Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/fcc2ab3eed7fa4b8fb3b6c4cd13722e0703cea7e.roa
File:                     fcc2ab3eed7fa4b8fb3b6c4cd13722e0703cea7e.roa (raw, json)
Hash identifier:          QvRQjuDa4+94ZDO93HYh0XktARflJw2wcZWIPFQj06I=
Subject key identifier:   EA:C4:B4:B9:F7:88:C9:54:81:79:98:5D:EB:4E:AD:95:A7:0A:0E:D0
Certificate issuer:       /CN=7125c7c115a99947a022aea03850efda56aab912
Certificate serial:       0D4A61
Authority key identifier: C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/fcc2ab3eed7fa4b8fb3b6c4cd13722e0703cea7e.roa
Signing time:             Wed 24 Mar 2021 14:40:29 +0000
ROA not before:           Wed 24 Mar 2021 14:40:28 +0000
ROA not after:            Tue 24 Mar 2026 14:40:28 +0000
asID:                     266664
IP address blocks:        190.12.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871009 (0xd4a61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125c7c115a99947a022aea03850efda56aab912
        Validity
            Not Before: Mar 24 14:40:28 2021 GMT
            Not After : Mar 24 14:40:28 2026 GMT
        Subject: CN=fcc2ab3eed7fa4b8fb3b6c4cd13722e0703cea7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:69:c3:54:07:16:10:65:cb:1b:20:2b:8d:
                    10:27:c6:87:4a:a2:39:c7:d9:95:ed:1d:73:b9:2a:
                    d4:37:f7:70:df:65:27:80:f1:62:a6:a0:46:8f:f8:
                    c6:ba:82:ad:f6:38:89:1c:1f:78:d2:61:9e:8b:e9:
                    06:41:6a:4d:89:11:68:ed:d3:ff:33:a8:a0:19:f9:
                    5c:1b:b1:ba:02:31:b9:cf:0f:96:d0:4c:89:01:a0:
                    44:42:55:ec:c5:14:b0:1a:aa:1e:f1:5a:0c:58:58:
                    09:4a:9a:0b:e9:ae:04:f5:00:06:fa:51:ce:c9:1c:
                    15:37:fb:fe:d9:ad:ad:b8:f0:99:a5:ea:6e:3d:ca:
                    d1:f4:72:67:47:f6:34:59:87:f4:4f:95:37:a6:2f:
                    11:5f:8d:ae:5b:71:ba:86:43:1c:05:78:bb:4a:eb:
                    ac:3b:e0:13:26:6a:78:ef:6c:6e:a0:b1:00:a9:3b:
                    44:3c:49:62:dd:f6:c8:05:29:ad:69:9c:73:8b:6f:
                    cf:22:6f:51:41:41:ab:ef:04:6e:84:a3:b1:c3:e3:
                    e2:2e:15:42:0c:a4:e4:01:31:e7:d3:4e:47:60:c8:
                    97:2e:aa:22:a8:1f:ca:56:ff:01:37:6e:22:1e:7d:
                    17:bd:c2:08:83:15:00:fe:93:83:8a:8b:18:1a:ac:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C4:B4:B9:F7:88:C9:54:81:79:98:5D:EB:4E:AD:95:A7:0A:0E:D0
            X509v3 Authority Key Identifier:
                keyid:C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/fcc2ab3eed7fa4b8fb3b6c4cd13722e0703cea7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:61:1a:72:ea:79:2d:29:b1:d9:05:1e:5d:50:5d:de:b6:7c:
         e8:4b:cd:22:58:5e:c8:dd:79:8a:ce:62:19:49:99:61:36:72:
         cd:8a:c0:1d:06:05:7e:28:84:9f:d2:5c:3b:bd:c7:71:b5:cd:
         98:2c:ea:be:f7:cc:c4:95:55:10:64:eb:e0:c7:c5:03:be:de:
         6e:05:55:34:09:57:0f:f9:8e:fc:21:00:62:d1:c1:93:0d:aa:
         60:2d:36:67:c8:a1:72:f1:db:59:f4:6c:bd:e1:9a:12:bb:02:
         0e:c7:04:b0:c0:97:38:9b:f0:b4:c4:79:69:ef:a0:2d:a7:d2:
         60:62:6a:7c:27:90:23:c1:8a:f7:af:9c:86:8a:ab:2f:47:d4:
         09:e1:1c:da:97:bd:66:11:be:93:10:a6:99:58:e9:a2:fe:d2:
         0c:c9:fe:fb:4c:82:a4:30:61:a6:6b:67:21:67:f8:47:a5:98:
         aa:98:b5:4f:96:a5:73:aa:fa:44:2b:0c:f1:d9:f7:3c:92:59:
         e7:61:1a:4c:23:d7:8a:df:27:f5:c7:f7:f1:0e:f1:b5:94:b6:
         94:91:00:9f:59:16:f5:f1:77:84:9c:fb:4e:18:11:6a:7f:b3:
         ed:c7:a6:4a:ce:f7:9f:05:f9:4a:78:0b:2a:56:01:7e:c0:e3:
         f5:1e:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org