Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/b5f7c57341af6cd43a83215fec7c0048e311043c.roa
File:                     b5f7c57341af6cd43a83215fec7c0048e311043c.roa (raw, json)
Hash identifier:          wf0gMkRTL9WEwhw3dMPpaFwbyUtCh4+EAuQXZYaKnA0=
Subject key identifier:   6E:73:33:5C:73:AE:8F:0F:C8:58:6B:C2:DD:BB:79:B0:F6:3D:38:5B
Certificate issuer:       /CN=acf2f8bdf63fefc207c62a198746368b3d6991d1
Certificate serial:       122667
Authority key identifier: 19:16:F1:DA:85:AC:C5:FB:D1:A0:F6:25:22:ED:D2:92:80:2C:68:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf2f8bdf63fefc207c62a198746368b3d6991d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/b5f7c57341af6cd43a83215fec7c0048e311043c.roa
Signing time:             Mon 06 Sep 2021 17:22:04 +0000
ROA not before:           Mon 06 Sep 2021 03:00:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:00 +0000
asID:                     271952
IP address blocks:        190.109.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189479 (0x122667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf2f8bdf63fefc207c62a198746368b3d6991d1
        Validity
            Not Before: Sep  6 03:00:00 2021 GMT
            Not After : Sep  6 03:00:00 2023 GMT
        Subject: CN=b5f7c57341af6cd43a83215fec7c0048e311043c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5b:27:92:c7:ae:52:8b:e3:36:3e:fa:82:1e:
                    e9:50:ee:26:fe:ad:c8:64:0d:eb:40:14:6b:2a:2a:
                    54:0d:e0:1d:f1:a3:08:54:bc:c3:85:82:d5:a3:57:
                    64:65:4c:29:85:7d:f8:08:86:eb:c1:48:91:13:5c:
                    aa:08:57:6b:c3:2e:23:56:85:09:ab:5d:55:8c:5e:
                    a2:72:ab:90:80:68:b9:c0:bd:92:b0:87:94:8b:43:
                    28:77:28:5d:66:dd:a7:13:fe:6d:60:84:d7:ea:a7:
                    fa:d1:3c:81:65:61:a6:83:98:38:5d:09:1e:79:83:
                    74:dc:4b:68:51:ef:d6:b5:3e:1e:4e:af:d9:5a:e1:
                    69:5d:de:61:1f:77:1c:d7:2d:8c:a1:1f:69:ff:d5:
                    96:19:59:e9:75:67:3f:c6:02:5d:4d:c7:47:9c:e4:
                    59:4b:66:e3:0c:3c:10:53:26:96:94:3d:da:48:7b:
                    6f:2c:9a:ff:6d:bd:a9:76:f7:62:96:98:79:0e:ce:
                    0e:af:4e:02:bd:32:64:c0:66:74:4f:91:98:c2:23:
                    59:62:a3:d1:26:b3:42:cc:db:c5:70:3e:46:97:dd:
                    d1:38:d9:26:b6:dc:68:d7:5b:47:27:2b:2c:54:08:
                    27:d9:31:c0:a2:00:91:10:22:33:62:24:cf:3b:38:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:33:5C:73:AE:8F:0F:C8:58:6B:C2:DD:BB:79:B0:F6:3D:38:5B
            X509v3 Authority Key Identifier:
                keyid:19:16:F1:DA:85:AC:C5:FB:D1:A0:F6:25:22:ED:D2:92:80:2C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf2f8bdf63fefc207c62a198746368b3d6991d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/b5f7c57341af6cd43a83215fec7c0048e311043c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c5aad79c-eb1d-4629-a8e6-69eb4c8bc2cd/acf2f8bdf63fefc207c62a198746368b3d6991d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:d7:7d:f1:49:18:75:cb:1b:5f:b9:7d:82:6b:ee:9f:09:2a:
         d0:05:d2:75:50:ec:29:4d:c4:57:58:84:18:93:51:25:dc:ae:
         bd:9d:60:13:14:75:95:8c:7d:0e:a1:5f:f1:85:62:64:48:e9:
         71:6b:f7:0a:2d:7b:18:64:43:26:7a:ec:73:ef:6d:9e:26:be:
         c4:96:bb:4f:a8:ff:85:c7:dd:d1:0c:53:d1:6a:c3:43:90:d2:
         76:e9:fe:1f:47:03:02:f0:be:08:4f:27:69:70:42:c6:bf:b3:
         28:23:95:51:61:4f:10:ab:ac:f0:1c:c1:eb:ab:f0:f6:c0:2e:
         74:f7:20:e6:48:b3:a8:c2:be:8a:74:c9:7e:c2:66:0b:2c:93:
         4c:9d:e7:6b:6b:ec:4c:e5:be:62:d1:27:e9:3c:38:f1:33:54:
         3c:e3:5f:53:64:b8:ee:02:dc:8c:54:83:bc:69:36:75:ba:88:
         0b:c6:ac:45:4c:16:be:18:e9:aa:db:75:94:38:6b:86:4b:5d:
         da:16:6a:eb:83:34:eb:9f:46:9f:5a:46:75:9b:58:5c:95:35:
         8e:49:90:8b:3b:da:c7:07:e0:3b:70:ee:51:db:f5:c6:e6:68:
         ec:0a:98:77:61:ed:ce:ef:be:4e:b5:0c:29:9f:c9:8b:6b:45:
         ae:c6:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org