Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/d1ebc357a14ba38f3e6be7698e05d0ab96a0a4bf.roa
File:                     d1ebc357a14ba38f3e6be7698e05d0ab96a0a4bf.roa (raw, json)
Hash identifier:          3KKI2iZaF56DDif3o0zgaoCgLDMGvPm6coniAS8H5c0=
Subject key identifier:   4C:55:1F:0C:76:48:FC:0A:74:E8:7C:A9:CA:E7:A5:ED:26:23:DC:31
Certificate issuer:       /CN=a79f7c916be3a1ea7251327afacd5a877554edc2
Certificate serial:       0D5950
Authority key identifier: 72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/d1ebc357a14ba38f3e6be7698e05d0ab96a0a4bf.roa
Signing time:             Wed 24 Mar 2021 14:31:50 +0000
ROA not before:           Wed 24 Mar 2021 14:31:49 +0000
ROA not after:            Tue 24 Mar 2026 14:31:49 +0000
asID:                     52329
IP address blocks:        186.148.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874832 (0xd5950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79f7c916be3a1ea7251327afacd5a877554edc2
        Validity
            Not Before: Mar 24 14:31:49 2021 GMT
            Not After : Mar 24 14:31:49 2026 GMT
        Subject: CN=d1ebc357a14ba38f3e6be7698e05d0ab96a0a4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4b:a1:6a:29:af:d1:f9:2c:68:f9:7d:65:c4:
                    9f:1d:0b:f6:1f:0a:09:9d:de:80:a9:68:5b:20:68:
                    06:4f:f0:41:18:68:ec:44:9e:59:56:f1:d9:15:48:
                    e8:2c:4b:1a:e0:16:8d:bb:16:35:6a:61:a5:84:72:
                    d0:1a:e5:ec:d6:ba:de:fd:b3:be:ee:a8:05:c9:ce:
                    81:be:72:19:4d:98:63:a4:3c:3e:0d:d5:a9:0c:ef:
                    89:ca:68:01:f5:21:f0:5a:1f:e1:bf:a8:a1:11:21:
                    16:45:87:d4:9b:86:8e:cd:d7:6d:69:9b:78:d5:f9:
                    02:bf:2d:5c:83:18:16:09:76:07:cd:cb:b6:78:5b:
                    18:08:b0:08:36:28:84:f3:ec:ec:13:c8:9d:1d:1c:
                    57:9e:0f:c8:fd:ce:8a:f3:54:4f:e0:cc:6f:0d:ce:
                    26:bd:86:f6:a6:91:4a:c9:41:aa:e7:76:2d:3a:66:
                    b5:87:f4:19:e7:31:d5:a9:31:25:86:ac:2e:e0:a3:
                    68:0c:f6:52:ec:78:4b:64:53:5d:95:e2:25:92:ef:
                    c2:4f:89:93:2a:ac:ea:88:5f:9c:40:f1:d0:4f:f2:
                    97:b3:39:9b:3b:81:c5:c8:ed:8b:ee:71:09:e5:00:
                    dd:a5:0c:ad:fb:68:fe:f2:3a:d3:7d:10:4e:0a:ff:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:55:1F:0C:76:48:FC:0A:74:E8:7C:A9:CA:E7:A5:ED:26:23:DC:31
            X509v3 Authority Key Identifier:
                keyid:72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/d1ebc357a14ba38f3e6be7698e05d0ab96a0a4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:eb:f7:dc:a1:99:03:6d:74:a1:6b:7b:0b:79:e9:fc:2d:8a:
         63:58:04:bf:80:66:27:16:f2:9a:1e:0a:a4:05:b1:28:6e:72:
         3a:eb:f7:f2:ff:19:a9:7f:0c:d5:c2:f9:4c:d5:d3:9e:c6:c2:
         dd:e2:4b:12:6b:18:5a:33:42:7c:ed:f0:fb:6d:1d:9b:3c:d6:
         6d:c4:eb:49:5a:cd:c6:ea:de:ea:c0:f1:28:6d:57:6f:05:46:
         8f:98:c7:15:a2:67:fd:3c:f7:ae:8e:18:f9:48:05:a7:94:2d:
         d4:c7:ec:28:e1:ad:4b:fb:43:78:31:c2:32:7f:fd:3c:bf:28:
         13:ca:92:92:4f:ad:c7:77:16:2a:4d:1a:f2:04:17:6d:85:3b:
         b6:3a:19:c1:1b:71:69:6c:2f:47:b5:98:d3:80:be:13:1d:e1:
         63:9b:6f:bd:b0:25:5a:f3:f8:ad:66:2f:53:ae:cb:c2:a9:50:
         87:81:72:03:7d:19:12:04:f3:a9:16:c5:b7:18:01:c0:bf:d8:
         4d:73:1e:d7:8e:87:73:59:3e:36:7a:ae:f2:50:37:92:32:78:
         5d:b4:42:de:81:7e:8c:ea:fd:38:56:78:d7:9a:6c:0e:2f:38:
         00:48:db:1f:be:2e:c6:15:bd:82:9f:ed:8f:92:92:82:63:6c:
         fb:b9:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org