Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c50b5fa6-b5f0-4a9d-a7f0-1ec1713a96f7/6ba7faae6ce980250f22ae597b477ec327389621.roa
File:                     6ba7faae6ce980250f22ae597b477ec327389621.roa (raw, json)
Hash identifier:          Khk3vnQf7/nAgLhSWSaYJuK58q042KaMJ6CO3YjyYzo=
Subject key identifier:   DF:B0:EA:03:79:74:42:36:FB:F4:04:91:78:7E:46:A3:DE:52:56:E6
Certificate issuer:       /CN=e66659dfcc8e8859189fa3e445dd43ab55e4c243
Certificate serial:       0E9051
Authority key identifier: F2:7A:2E:7D:D6:7B:5D:58:CB:EF:C3:3E:3F:58:57:22:E6:79:A5:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66659dfcc8e8859189fa3e445dd43ab55e4c243.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c50b5fa6-b5f0-4a9d-a7f0-1ec1713a96f7/6ba7faae6ce980250f22ae597b477ec327389621.roa
Signing time:             Tue 20 Apr 2021 13:49:23 +0000
ROA not before:           Tue 20 Apr 2021 03:00:00 +0000
ROA not after:            Thu 20 Apr 2023 03:00:00 +0000
asID:                     27877
IP address blocks:        190.123.96.0/20 maxlen: 20
                          190.123.112.0/21 maxlen: 21
                          200.110.160.0/21 maxlen: 21
                          2803:5000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954449 (0xe9051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66659dfcc8e8859189fa3e445dd43ab55e4c243
        Validity
            Not Before: Apr 20 03:00:00 2021 GMT
            Not After : Apr 20 03:00:00 2023 GMT
        Subject: CN=6ba7faae6ce980250f22ae597b477ec327389621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:c7:e9:c0:94:cf:15:be:1d:c9:45:ef:19:
                    3b:1c:12:88:b9:ca:5d:5e:d3:8d:fa:dc:f8:a5:25:
                    91:94:b0:7a:e7:cf:e8:c7:1d:8e:37:0b:f3:5a:8e:
                    09:98:d0:95:fd:48:bd:59:4e:6d:f8:33:b6:48:20:
                    66:66:87:6e:66:99:9e:b5:94:0f:b3:1a:41:94:ae:
                    39:1a:56:ad:44:13:ee:c1:14:54:49:6f:fd:3b:dd:
                    2c:ca:4f:09:e6:f6:6c:80:da:29:3e:0d:31:7f:05:
                    65:68:03:f7:df:97:ef:1f:b8:e4:b4:19:2c:23:10:
                    e5:e1:97:43:3a:3a:14:5e:c4:4b:fd:45:66:48:3c:
                    62:13:f1:3b:2a:98:6a:58:c1:b2:c5:3f:a7:a7:2f:
                    e0:0f:75:6f:43:ab:87:e8:ce:5f:4e:b4:59:04:62:
                    b3:29:28:49:62:61:f4:6b:e5:28:ab:96:51:4d:d2:
                    91:51:23:ca:31:a1:57:b3:bb:0f:a8:cf:dd:cd:4c:
                    b6:2a:b3:b0:8d:db:74:5c:83:96:2d:4a:d7:94:99:
                    d4:24:36:db:83:23:b9:e1:f9:4a:58:31:94:4d:23:
                    c7:a4:76:07:3d:03:83:43:77:c7:b2:fd:38:fa:a4:
                    81:0d:37:9b:f7:f6:fb:fe:36:3c:d8:6d:5a:53:d8:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B0:EA:03:79:74:42:36:FB:F4:04:91:78:7E:46:A3:DE:52:56:E6
            X509v3 Authority Key Identifier:
                keyid:F2:7A:2E:7D:D6:7B:5D:58:CB:EF:C3:3E:3F:58:57:22:E6:79:A5:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66659dfcc8e8859189fa3e445dd43ab55e4c243.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c50b5fa6-b5f0-4a9d-a7f0-1ec1713a96f7/6ba7faae6ce980250f22ae597b477ec327389621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c50b5fa6-b5f0-4a9d-a7f0-1ec1713a96f7/e66659dfcc8e8859189fa3e445dd43ab55e4c243.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.96.0-190.123.119.255
                  200.110.160.0/21
                IPv6:
                  2803:5000::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:f9:c3:2d:62:ec:b8:d3:39:c4:bc:4a:8d:e9:a8:0e:42:62:
         27:49:85:fa:04:88:19:f5:f1:c5:48:50:30:fd:5b:35:d2:cb:
         55:67:d6:55:e7:b2:6c:d1:5a:f2:ed:b3:f4:09:04:39:fa:9d:
         f7:da:1e:c4:b9:08:a1:a2:34:87:bf:f4:b9:34:8e:b6:ea:d6:
         40:dd:d8:00:28:b5:4c:ab:1a:c3:2c:8c:fc:e5:50:34:7f:4f:
         46:7c:9c:12:0f:58:16:e0:78:e6:c2:e5:c4:e4:ac:d8:29:ae:
         a2:ad:bc:90:0e:e2:7d:00:bc:75:92:c5:42:5e:2b:f8:29:aa:
         04:d6:db:ac:c6:90:bc:10:9f:5c:ba:37:21:ac:fb:5f:b9:e9:
         06:2a:68:15:ba:db:b7:65:1a:50:7c:89:c1:8c:7d:25:41:9b:
         26:d0:e9:64:f6:38:3c:0b:ad:41:8d:a2:2d:14:45:94:a1:62:
         6b:0e:7b:21:19:be:27:e4:a7:77:c1:c8:6b:22:73:83:fe:da:
         81:4c:20:d0:de:54:6d:21:a3:1c:4e:66:b1:d3:b9:f3:d9:29:
         cc:ec:91:bf:d9:a4:7d:23:d0:c5:22:e6:ea:68:6d:38:76:ad:
         99:10:3a:05:15:ef:a9:5a:03:1c:4e:1d:d3:4c:ff:b7:3b:b4:
         e9:b4:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org