Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8f46f94-f890-4da3-ae7a-93a9a0ef409a/f629845c436657fd53489ee62a95e0801b8308fe.roa
File:                     f629845c436657fd53489ee62a95e0801b8308fe.roa (raw, json)
Hash identifier:          MRmSKbLIaP+E6nXvLTaWYaU5UYfLaibmpnQ5iDOJFRc=
Subject key identifier:   9F:AB:18:C8:B4:C2:A1:DD:60:10:5B:3F:17:1D:BA:2A:A8:1C:80:39
Certificate issuer:       /CN=5b909cbd1e00a445a3d3f03815f053006c7024fe
Certificate serial:       0D10A0
Authority key identifier: 6A:C8:55:9C:CA:A1:F0:C4:CD:0E:D5:3E:51:07:59:35:21:73:ED:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b909cbd1e00a445a3d3f03815f053006c7024fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8f46f94-f890-4da3-ae7a-93a9a0ef409a/f629845c436657fd53489ee62a95e0801b8308fe.roa
Signing time:             Wed 24 Mar 2021 14:34:11 +0000
ROA not before:           Wed 24 Mar 2021 14:34:10 +0000
ROA not after:            Tue 24 Mar 2026 14:34:10 +0000
asID:                     262256
IP address blocks:        192.140.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856224 (0xd10a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b909cbd1e00a445a3d3f03815f053006c7024fe
        Validity
            Not Before: Mar 24 14:34:10 2021 GMT
            Not After : Mar 24 14:34:10 2026 GMT
        Subject: CN=f629845c436657fd53489ee62a95e0801b8308fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:42:8e:97:ae:b3:98:ca:9a:58:8b:10:c5:
                    ed:13:a3:59:32:bd:db:fe:4a:51:60:96:97:76:84:
                    7c:a0:2c:ee:fe:1c:b4:35:87:e2:ee:a0:ca:6a:08:
                    04:e0:1b:fa:91:c1:73:10:19:30:de:e5:2d:16:43:
                    03:c4:8c:63:35:7b:3d:5d:4f:a0:65:4c:70:7f:9f:
                    e8:7b:d8:fc:f7:28:09:36:3f:cc:26:0b:ad:17:71:
                    83:e9:3d:97:29:80:c5:ff:25:e1:e8:0e:65:d7:f1:
                    58:04:c2:f2:5a:54:d8:37:99:43:26:77:bc:ba:f2:
                    14:cc:29:69:26:9e:30:00:95:e5:50:a8:6a:b3:19:
                    46:8a:cd:09:8c:b3:2e:2f:20:e7:af:48:86:4f:27:
                    44:e2:21:9d:e2:f7:1a:6f:fc:bf:21:02:c6:e1:b5:
                    53:58:2c:9d:6e:4e:0e:d9:d0:60:95:54:7a:45:77:
                    14:32:5b:e6:4b:c6:d1:6e:cc:0e:24:9a:80:16:2f:
                    7f:18:b7:ee:d2:40:54:6c:c4:59:45:6d:9d:1b:db:
                    fa:cf:27:30:e9:af:a9:dd:ab:bb:05:8e:2c:f9:1b:
                    db:d5:6a:b0:11:0b:70:8c:3c:0d:76:d9:66:23:fb:
                    83:18:29:ea:2a:ec:12:40:0d:fb:d3:66:d2:c2:07:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AB:18:C8:B4:C2:A1:DD:60:10:5B:3F:17:1D:BA:2A:A8:1C:80:39
            X509v3 Authority Key Identifier:
                keyid:6A:C8:55:9C:CA:A1:F0:C4:CD:0E:D5:3E:51:07:59:35:21:73:ED:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b909cbd1e00a445a3d3f03815f053006c7024fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8f46f94-f890-4da3-ae7a-93a9a0ef409a/f629845c436657fd53489ee62a95e0801b8308fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8f46f94-f890-4da3-ae7a-93a9a0ef409a/5b909cbd1e00a445a3d3f03815f053006c7024fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:67:65:fd:04:79:d9:67:86:ac:8a:0a:61:b5:af:29:17:27:
         55:73:da:42:0a:cf:50:17:b4:a7:e8:4f:7f:5e:d4:f1:6f:34:
         b7:38:d8:f9:5b:02:7f:b5:b2:91:26:1a:5f:3b:7c:bf:48:07:
         f5:5a:be:73:c7:0c:93:fa:68:a7:7b:4c:34:6b:92:ac:25:fd:
         d1:ea:36:eb:f5:54:f5:b1:14:43:19:07:3a:1c:c5:50:ac:17:
         f2:2b:85:13:b3:41:19:80:6b:f4:1f:d0:27:14:62:6c:f0:65:
         20:d5:fe:f9:ae:78:5c:18:a7:08:a2:b1:de:c8:94:ff:1c:66:
         06:5e:a0:b2:39:08:e5:dc:46:75:92:ac:e7:a7:38:0e:3c:fb:
         d5:4b:8c:83:9b:fb:e5:0c:1f:43:db:35:2d:b6:22:4d:bb:06:
         33:86:a9:97:f3:4c:fe:c4:d0:e7:fd:3e:0c:46:14:e3:74:1e:
         34:1b:d1:d5:61:52:71:27:3b:de:b1:d9:52:7b:2e:06:cd:89:
         e3:79:b4:c8:33:a3:6c:e1:7e:65:38:a9:d5:2d:84:a9:03:78:
         4e:14:9a:79:84:77:d1:b3:1a:89:3c:7b:8c:9b:06:db:d4:66:
         60:53:ac:3f:d2:46:58:e0:0e:1c:be:2a:ca:3d:c2:e4:04:00:
         a1:db:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org