Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/19741e64366153935a57718f24030bc3256e652b.roa
File:                     19741e64366153935a57718f24030bc3256e652b.roa (raw, json)
Hash identifier:          mH7Wc/y722k2Kj7AMDwbuEyQrUki/GJ3GwUofEKWu3g=
Subject key identifier:   53:53:50:BA:35:6E:1D:F0:F1:A7:6D:70:CA:DA:31:11:3F:FE:F7:D7
Certificate issuer:       /CN=9ff432522dffd64924cbcac442118f937ddfadbc
Certificate serial:       0DECD7
Authority key identifier: 20:7C:58:18:14:11:86:FB:BD:51:3C:5B:6B:6E:72:67:DE:80:AB:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ff432522dffd64924cbcac442118f937ddfadbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/19741e64366153935a57718f24030bc3256e652b.roa
Signing time:             Wed 24 Mar 2021 14:30:12 +0000
ROA not before:           Wed 24 Mar 2021 14:30:12 +0000
ROA not after:            Tue 24 Mar 2026 14:30:12 +0000
asID:                     52364
IP address blocks:        138.185.80.0/22 maxlen: 24
                          186.148.112.0/21 maxlen: 24
                          190.94.160.0/20 maxlen: 24
                          191.102.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912599 (0xdecd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff432522dffd64924cbcac442118f937ddfadbc
        Validity
            Not Before: Mar 24 14:30:12 2021 GMT
            Not After : Mar 24 14:30:12 2026 GMT
        Subject: CN=19741e64366153935a57718f24030bc3256e652b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:13:ac:3f:ca:fd:f4:f6:82:64:a6:79:04:
                    39:34:48:f2:2e:a3:37:40:dd:a3:8e:ca:58:1c:72:
                    f3:5b:6a:c8:44:8a:46:26:2c:96:f6:aa:4d:8d:f8:
                    b4:f5:73:9c:90:0d:0e:b8:5c:3a:77:db:a7:a0:e0:
                    27:ce:5d:29:70:08:32:6e:37:0c:b6:42:91:b6:2a:
                    de:25:05:a1:22:f2:7f:af:a0:27:41:d8:90:a1:b7:
                    d2:eb:f0:00:4e:1a:94:69:6f:4a:27:43:48:dc:f9:
                    41:71:e7:5e:3d:58:10:60:5b:8a:d5:32:63:ce:63:
                    19:8d:8c:a6:59:68:71:82:d3:d6:be:36:a8:99:5f:
                    c1:8d:70:b3:69:85:0d:83:31:7b:83:fe:ac:93:3a:
                    70:6c:26:48:b7:76:61:86:1c:7f:c4:20:b6:e6:3c:
                    47:b7:c4:c6:02:25:fc:78:3d:dc:37:9d:1a:59:e7:
                    c0:a7:6a:79:76:2e:03:d2:c8:d2:ef:fc:d6:af:03:
                    01:05:01:8f:70:3c:3a:d1:0d:00:ad:2d:b5:d1:53:
                    c0:7a:4c:74:89:18:40:3b:60:f8:6d:11:db:43:c8:
                    9f:c0:6f:c0:b3:34:a4:c5:79:4b:f3:d4:fa:96:32:
                    57:98:01:4e:15:ab:5f:5c:89:e8:88:60:f4:de:64:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:53:50:BA:35:6E:1D:F0:F1:A7:6D:70:CA:DA:31:11:3F:FE:F7:D7
            X509v3 Authority Key Identifier:
                keyid:20:7C:58:18:14:11:86:FB:BD:51:3C:5B:6B:6E:72:67:DE:80:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ff432522dffd64924cbcac442118f937ddfadbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/19741e64366153935a57718f24030bc3256e652b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc852b68-310e-416e-8aef-e77c33973f65/9ff432522dffd64924cbcac442118f937ddfadbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.80.0/22
                  186.148.112.0/21
                  190.94.160.0/20
                  191.102.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:59:64:ba:d2:3c:10:03:13:8f:6c:cb:58:82:68:c1:69:c7:
         db:45:45:6b:2f:c4:f3:7a:0e:3f:06:cf:66:f8:67:7b:d9:1e:
         be:81:39:98:e7:3a:68:85:14:91:ec:08:b7:9e:58:37:ad:e4:
         53:a8:45:8f:bf:40:31:60:6a:0a:40:32:e7:b3:19:0b:f0:2a:
         45:2c:c9:02:08:54:07:ba:01:11:1b:a7:44:39:0f:89:e9:51:
         c8:aa:97:00:3a:c6:1a:ba:3a:a4:da:9a:8a:13:a5:03:a8:ec:
         37:20:70:03:dd:06:d4:ff:01:6e:ef:b4:b7:14:07:71:6b:63:
         c0:19:dd:d5:3e:d6:2e:67:b2:4d:6c:5a:2b:5e:06:1a:d4:ec:
         88:dc:7f:61:db:37:e6:9c:47:e1:2c:42:0e:0f:b6:e0:8d:61:
         4a:6b:f2:54:07:f9:be:e2:c5:f0:2f:fc:21:b4:64:07:56:ad:
         c5:08:89:c2:a4:2b:09:8f:81:7a:83:b9:8a:73:d3:f9:f3:56:
         df:02:33:9b:80:73:c4:5a:74:ee:d3:7f:8c:6a:bf:aa:f5:5b:
         c7:10:8f:ac:b3:6e:7d:9c:b1:11:c8:c1:25:99:2a:9a:5a:c3:
         73:66:20:c5:ad:be:ee:e7:86:ae:0d:58:5a:93:6f:f8:49:aa:
         6c:47:14:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org