Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2fe289e-d505-4f3d-850e-9212052f00fc/a529d991beb4ea7ed843c9dcfe5e16b9ca605052.roa
File:                     a529d991beb4ea7ed843c9dcfe5e16b9ca605052.roa (raw, json)
Hash identifier:          Z+IYY9JvF/NxUbpYHLVkbSF0CvOjxLtmcVnuC3k+gDI=
Subject key identifier:   A5:32:F9:B3:BD:BA:BC:3D:10:D9:A6:33:20:79:20:59:64:1F:8D:ED
Certificate issuer:       /CN=eedf2a0d6e5100957ef88c9fe578a8326f0b74d1
Certificate serial:       0D3E25
Authority key identifier: E0:B9:00:27:94:1B:AF:46:48:5F:40:CF:4A:8C:4E:D9:15:32:9B:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eedf2a0d6e5100957ef88c9fe578a8326f0b74d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2fe289e-d505-4f3d-850e-9212052f00fc/a529d991beb4ea7ed843c9dcfe5e16b9ca605052.roa
Signing time:             Wed 24 Mar 2021 14:33:08 +0000
ROA not before:           Wed 24 Mar 2021 14:33:08 +0000
ROA not after:            Tue 24 Mar 2026 14:33:08 +0000
asID:                     265703
IP address blocks:        160.20.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867877 (0xd3e25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eedf2a0d6e5100957ef88c9fe578a8326f0b74d1
        Validity
            Not Before: Mar 24 14:33:08 2021 GMT
            Not After : Mar 24 14:33:08 2026 GMT
        Subject: CN=a529d991beb4ea7ed843c9dcfe5e16b9ca605052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:30:dd:f6:53:da:b2:78:0c:ea:2f:bf:3f:
                    8c:68:30:de:05:5c:79:1b:7b:13:c1:0b:12:b6:61:
                    4d:b2:60:a4:c2:b3:31:4e:91:24:12:6d:9e:a8:1b:
                    3a:58:cc:40:71:40:48:73:07:7d:07:3b:de:2d:bc:
                    dd:a7:b6:b9:1d:28:0f:2b:f7:b1:80:dd:c5:59:1c:
                    5b:ed:bd:5d:aa:9d:88:8d:e7:95:19:4f:25:1f:04:
                    1f:6d:06:e3:7c:18:3c:c3:b3:98:fd:08:bc:12:69:
                    d2:03:26:f1:ff:6e:ff:49:e2:40:99:c0:d6:a4:30:
                    7d:5c:3b:2b:36:da:5c:ba:a8:5d:ff:7b:4d:96:58:
                    74:62:db:26:66:a6:d9:2c:fa:b9:66:b3:73:9a:fb:
                    40:2b:3e:4a:27:66:1f:90:15:28:a3:42:7f:65:36:
                    78:f2:1a:84:c4:e4:e8:10:25:f5:b3:fd:bb:45:86:
                    b5:92:cc:6e:8a:81:85:b5:ed:94:0d:98:b6:60:f9:
                    60:dd:74:9f:c9:82:eb:e8:29:67:b9:4a:35:bd:b5:
                    10:56:8f:bc:3f:82:98:a1:4e:8b:79:51:b6:f3:05:
                    04:9f:ef:02:67:4f:03:b3:00:ca:3e:63:5b:1c:d3:
                    b7:9a:f4:d0:31:34:42:0e:bd:54:d0:78:ce:15:9f:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:F9:B3:BD:BA:BC:3D:10:D9:A6:33:20:79:20:59:64:1F:8D:ED
            X509v3 Authority Key Identifier:
                keyid:E0:B9:00:27:94:1B:AF:46:48:5F:40:CF:4A:8C:4E:D9:15:32:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eedf2a0d6e5100957ef88c9fe578a8326f0b74d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2fe289e-d505-4f3d-850e-9212052f00fc/a529d991beb4ea7ed843c9dcfe5e16b9ca605052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2fe289e-d505-4f3d-850e-9212052f00fc/eedf2a0d6e5100957ef88c9fe578a8326f0b74d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:2c:49:6f:16:b0:fb:94:86:65:4b:14:f6:55:b3:51:4c:
         d6:6e:5c:76:33:61:53:49:45:3d:76:a1:67:0f:08:49:a2:fd:
         7b:4f:3c:11:4d:c8:ae:ab:62:b5:6b:22:7c:b4:cf:6d:3a:ac:
         90:6a:1e:65:99:6d:28:f3:04:72:83:d0:af:22:06:06:4a:b6:
         ac:77:93:a3:e3:d3:e4:30:85:85:af:20:b3:62:6a:b2:cf:93:
         7e:99:ae:21:0d:61:6b:32:f7:ec:69:f3:dd:77:26:0b:e3:95:
         9e:71:45:2a:28:c7:ee:d6:5b:db:2b:e2:e9:00:33:11:99:07:
         ae:9f:84:10:6d:17:ab:93:49:fa:e2:c4:ff:33:14:d7:b5:89:
         0e:40:d1:9a:13:61:52:dd:51:28:88:9a:ca:80:20:aa:fb:d9:
         1f:a3:8a:b7:66:e0:db:61:13:b8:78:c7:79:91:97:14:2a:f5:
         4e:dd:a3:db:50:74:58:d5:3e:91:d1:58:e3:0d:43:ff:36:27:
         99:58:9e:16:3d:1c:bd:3d:06:54:f5:53:71:ba:26:88:5b:5b:
         c1:b7:9c:ff:86:89:ab:d1:d8:eb:99:c5:1f:cc:fe:ef:de:3f:
         b7:88:83:21:9b:6e:eb:8e:01:65:1a:d8:79:f4:e4:81:7b:8e:
         c0:d9:33:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org