Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3c49bc583560e16131ccf7f710de9a55a3d01e21.roa
File:                     3c49bc583560e16131ccf7f710de9a55a3d01e21.roa (raw, json)
Hash identifier:          OgzLEN5vVVU7CgrFnR99ftoFoTxwxAb8ORbL/siDIQ4=
Subject key identifier:   FC:62:4F:4A:9B:50:DE:10:57:1A:FF:41:22:11:18:58:48:87:25:F2
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       287EF9
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3c49bc583560e16131ccf7f710de9a55a3d01e21.roa
Signing time:             Fri 03 Nov 2023 14:13:08 +0000
ROA not before:           Fri 03 Nov 2023 14:13:08 +0000
ROA not after:            Mon 03 Nov 2025 14:13:08 +0000
asID:                     3816
IP address blocks:        191.106.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2653945 (0x287ef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Nov  3 14:13:08 2023 GMT
            Not After : Nov  3 14:13:08 2025 GMT
        Subject: CN=3c49bc583560e16131ccf7f710de9a55a3d01e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:fe:eb:af:8d:0b:30:b6:ed:97:3a:d4:b2:
                    98:f3:e6:97:73:c9:d8:c9:39:f6:d6:85:10:f7:8d:
                    e6:23:21:09:df:c1:23:a9:47:6d:c3:98:92:8d:54:
                    d5:39:ba:8e:77:0f:52:8b:cd:d5:31:38:17:f2:a3:
                    48:a0:19:28:02:bf:c7:3a:b9:5d:5f:e0:e4:8e:2c:
                    66:78:17:5f:a6:88:98:37:c3:03:4c:91:35:7f:ba:
                    f2:a6:eb:60:86:bd:77:7e:32:0e:95:3f:6c:02:22:
                    5c:42:ae:ca:ea:49:69:84:1a:45:ae:38:c2:75:f7:
                    4c:a6:dc:2b:4f:2a:d7:d5:1a:4d:41:68:fc:63:e4:
                    f6:c5:a5:e5:99:45:f5:2b:e4:fb:12:7c:ff:63:33:
                    c0:28:b5:9c:07:48:d7:b9:f5:7b:f6:aa:6e:d7:5d:
                    59:04:15:b4:7c:9e:35:40:b6:3e:42:1d:e8:50:2a:
                    e5:1b:07:7b:91:30:d4:0e:64:f6:d9:da:0e:6f:b6:
                    a7:2c:b5:24:e3:6a:22:25:36:f2:ae:70:3f:4e:c1:
                    69:6d:b1:c9:0c:96:62:66:76:6b:50:73:2e:94:f4:
                    db:e7:fa:1a:c1:96:8a:7d:32:91:33:55:0b:51:eb:
                    fa:91:33:0c:d5:04:59:5c:fa:26:2a:e5:8d:b3:de:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:4F:4A:9B:50:DE:10:57:1A:FF:41:22:11:18:58:48:87:25:F2
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/3c49bc583560e16131ccf7f710de9a55a3d01e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.106.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:71:4b:77:ae:6c:bb:49:9a:3a:0c:d8:5c:e0:2b:e1:ff:a6:
         fd:05:0b:5c:c5:b7:9e:d2:3e:8c:2c:fa:41:c2:65:c3:ab:7f:
         b1:6c:ac:6d:7d:f4:2a:a3:1c:85:35:47:d9:82:b8:15:b0:50:
         41:23:f9:fe:79:f0:5e:ce:af:af:84:be:1b:ff:66:3b:b4:ec:
         e6:d9:69:73:e0:dc:26:8c:f6:d1:12:b6:a7:75:d1:f2:98:98:
         6d:c5:1c:16:76:03:a4:aa:a3:59:c0:cf:a7:ee:8c:cd:e4:4a:
         55:26:1a:29:d1:0d:77:df:e5:fb:36:be:a1:d0:12:ab:02:fb:
         a8:60:f1:56:89:a3:56:34:6f:35:f7:98:c9:da:30:23:38:61:
         1e:6a:26:83:d9:b7:81:08:e7:0e:ad:b4:9c:32:98:e7:9d:cb:
         74:36:92:00:fa:0a:60:c3:5e:4b:13:53:ee:39:58:85:a9:78:
         a0:7f:a4:8e:45:a3:91:97:c1:ae:d0:99:88:61:fd:d7:24:33:
         2f:ce:00:62:cc:2c:46:55:89:e7:93:e7:50:da:ff:60:9a:15:
         44:05:88:83:3d:64:b4:33:0e:e2:7b:1c:3f:b0:c7:64:13:57:
         40:67:40:c2:12:07:4e:14:cb:c9:f3:ca:3a:21:8f:cc:ef:5a:
         8d:62:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org