Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4fb3191330dabb5c01646a59a921dab3f41832f7.roa
File:                     4fb3191330dabb5c01646a59a921dab3f41832f7.roa (raw, json)
Hash identifier:          kU/x8nZMeL1aL2IeAWIvbbRjn1m1t8mikjZy0zRP/HE=
Subject key identifier:   91:C7:E6:FC:9D:68:29:6C:35:96:29:D8:3D:C1:E2:A2:F5:CD:D2:DA
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DCAE3
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4fb3191330dabb5c01646a59a921dab3f41832f7.roa
Signing time:             Wed 24 Mar 2021 14:34:58 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     22368
IP address blocks:        190.252.104.0/23 maxlen: 24
                          190.252.106.0/24 maxlen: 24
                          200.21.234.0/23 maxlen: 24
                          200.21.236.0/23 maxlen: 24
                          200.21.238.0/24 maxlen: 24
                          179.33.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903907 (0xdcae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=4fb3191330dabb5c01646a59a921dab3f41832f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:f7:9b:a5:e1:bd:0e:03:c7:a7:9d:56:a1:
                    2b:5a:c5:13:0e:3d:1a:09:9a:f0:bb:0b:51:27:03:
                    29:c8:db:51:46:9e:c3:db:73:33:e5:46:44:80:4b:
                    48:0e:48:b7:0e:bd:4c:5b:c6:81:02:a4:80:06:5b:
                    f8:2b:1a:fb:b8:10:af:19:a5:31:6a:ad:70:c2:3b:
                    ec:48:6d:9a:31:e0:ed:20:4b:7f:b2:67:ea:36:ac:
                    90:4b:fe:12:fa:35:56:6d:13:fd:63:60:4e:ba:2e:
                    52:19:e8:b6:69:26:4e:45:53:b8:a5:02:1d:cc:10:
                    b7:7e:15:df:86:76:af:51:c3:f0:ac:fc:dc:64:d9:
                    15:0d:ca:0c:3a:9d:4d:8e:f4:5d:bc:0a:95:a1:f4:
                    16:d2:30:cb:2f:e7:cd:e4:e1:6f:96:45:e4:bc:22:
                    f1:dd:2c:52:3f:94:f3:92:45:ab:e9:78:0e:8d:fe:
                    2f:45:7e:ca:80:a2:25:bb:07:cd:ca:dc:49:16:dd:
                    db:54:5b:bb:06:88:34:54:a8:04:b3:61:a4:f6:5f:
                    d2:dc:2b:4e:77:14:d2:51:0f:f8:ca:ec:85:33:8d:
                    7c:94:12:25:69:b8:5b:55:1f:99:70:bf:d0:1e:f4:
                    a3:e6:13:2b:1c:f2:4d:4f:61:75:d3:65:02:3c:36:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C7:E6:FC:9D:68:29:6C:35:96:29:D8:3D:C1:E2:A2:F5:CD:D2:DA
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4fb3191330dabb5c01646a59a921dab3f41832f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.33.109.0/24
                  190.252.104.0-190.252.106.255
                  200.21.234.0-200.21.238.255

    Signature Algorithm: sha256WithRSAEncryption
         23:87:f2:c3:c0:4b:2d:2a:99:f8:ac:86:af:29:6a:db:ef:fd:
         16:a9:9e:c4:13:d6:08:34:ba:cd:7a:8e:cc:5c:0e:46:fd:de:
         65:7d:68:53:5c:45:08:a3:fb:dc:5a:e5:9d:38:5d:cc:6c:2d:
         63:6d:28:39:9b:99:11:76:69:93:b9:17:f2:e0:b8:e1:c0:6c:
         7a:96:8d:3c:55:57:62:69:36:30:e6:81:c0:e8:98:83:38:49:
         50:64:e4:b7:d3:64:14:a8:23:2c:1a:fc:f8:69:e8:b6:81:b8:
         c8:22:1f:2a:e4:d1:5e:87:5c:12:f3:19:c9:6b:17:ed:8a:9e:
         ef:aa:09:35:af:da:79:26:7d:e8:d8:fb:7e:21:31:22:c5:0c:
         fe:45:d3:9d:96:50:44:da:dd:0b:37:bd:6d:49:21:c1:03:ae:
         9d:a2:09:74:e5:06:b6:fd:f2:02:b9:cb:16:1f:00:8d:a5:95:
         86:af:4e:4f:7b:f6:78:7a:d1:c5:64:35:3f:1f:6e:91:ca:49:
         a8:81:99:52:0f:e1:73:b4:a4:b5:6c:39:9d:0b:c2:2a:25:d5:
         d3:4b:88:fc:fe:22:25:e9:0d:39:3b:a9:d4:8d:15:f0:37:81:
         53:ba:ec:ac:a0:b4:46:72:4c:9d:1c:64:2c:3e:7d:4a:e7:9d:
         c2:0f:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org