Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/c4b440abb84f6623f70f0d3fbb33eb794d64b7ed.roa
File:                     c4b440abb84f6623f70f0d3fbb33eb794d64b7ed.roa (raw, json)
Hash identifier:          6Eba3EUQVu/vd+WWwblxYPnxW7ZOXukzBXRR9q+KOLs=
Subject key identifier:   BB:CE:AA:00:8F:78:DF:D3:B8:56:E0:16:E9:C2:72:15:3C:C3:B7:F9
Certificate issuer:       /CN=466e43c330240907a2659f129b7552a9a8972ea2
Certificate serial:       1260
Authority key identifier: 30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/c4b440abb84f6623f70f0d3fbb33eb794d64b7ed.roa
Signing time:             Thu 01 Jul 2021 14:26:19 +0000
ROA not before:           Tue 29 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     271872
IP address blocks:        128.201.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4704 (0x1260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e43c330240907a2659f129b7552a9a8972ea2
        Validity
            Not Before: Jun 29 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=c4b440abb84f6623f70f0d3fbb33eb794d64b7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:a7:fb:e6:64:44:a1:f3:fb:bf:1b:25:07:
                    47:f5:f7:e3:4a:3f:e8:57:71:40:ce:70:0a:ab:74:
                    ca:b4:ed:d1:22:bf:69:52:f1:86:97:96:a9:19:e8:
                    90:ce:d4:46:38:cf:f4:36:68:7a:d8:8e:72:11:9c:
                    85:8b:90:5a:a2:bf:ea:c8:9a:18:b1:33:3c:50:01:
                    9c:b4:c1:04:ae:3e:33:1f:42:d8:b7:82:bf:38:9b:
                    99:65:d6:7b:49:09:5a:b2:d6:04:4b:46:18:0f:99:
                    94:e3:a7:35:5d:43:e3:b6:7c:32:d0:83:a7:60:a3:
                    ce:f3:33:96:40:e2:a7:3e:1a:93:53:d1:8f:c5:e3:
                    20:78:ae:29:45:9b:2c:10:5f:56:1f:dd:7f:23:3e:
                    be:6c:23:f7:18:35:2d:e6:c3:04:c9:ea:4f:fd:67:
                    2b:cd:4c:02:c6:c6:96:75:02:93:3d:9c:56:14:52:
                    1f:63:d3:b8:9e:a2:dd:24:ff:4a:4e:44:ab:3e:e8:
                    3e:e5:26:83:19:65:56:d9:d5:e6:ed:4b:5a:57:3f:
                    75:51:8c:3f:19:37:0a:7f:01:58:d2:a7:b0:cd:9b:
                    df:7b:37:f6:89:3b:db:62:32:33:59:aa:44:de:75:
                    a3:49:82:c4:3e:8f:e8:c8:fe:c7:6d:ea:e2:65:29:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CE:AA:00:8F:78:DF:D3:B8:56:E0:16:E9:C2:72:15:3C:C3:B7:F9
            X509v3 Authority Key Identifier:
                keyid:30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/c4b440abb84f6623f70f0d3fbb33eb794d64b7ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/466e43c330240907a2659f129b7552a9a8972ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:80:f6:34:15:a9:95:df:7c:41:f6:13:0f:26:35:53:31:63:
         3c:99:29:b0:23:e6:28:31:92:46:3e:60:31:48:34:70:32:33:
         c4:9b:72:4e:ef:0d:2e:3b:f4:5e:41:43:11:aa:1d:d6:fb:8c:
         40:0c:6b:86:54:37:f6:01:e1:85:73:6a:8e:0a:94:84:67:71:
         95:56:6f:fc:f0:3e:6e:7f:b1:3a:03:b9:e0:81:9b:d5:34:53:
         7d:47:c7:c0:34:2f:d9:de:b9:67:a8:1e:81:3c:0c:41:61:b1:
         e9:aa:2d:51:fa:8d:d7:3d:d0:a3:ad:72:df:1a:27:5a:4a:f5:
         8c:f1:99:ba:8c:04:9c:86:e1:42:13:41:ef:65:cc:e1:ce:45:
         99:a9:ea:18:eb:4e:39:45:92:e9:f1:76:b8:0d:63:8d:0e:4a:
         44:38:f7:27:7f:a9:f0:a9:91:2a:e0:01:54:98:1d:43:b8:c4:
         35:c0:17:b9:70:a3:04:4b:d8:a6:94:40:6b:79:43:b3:f3:8c:
         3f:18:20:ba:12:eb:67:ba:f3:2d:6e:96:5f:7f:30:23:17:1b:
         89:d8:2b:1b:5b:b7:40:c8:73:0a:51:be:65:50:13:a2:20:ef:
         35:1f:d1:39:88:18:95:74:a4:db:16:fc:2c:60:5c:dc:37:21:
         e1:43:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org