Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c7bda23e-8ca5-49b4-bcf0-a5c395d120c0/2a05ce2e3b8890290031ab9add6e33437f054507.roa
File:                     2a05ce2e3b8890290031ab9add6e33437f054507.roa (raw, json)
Hash identifier:          LEtzw02BQsjvkidxGBLl64PQH7xBQe1oR7CHTzJ2I94=
Subject key identifier:   91:1D:ED:19:FF:A2:2A:8A:79:F4:46:A4:C8:66:58:85:71:77:99:E2
Certificate issuer:       /CN=b8e73cb50e31820e31781d229b35211c98236f88
Certificate serial:       0BEB46
Authority key identifier: 91:74:DC:ED:D3:8A:95:2C:C6:03:0A:69:D8:F7:AB:13:FA:84:33:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e73cb50e31820e31781d229b35211c98236f88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c7bda23e-8ca5-49b4-bcf0-a5c395d120c0/2a05ce2e3b8890290031ab9add6e33437f054507.roa
Signing time:             Wed 24 Mar 2021 14:38:09 +0000
ROA not before:           Wed 24 Mar 2021 14:38:09 +0000
ROA not after:            Tue 24 Mar 2026 14:38:09 +0000
asID:                     27896
IP address blocks:        190.0.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781126 (0xbeb46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e73cb50e31820e31781d229b35211c98236f88
        Validity
            Not Before: Mar 24 14:38:09 2021 GMT
            Not After : Mar 24 14:38:09 2026 GMT
        Subject: CN=2a05ce2e3b8890290031ab9add6e33437f054507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:50:87:8d:f0:0f:ce:62:49:ae:2a:ec:d9:5e:
                    e4:d2:ca:94:5f:bd:93:de:91:b4:5f:46:46:f6:1c:
                    8b:55:35:2f:90:dc:f1:d1:c6:75:6a:fc:32:9f:db:
                    07:2a:ca:cf:69:7d:6c:64:6a:56:5a:48:a5:71:27:
                    43:21:8a:e9:1d:75:8b:35:34:15:19:84:08:6c:e6:
                    2a:19:2f:af:f3:d4:00:da:d6:49:8c:31:b4:85:00:
                    b7:e1:e6:6d:c4:b4:ea:fd:4b:68:1c:6d:04:c3:25:
                    bf:d9:44:c3:16:af:de:a9:ea:dc:7b:b6:2c:41:73:
                    62:b1:c8:76:f1:bb:b9:96:75:e7:2d:38:89:04:6f:
                    5d:aa:d8:05:d1:dc:17:9b:c7:a9:9d:12:c8:00:14:
                    c0:f0:cb:40:b9:2b:84:df:b2:57:78:80:43:b0:79:
                    26:e9:79:6a:30:5e:cb:b0:58:23:7c:9f:88:33:39:
                    2e:54:6b:96:eb:fe:36:25:a6:c6:7e:a1:2b:b1:2e:
                    13:da:d9:26:27:56:24:9e:23:4d:3c:a4:f9:5c:05:
                    f3:82:4a:aa:d4:9b:e4:e7:2d:17:bf:c0:fc:c7:9a:
                    bb:dc:fd:d2:84:2d:77:08:e3:bf:b5:ae:e7:d4:6e:
                    76:eb:45:0c:e8:d0:3a:1b:ba:ac:a3:72:6a:78:30:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1D:ED:19:FF:A2:2A:8A:79:F4:46:A4:C8:66:58:85:71:77:99:E2
            X509v3 Authority Key Identifier:
                keyid:91:74:DC:ED:D3:8A:95:2C:C6:03:0A:69:D8:F7:AB:13:FA:84:33:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e73cb50e31820e31781d229b35211c98236f88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c7bda23e-8ca5-49b4-bcf0-a5c395d120c0/2a05ce2e3b8890290031ab9add6e33437f054507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c7bda23e-8ca5-49b4-bcf0-a5c395d120c0/b8e73cb50e31820e31781d229b35211c98236f88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:07:c0:70:16:74:93:43:53:d5:c0:23:a7:44:08:20:67:75:
         1b:53:b1:a8:ab:80:07:2b:7c:3f:ec:61:48:d2:88:5b:37:c6:
         1f:47:82:b8:fb:27:b6:93:59:07:1b:72:d6:f8:05:06:1d:c3:
         c4:40:28:be:c0:b5:d9:0b:e7:c6:3f:e0:f7:42:94:9b:97:eb:
         8f:be:78:00:a7:31:21:4e:46:88:41:92:21:8b:cb:47:4e:5e:
         a8:c2:d4:88:c9:0e:8c:12:f0:ff:9b:1a:30:1f:dd:a2:a2:6b:
         f4:00:36:af:8c:bb:92:c3:55:63:cc:2f:f4:c5:7c:dd:44:0b:
         e5:26:ef:db:2e:f2:d0:14:69:00:75:c3:8a:79:03:2e:ea:10:
         5c:3e:70:8f:a0:92:ed:c4:91:c3:3b:0a:00:93:5a:dc:59:48:
         f5:fa:b7:d1:fe:df:6d:24:00:60:17:6c:ba:93:88:01:ad:12:
         49:d8:05:c9:60:68:58:ba:7d:17:62:cc:41:cc:5e:13:2d:3e:
         c3:30:b8:c9:20:2f:90:22:84:cc:b3:29:36:47:6f:78:17:1b:
         72:b5:2f:f4:8d:3a:89:9d:19:01:4f:ee:13:c7:04:88:07:3c:
         12:fb:a0:23:91:90:bf:a0:5a:f6:e3:50:45:3a:48:08:8d:f6:
         a2:1e:79:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org