Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/2a6d983acc1577c79d9906417f4065cabf2846ae.roa
File:                     2a6d983acc1577c79d9906417f4065cabf2846ae.roa (raw, json)
Hash identifier:          gYQ/d0Xi/ZckBSqGPv9m5ZNp6YSLs2x+gTeCIexXaH0=
Subject key identifier:   51:FC:FA:38:4A:B8:E4:D3:22:8C:25:00:1E:25:E8:56:84:7B:08:CE
Certificate issuer:       /CN=8f7555abd6f79519d0fd138e28d493df01d9cc7b
Certificate serial:       0D0D1D
Authority key identifier: F8:AD:22:C7:0B:38:CF:89:94:F6:01:7A:63:5A:82:8D:38:92:0E:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f7555abd6f79519d0fd138e28d493df01d9cc7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/2a6d983acc1577c79d9906417f4065cabf2846ae.roa
Signing time:             Wed 24 Mar 2021 14:30:14 +0000
ROA not before:           Wed 24 Mar 2021 14:30:13 +0000
ROA not after:            Tue 24 Mar 2026 14:30:13 +0000
asID:                     61456
IP address blocks:        131.108.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855325 (0xd0d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7555abd6f79519d0fd138e28d493df01d9cc7b
        Validity
            Not Before: Mar 24 14:30:13 2021 GMT
            Not After : Mar 24 14:30:13 2026 GMT
        Subject: CN=2a6d983acc1577c79d9906417f4065cabf2846ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:31:3d:bf:23:f1:bc:ef:52:6c:cb:ef:d3:
                    92:bc:cd:e4:a3:11:30:a4:bd:32:67:07:f0:35:e2:
                    e9:4a:87:70:2e:45:35:7e:e1:a8:25:e9:07:52:3b:
                    21:23:10:21:9e:e7:c5:45:f2:f2:eb:39:82:35:1c:
                    63:d9:cc:0f:c0:ca:ee:9c:61:02:d5:c1:19:d8:6f:
                    b1:c7:39:6b:e3:f5:36:be:6c:d1:e1:98:43:cb:fb:
                    68:a6:d9:c6:0d:e0:c2:6c:8e:a8:1b:24:23:43:92:
                    7e:0e:9e:65:60:40:bc:ff:71:18:aa:74:fe:e7:11:
                    b7:7f:6f:d8:90:04:87:d3:4b:50:e1:10:96:be:bd:
                    86:3d:5c:49:e9:c9:9e:6a:ce:0c:0d:21:4d:8a:31:
                    19:48:94:89:c0:4a:cb:e8:a2:da:21:0a:f8:dd:a6:
                    af:9f:40:cd:03:e5:25:7d:da:0f:87:a6:79:6b:6d:
                    1b:ee:b8:32:3d:57:84:bd:5f:ba:62:93:ba:91:a3:
                    a2:5d:e5:ad:f3:31:37:65:d0:40:37:f5:c0:79:be:
                    fd:42:ad:55:e3:37:54:6d:51:0f:4a:ab:2d:6e:91:
                    a0:1b:12:38:2c:63:98:da:e9:b4:ea:fd:21:de:e0:
                    29:7c:c0:7b:07:8f:10:4b:f8:c1:2a:97:6e:d5:93:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:FA:38:4A:B8:E4:D3:22:8C:25:00:1E:25:E8:56:84:7B:08:CE
            X509v3 Authority Key Identifier:
                keyid:F8:AD:22:C7:0B:38:CF:89:94:F6:01:7A:63:5A:82:8D:38:92:0E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f7555abd6f79519d0fd138e28d493df01d9cc7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/2a6d983acc1577c79d9906417f4065cabf2846ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/8f7555abd6f79519d0fd138e28d493df01d9cc7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:7f:23:ab:e0:ca:d8:f0:0c:c7:64:e4:7a:dc:bb:3c:3a:1e:
         08:a4:f4:8d:23:e3:59:db:87:cd:33:d9:4c:9d:8f:49:c9:b5:
         55:08:85:80:03:49:29:ab:6f:8b:46:07:1b:ed:f3:41:9e:5a:
         ed:1b:64:ba:2f:af:91:05:e8:f0:58:bc:e4:0d:23:81:a8:62:
         4d:98:e0:31:e2:36:7d:36:22:74:45:d7:69:2f:bd:d0:89:33:
         56:73:c1:5a:77:c2:26:e4:eb:8a:dd:ca:d1:b9:d8:54:3a:9c:
         7a:c3:e3:64:dc:73:a8:80:2a:69:82:56:c4:1e:f2:ef:0c:6e:
         6e:21:1d:5e:65:15:bb:48:79:ef:e6:6c:ef:3f:f3:3d:88:95:
         9a:3a:f5:db:8b:00:57:17:4b:25:61:cc:75:1e:35:a6:79:cf:
         06:1e:37:90:03:14:e4:7e:8b:29:51:65:97:a6:b8:d4:70:1f:
         04:89:19:15:df:fa:85:a6:48:9b:97:22:be:4b:8a:4c:d1:94:
         cc:aa:4f:a9:13:db:d8:f8:a5:a8:df:bc:34:f0:53:4e:78:83:
         44:18:ba:65:91:1b:f4:da:b3:a0:2b:fd:90:11:9b:b2:7b:dd:
         3e:b4:e2:a6:75:02:78:b2:09:aa:81:38:49:3a:5e:af:31:36:
         62:27:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org