Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/dab57719e55cbc596d09de18d1ffd2b5b6a6ea39.roa
File:                     dab57719e55cbc596d09de18d1ffd2b5b6a6ea39.roa (raw, json)
Hash identifier:          yJMmVaNRWxaUnkj4hXsveEJopk4kBZE6891Dw8jNCM0=
Subject key identifier:   0F:4F:03:F8:4E:87:8A:BC:FA:FD:EF:1B:CD:51:0A:ED:6C:EA:9D:03
Certificate issuer:       /CN=93c6853cfb5dfd892260ae54bb779c64ff4de7ab
Certificate serial:       0DC74C
Authority key identifier: 70:16:AA:00:A5:DB:F9:E8:0B:F6:19:99:E6:8D:A4:20:4E:FA:DA:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/dab57719e55cbc596d09de18d1ffd2b5b6a6ea39.roa
Signing time:             Wed 24 Mar 2021 14:41:20 +0000
ROA not before:           Wed 24 Mar 2021 14:41:20 +0000
ROA not after:            Tue 24 Mar 2026 14:41:20 +0000
asID:                     27947
IP address blocks:        192.188.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902988 (0xdc74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c6853cfb5dfd892260ae54bb779c64ff4de7ab
        Validity
            Not Before: Mar 24 14:41:20 2021 GMT
            Not After : Mar 24 14:41:20 2026 GMT
        Subject: CN=dab57719e55cbc596d09de18d1ffd2b5b6a6ea39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:ba:5a:28:bc:43:67:7c:3e:65:97:bc:28:
                    53:3c:24:7e:68:6d:8c:55:91:f4:f5:07:98:96:f1:
                    16:24:7d:3d:6e:2a:79:e2:d7:1e:bc:5f:b7:ac:f4:
                    25:3a:b9:ac:d9:cf:2a:24:6f:5e:59:21:49:27:8d:
                    07:21:52:67:f0:0c:3b:fb:0b:eb:19:54:c2:47:7b:
                    dd:d5:20:4e:e8:9c:7d:05:fe:74:e5:03:6a:6f:e9:
                    76:f8:1d:78:c1:72:06:7a:0f:69:ab:4e:8d:4b:40:
                    ac:ca:df:09:70:51:d9:13:e3:24:2a:76:0b:3d:3a:
                    23:a5:3d:ee:df:38:72:d2:af:04:cb:53:2a:0c:d8:
                    8a:18:c8:34:9c:a5:2f:9e:b9:74:ad:df:7e:02:e2:
                    0b:39:4d:4e:35:e2:62:78:0a:18:a2:8d:bf:dc:b5:
                    46:48:e3:1d:cc:22:e5:9d:42:d0:28:be:d1:a3:72:
                    37:19:ac:91:4d:05:8a:da:b9:8a:de:b1:7c:7c:11:
                    fa:1d:da:d1:d8:40:38:c0:2d:c3:02:a3:b5:e7:3d:
                    93:fa:72:3d:da:05:8e:e9:75:13:e4:08:9f:4c:e8:
                    00:45:d7:7c:53:a9:04:8d:41:91:0e:ae:38:80:3c:
                    b2:23:6a:a5:f0:7f:bb:df:8b:3e:f5:12:0a:40:84:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4F:03:F8:4E:87:8A:BC:FA:FD:EF:1B:CD:51:0A:ED:6C:EA:9D:03
            X509v3 Authority Key Identifier:
                keyid:70:16:AA:00:A5:DB:F9:E8:0B:F6:19:99:E6:8D:A4:20:4E:FA:DA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/dab57719e55cbc596d09de18d1ffd2b5b6a6ea39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:59:49:db:e5:f6:ae:66:cf:82:8d:16:3f:a6:3e:a5:8d:3b:
         92:92:40:5b:38:8a:27:83:b7:24:c1:3c:5c:ae:8c:56:e4:bd:
         2b:5c:eb:33:1f:80:cf:f8:2e:f2:c2:5d:aa:03:ba:9e:b5:c7:
         ed:96:b1:7a:9f:38:72:2a:84:95:4b:96:9b:35:ec:f9:6e:c7:
         ae:c9:95:99:f4:6c:92:14:ed:e8:63:a8:a5:b7:5b:ac:fd:42:
         6d:8d:7e:4e:94:59:b6:a8:75:62:a7:5b:6b:11:c0:0a:4e:37:
         c5:83:0f:a7:fa:de:48:52:a8:a6:de:9b:12:45:44:41:43:7f:
         7e:ca:3f:56:d4:23:ce:fc:a6:8f:09:40:20:00:80:d6:f4:95:
         bd:47:75:87:ee:4d:86:a8:c2:bf:61:b6:e0:68:f4:50:ab:fc:
         9f:96:d8:2e:36:28:a6:86:d0:87:13:a9:1a:fd:80:b5:c0:54:
         f9:6d:c9:53:95:e7:d6:a7:56:ff:47:29:c8:0f:f4:5c:41:26:
         b1:be:bd:a4:7f:ec:e7:f0:be:b9:de:d6:3a:6a:5d:cf:5f:21:
         e8:b2:fb:c1:3c:fa:90:03:54:87:23:a8:77:dd:ee:5b:09:de:
         98:c0:2f:99:d1:43:29:fb:d3:a3:f0:be:92:a3:4f:f9:0b:e4:
         c0:2f:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org