:b6:f9:d4:
         5b:f1:f9:56:c8:e3:6c:45:4b:a5:d9:38:3d:72:22:2a:e9:91:
         f6:65:a5:4b:0b:c6:b0:13:ac:87:cc:6f:6c:db:51:28:47:f2:
         6c:5a:63:55:15:4f:16:c2:fb:c2:32:d1:74:4b:43:b7:5f:1f:
         26:43:78:0c:93:06:af:dc:f0:1a:f0:ac:3a:00:18:a7:cd:b1:
         d6:7e:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org