Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/14fd2c6d9d9e5127e507fb56bd0f3b7950ae94aa.roa
File:                     14fd2c6d9d9e5127e507fb56bd0f3b7950ae94aa.roa (raw, json)
Hash identifier:          tpF5nMYI0jWQlzgq4FYbzr2Pmr8svAKiyOVfDfd4z+Y=
Subject key identifier:   4B:6C:1E:11:BA:FF:A8:36:80:70:FA:8F:F5:D2:1F:EA:C3:5E:6C:BD
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DA29D
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/14fd2c6d9d9e5127e507fb56bd0f3b7950ae94aa.roa
Signing time:             Wed 24 Mar 2021 14:35:26 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     52270
IP address blocks:        190.61.204.0/24 maxlen: 24
                          190.61.205.0/24 maxlen: 24
                          190.61.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893597 (0xda29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=14fd2c6d9d9e5127e507fb56bd0f3b7950ae94aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:3c:a3:e6:b6:51:04:f2:34:48:f1:5f:f1:
                    44:bd:17:71:52:9f:9d:e8:6b:53:97:80:de:5c:5a:
                    fa:87:21:4a:60:ac:ef:6c:39:d4:0e:d5:6a:42:a3:
                    e5:1d:1a:97:26:5e:ed:c7:1e:b8:4d:78:c3:43:27:
                    1e:32:ca:50:bc:7a:d3:5c:1a:a5:33:8e:29:99:66:
                    fc:38:64:a2:47:70:00:00:96:b2:49:e9:b9:df:a4:
                    ef:98:54:47:6b:b5:55:8a:fe:0d:75:67:71:f2:87:
                    41:79:01:c5:dc:80:26:9e:2e:19:f9:df:7d:72:b5:
                    18:01:6f:13:93:96:45:b0:bd:3d:cc:f5:4c:7e:a4:
                    40:22:ab:69:27:57:91:2c:8c:05:88:f1:23:a7:60:
                    18:99:d0:53:ee:1c:51:e0:2c:00:26:ea:3c:af:d8:
                    56:07:24:5b:b0:48:ee:2a:04:9a:62:4f:38:13:2f:
                    2e:17:54:4f:33:81:fb:53:35:4e:c2:a2:31:4d:a0:
                    9a:53:65:8b:41:62:e0:31:ca:9b:5a:4d:c9:e3:25:
                    71:4b:1e:8a:60:d7:aa:47:64:72:84:9d:8a:83:06:
                    0d:89:85:b1:95:96:0d:16:8f:1a:02:b6:48:67:03:
                    fa:11:b6:19:3e:ef:44:33:f9:96:a2:a7:0e:e2:bf:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6C:1E:11:BA:FF:A8:36:80:70:FA:8F:F5:D2:1F:EA:C3:5E:6C:BD
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/14fd2c6d9d9e5127e507fb56bd0f3b7950ae94aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.204.0/23
                  190.61.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:e5:67:20:38:ac:97:44:31:41:8c:07:52:33:86:65:b5:aa:
         5e:dd:74:6a:8a:20:4b:d8:1b:bf:cc:30:19:21:0e:da:43:54:
         5c:9f:78:29:b4:b6:77:45:97:3a:43:87:b1:3a:f1:e9:a4:0e:
         7f:08:ad:58:ce:1a:72:b5:0f:c9:89:93:da:6f:5e:47:37:78:
         2d:6e:92:f0:f8:42:d3:9c:6b:02:75:e3:ab:ed:e3:36:e0:a9:
         cf:00:53:20:73:b0:b1:8b:d4:2d:a0:97:4b:18:93:af:4e:ae:
         e6:68:c4:f3:13:52:dc:3f:dc:ae:f3:65:f3:5f:07:96:9d:65:
         d6:8a:d8:6f:f9:6d:f4:77:2b:43:33:05:5d:52:84:3a:c0:66:
         60:6a:73:c4:13:38:42:c8:ee:f2:a6:aa:e0:1a:77:1f:d2:45:
         93:66:0c:cb:37:70:58:05:b8:a5:3d:a9:25:69:bb:86:eb:fd:
         5d:3d:96:08:77:0e:81:71:e4:f2:58:10:3b:8e:cd:f0:f7:ff:
         17:a9:02:b9:b6:16:6e:cc:44:e4:0e:c3:f0:04:bb:43:7e:0b:
         4e:c1:b4:e6:08:47:d3:3f:db:f5:5f:11:fa:d2:2a:9f:68:70:
         4b:e6:26:70:f7:92:b7:8f:f5:12:1b:19:62:72:54:1d:95:cb:
         40:66:1f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org