Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/0e616f0370e32cd56328bc367c7686cf872f0e0b.roa
File:                     0e616f0370e32cd56328bc367c7686cf872f0e0b.roa (raw, json)
Hash identifier:          n27O6nk33c4Z4zb7rC8yHU9ALebDQPeDlEMIoa7w0MM=
Subject key identifier:   4B:39:06:20:09:18:E6:77:67:6D:60:5D:31:C6:1F:21:05:D3:2E:13
Certificate issuer:       /CN=6e441519e30664b9a2cdf15d20d8d69bd047094c
Certificate serial:       0DB00B
Authority key identifier: 1E:C7:DD:A2:F2:D1:31:03:71:3E:37:DE:2B:7B:9A:D4:0F:5A:20:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e441519e30664b9a2cdf15d20d8d69bd047094c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/0e616f0370e32cd56328bc367c7686cf872f0e0b.roa
Signing time:             Wed 24 Mar 2021 14:38:25 +0000
ROA not before:           Wed 24 Mar 2021 14:38:25 +0000
ROA not after:            Tue 24 Mar 2026 14:38:25 +0000
asID:                     263730
IP address blocks:        131.221.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897035 (0xdb00b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e441519e30664b9a2cdf15d20d8d69bd047094c
        Validity
            Not Before: Mar 24 14:38:25 2021 GMT
            Not After : Mar 24 14:38:25 2026 GMT
        Subject: CN=0e616f0370e32cd56328bc367c7686cf872f0e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:96:c7:b3:33:43:39:1c:3d:e3:70:92:45:
                    08:3a:82:c6:d7:c7:24:fd:48:eb:a2:65:63:a1:9b:
                    4f:93:6a:f5:27:b5:3d:88:6c:ec:b0:00:f6:0e:15:
                    6f:44:a7:b0:c8:3a:54:ea:f4:b7:9a:27:c1:e1:6e:
                    fe:cd:5d:69:47:d2:50:c0:f0:60:4a:3b:bd:3e:88:
                    9f:93:11:95:7e:b0:d6:c3:ae:fc:ed:a7:e4:cb:02:
                    0a:ed:e7:5d:d9:75:2a:b7:ad:91:83:2f:9e:80:e3:
                    23:b3:a9:7a:72:05:b8:2d:f1:d1:3d:7a:94:33:07:
                    4b:9a:ac:20:ea:9c:d8:82:21:8e:28:df:e8:5e:c9:
                    e4:2d:56:20:a8:53:61:89:5c:de:e1:66:4e:34:e3:
                    15:ed:0b:05:95:aa:50:ed:51:ff:ba:a1:c7:9b:e3:
                    1f:b6:2a:c0:86:cb:da:da:97:8e:51:c3:3a:20:54:
                    fe:a2:33:94:8f:64:20:01:36:05:c8:18:b6:3c:5f:
                    5d:05:44:63:09:bd:5a:85:df:b5:79:90:e0:ac:36:
                    5f:9d:b0:c3:4d:3c:90:2a:a8:b6:e9:73:70:d1:78:
                    4a:93:6f:37:22:c2:6b:fc:c6:a3:72:fe:5b:45:b8:
                    28:42:17:1a:46:15:29:13:eb:22:19:15:cd:cb:bc:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:39:06:20:09:18:E6:77:67:6D:60:5D:31:C6:1F:21:05:D3:2E:13
            X509v3 Authority Key Identifier:
                keyid:1E:C7:DD:A2:F2:D1:31:03:71:3E:37:DE:2B:7B:9A:D4:0F:5A:20:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e441519e30664b9a2cdf15d20d8d69bd047094c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/0e616f0370e32cd56328bc367c7686cf872f0e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/6e441519e30664b9a2cdf15d20d8d69bd047094c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:e5:79:d4:3f:26:11:fd:25:b8:74:c6:bb:23:7d:43:2a:
         da:e1:7f:1c:35:64:50:5c:ff:02:a9:63:59:c2:84:18:15:43:
         54:42:fe:65:08:6e:a4:7c:93:c4:c0:7e:51:f0:90:97:52:9f:
         3a:a4:f1:17:01:6c:70:4b:e7:f1:48:f9:cf:7a:c5:6d:75:4d:
         33:61:87:5d:79:a8:c5:d3:55:6d:88:da:b8:fc:f6:4c:e0:ca:
         14:7b:f5:4a:d2:6e:8b:b8:37:76:d6:c1:d7:f1:6d:20:4f:8a:
         29:c1:89:20:9c:13:95:7b:dc:c1:d2:d3:5f:3a:d7:ad:f3:7c:
         07:23:63:be:64:39:28:56:69:4e:e4:1e:d8:b5:78:5f:9d:34:
         d0:0d:ac:88:0d:ae:da:85:b9:a7:c5:ce:2b:6b:dc:df:86:6c:
         da:4d:4b:31:79:a7:64:b1:3a:ab:65:10:7b:22:93:be:d4:6d:
         6f:ac:fd:32:98:0f:04:74:05:17:a5:e2:03:c0:9f:9a:2a:fa:
         4a:fb:b1:64:63:7e:3a:5e:bb:bd:b5:7f:cc:5b:ed:59:65:1d:
         74:30:7f:68:2f:f2:44:47:86:83:6e:3e:f1:57:f2:d8:05:f1:
         6e:5b:8d:29:25:9e:af:65:ef:1c:20:88:2c:5c:97:26:8e:79:
         f4:b0:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org