Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/b3eb0beabf8dfb3ad3ec996b2e6414c1e59dcc20.roa
File:                     b3eb0beabf8dfb3ad3ec996b2e6414c1e59dcc20.roa (raw, json)
Hash identifier:          znjDHSBCyaK2noPJnuQWYcAF8Tmrsb+Mo2T4QC+rSzk=
Subject key identifier:   14:69:D2:DB:69:6C:05:12:27:79:7C:1B:90:9A:D6:47:02:85:08:FC
Certificate issuer:       /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial:       046174
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/b3eb0beabf8dfb3ad3ec996b2e6414c1e59dcc20.roa
Signing time:             Wed 24 Mar 2021 14:42:58 +0000
ROA not before:           Wed 24 Mar 2021 14:42:55 +0000
ROA not after:            Tue 24 Mar 2026 14:42:55 +0000
asID:                     265540
IP address blocks:        190.123.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287092 (0x46174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
        Validity
            Not Before: Mar 24 14:42:55 2021 GMT
            Not After : Mar 24 14:42:55 2026 GMT
        Subject: CN=b3eb0beabf8dfb3ad3ec996b2e6414c1e59dcc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:a5:b6:09:86:06:75:5e:45:43:a3:ba:7f:
                    a8:4a:e4:59:c7:09:8e:96:94:fc:c6:35:9d:5f:8b:
                    42:1c:e5:cd:17:9f:d3:ae:eb:40:b5:c6:6b:93:32:
                    ba:56:a7:d4:3d:b4:6d:1c:da:67:4d:db:a5:43:90:
                    7a:39:ec:19:ff:18:e4:76:d1:c1:c5:1c:39:98:bf:
                    0c:81:df:e4:85:21:d3:99:c5:38:6f:24:9e:9c:b7:
                    a8:2e:d9:9c:c7:5d:eb:4e:30:4a:8c:50:a8:ff:31:
                    ae:11:50:1c:36:2b:d5:e2:ad:04:f1:70:7d:32:d7:
                    2b:e9:d1:c6:cd:0a:73:f1:01:8f:8b:b7:64:52:5b:
                    d9:31:d2:b0:ae:a9:43:9d:ca:62:6e:fe:9a:34:67:
                    42:1f:f8:54:94:c0:9c:6d:c3:73:57:0d:b3:87:7c:
                    ae:d9:03:39:d0:b2:06:cf:fa:7f:af:ba:ed:77:4d:
                    be:8f:8f:73:ee:86:31:3d:d6:98:07:4f:0b:1b:ca:
                    77:e4:80:b1:d1:cd:90:2b:31:ed:14:c1:fc:f3:5d:
                    eb:9d:8b:1f:bd:01:ac:a8:27:70:7a:4f:9b:70:76:
                    c3:c2:12:f7:71:68:df:13:db:9b:bf:36:58:99:d5:
                    b6:67:b1:03:6e:81:79:5c:db:81:42:49:36:02:ea:
                    78:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:69:D2:DB:69:6C:05:12:27:79:7C:1B:90:9A:D6:47:02:85:08:FC
            X509v3 Authority Key Identifier:
                keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/b3eb0beabf8dfb3ad3ec996b2e6414c1e59dcc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c3:f5:28:a1:94:45:f0:44:a3:4f:fe:7d:94:5b:66:80:76:
         19:9c:66:67:62:17:d9:7b:50:0d:32:39:0b:a4:3c:ba:73:22:
         93:a7:bf:13:3d:54:08:aa:db:8c:2a:84:41:17:db:c6:fe:53:
         3e:6a:e2:66:f8:a9:78:07:e4:31:5d:fa:48:9b:35:af:90:a4:
         10:e6:0e:79:1c:a0:12:5b:8d:82:c4:c7:2c:9e:62:b3:b7:c1:
         8e:7e:3d:ff:b1:c2:8b:ce:24:0c:bc:b6:06:e3:e9:2c:d7:ec:
         04:c5:12:2d:0e:6a:22:c0:6d:84:a2:b0:ea:55:2f:3d:79:d4:
         37:95:6d:de:c6:7a:24:4a:2b:7b:0c:06:ca:7f:1c:2c:4c:78:
         4c:6a:a9:af:5c:ea:76:f2:bc:ec:47:f5:ac:08:68:95:c2:3c:
         ca:b1:c5:e1:61:94:4f:39:e5:4c:cc:a0:99:55:4e:b2:b4:ce:
         0e:2e:f7:0d:0d:65:f4:d7:65:2e:3f:d0:b9:67:b3:28:ba:73:
         49:5d:e9:d7:10:e2:c8:2d:01:3c:d4:1a:0b:14:d2:a3:48:00:
         a7:f0:76:f6:27:47:da:8f:48:89:7f:c7:8b:4b:b4:19:db:ca:
         b7:2c:6f:1c:1d:f3:13:28:45:73:ca:66:7d:b7:36:85:76:ee:
         d8:5c:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org