Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30.roa
File:                     03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30.roa (raw, json)
Hash identifier:          rTCn5M3Kv4x0Gnh+0ca9W9lKL7+XHcVytn1kMRoBx5Q=
Subject key identifier:   3C:8B:46:67:64:31:78:C9:7A:83:47:CD:09:84:43:25:77:4F:C0:B9
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DD599
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30.roa
Signing time:             Wed 24 Mar 2021 14:34:58 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     21578
IP address blocks:        190.68.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906649 (0xdd599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:0f:ca:2e:12:d9:2d:17:37:22:1d:3a:91:
                    b8:3c:95:db:cb:c2:e1:b3:7c:93:53:ba:ec:84:31:
                    01:1d:db:fa:95:a3:d5:11:6a:55:27:77:3c:30:3d:
                    97:e2:8d:73:06:79:f6:6f:30:98:d4:8e:2d:b7:6e:
                    c3:22:dc:b9:7e:45:23:9d:04:23:02:62:53:5e:da:
                    8d:4c:01:16:c1:71:44:15:dc:57:66:6b:24:53:60:
                    6c:d3:04:75:95:cd:2d:97:0f:78:aa:b9:f7:3e:02:
                    67:1e:f9:45:6b:7a:6d:e7:b8:4a:73:20:aa:d1:69:
                    a2:19:f5:39:e4:8e:bf:aa:5a:fe:fa:a0:f0:c5:bb:
                    22:60:cc:f5:58:3b:52:25:f2:fb:90:a3:79:03:0e:
                    12:15:65:50:3c:97:2d:68:f5:45:ee:f1:52:92:ce:
                    cd:ee:2d:1e:29:16:48:07:fa:25:e8:a3:f1:a7:5e:
                    de:77:01:af:d1:08:61:b6:cf:a6:a3:d6:da:0a:2d:
                    fb:fc:ed:28:89:f3:a1:df:ee:bc:b4:5b:0a:97:4c:
                    eb:3f:f6:9a:0e:3f:30:12:4a:b7:83:27:51:e0:2d:
                    5e:ab:99:0c:24:f3:07:cf:34:d3:d6:7a:b1:b0:11:
                    92:a4:aa:e3:fc:e8:df:4f:7e:51:ee:17:f7:53:b8:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8B:46:67:64:31:78:C9:7A:83:47:CD:09:84:43:25:77:4F:C0:B9
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/03ce8bd7ae38bf7b59c1429e1c8532dcd69f7d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.68.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:56:2b:da:e9:47:6b:17:25:c7:c6:50:82:6d:c5:1c:80:ef:
         93:c1:30:25:ee:41:b9:f2:0b:b9:2c:76:37:42:f1:4e:79:9e:
         a2:fe:17:61:86:2d:a9:53:fe:48:77:dc:a8:e6:46:46:f5:0c:
         42:02:b6:d6:a3:83:76:2b:59:1e:a3:72:ba:a5:bf:59:23:6e:
         b6:94:2a:42:e6:56:a3:7f:05:79:ae:b4:2c:54:18:34:64:ea:
         3d:23:e5:2d:cd:90:19:21:6e:b0:55:55:f5:1d:7a:21:03:4e:
         f9:8a:10:f0:54:8f:4a:ae:00:71:63:f3:21:0d:fe:03:13:28:
         e1:8a:7a:d6:a5:00:97:6c:18:86:c8:21:8e:db:da:92:e7:67:
         ad:21:27:3a:5f:e8:d8:75:73:2e:2c:37:f9:00:48:87:36:da:
         2e:07:05:0e:20:ab:9d:dd:2e:78:e2:be:86:ca:7c:7c:03:5f:
         c6:10:a7:af:9c:60:f7:67:a4:a0:1e:a9:3c:c4:84:f0:33:d7:
         57:fc:f6:d7:b1:a5:84:22:2d:80:94:67:16:4c:de:61:fd:98:
         3d:43:77:ac:31:a6:44:d3:04:11:1f:7e:50:5a:af:cf:35:6b:
         3d:25:a2:9f:43:d5:92:9e:31:d1:b0:6a:4b:7c:cc:bd:ae:53:
         c4:7f:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org