Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/4a0201d78053b99d39f56a3ac62d731e07b4fe37.roa
File:                     4a0201d78053b99d39f56a3ac62d731e07b4fe37.roa (raw, json)
Hash identifier:          xmTY6g2VyyNR2WvVqL5+11zA2DKSzZVz9Wmi5GXUpMs=
Subject key identifier:   94:93:14:19:4E:F7:39:F5:3B:21:99:A0:F7:DB:96:33:50:80:F2:E0
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DB0A3
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/4a0201d78053b99d39f56a3ac62d731e07b4fe37.roa
Signing time:             Wed 24 Mar 2021 14:35:26 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     52468
IP address blocks:        190.61.80.0/21 maxlen: 24
                          190.61.88.0/22 maxlen: 24
                          190.60.32.0/19 maxlen: 24
                          190.61.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897187 (0xdb0a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=4a0201d78053b99d39f56a3ac62d731e07b4fe37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:9a:c0:2f:fb:e6:14:ec:5a:6c:97:f5:70:
                    21:6a:e1:df:65:f7:86:1e:da:0f:96:96:5a:4b:6d:
                    91:99:ca:2d:3f:5f:21:ce:d8:f6:52:53:8b:91:8b:
                    b8:89:15:97:36:a6:bd:f2:0a:95:6f:f2:ef:b2:75:
                    5c:97:b9:6a:a1:0d:b5:86:28:98:cd:f7:0f:37:47:
                    a6:e6:94:fc:4f:0a:4e:b7:41:93:68:d0:2d:48:fa:
                    75:80:63:38:60:7d:d1:07:46:1e:b0:32:69:59:a1:
                    58:0b:76:81:66:9a:56:87:83:91:27:42:3b:10:89:
                    60:a1:3f:22:f9:99:02:62:2d:e8:32:67:3f:2a:75:
                    d0:ce:53:9c:41:ed:41:80:80:74:ea:f8:e6:d9:13:
                    f6:be:07:1d:9b:67:f0:07:6f:1c:76:41:b4:a2:d6:
                    e8:57:7c:a5:82:59:b1:9f:40:8d:4f:69:ec:5c:32:
                    01:e3:a5:49:8e:c7:8a:12:2b:27:cc:b4:c2:17:4b:
                    f6:c7:3f:cd:89:16:18:87:ce:96:12:01:12:97:f5:
                    0b:5d:f5:73:4b:45:59:68:5a:c4:23:0f:ab:83:f9:
                    b1:ea:b5:9f:17:df:99:8e:e5:19:ad:1e:02:e5:5f:
                    41:b9:72:e3:a6:e7:63:7b:2d:2b:51:8a:14:43:54:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:14:19:4E:F7:39:F5:3B:21:99:A0:F7:DB:96:33:50:80:F2:E0
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/4a0201d78053b99d39f56a3ac62d731e07b4fe37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.32.0/19
                  190.61.80.0-190.61.91.255
                  190.61.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:5e:8b:38:e9:88:d3:dc:bb:1c:e5:09:56:f4:51:c6:50:92:
         bf:13:b1:ec:7f:cd:3c:55:d5:0c:ea:1c:c5:fc:9a:4d:60:42:
         3e:35:07:d9:8a:7d:ed:1c:9d:3f:1f:83:61:b3:44:c7:34:2e:
         8f:12:d5:70:de:a8:79:67:e9:50:88:0e:a4:f2:ad:18:8c:52:
         ce:0b:6b:43:9e:2d:f8:0d:1a:64:9f:7f:65:a6:8b:e2:d3:21:
         27:14:f7:69:1a:7d:ff:43:fe:b5:e0:df:d0:bc:2c:82:77:79:
         52:e1:ee:71:56:7e:30:75:37:e7:ce:e1:e3:59:91:a2:14:9a:
         cc:65:ef:d3:c0:ea:ed:be:cc:17:f3:7f:70:e5:c5:ce:a7:70:
         50:89:ca:ae:b1:b4:da:ab:17:6a:be:42:75:ef:05:69:df:9e:
         03:b6:11:c8:a5:c6:89:49:e8:99:a1:7a:58:b7:9a:bc:c6:4f:
         2d:0f:df:5d:c6:a7:fa:a3:22:e9:ca:c0:1e:ed:87:17:3f:0d:
         51:c3:43:78:1b:c3:c8:85:b3:b7:f1:0e:84:05:f0:d5:4d:97:
         7b:47:62:51:47:46:bd:d7:0f:91:54:47:49:ce:15:d6:21:9b:
         1d:e8:4e:f1:34:1f:28:47:ff:71:b9:02:e9:a8:15:cf:0c:fc:
         df:50:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org