Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/6858146198825ceefede0c5455277540c579dabf.roa
File:                     6858146198825ceefede0c5455277540c579dabf.roa (raw, json)
Hash identifier:          nqfWnfhK2iRQBaif85MReB71Lo0kIEgxIDcI1lwVbqI=
Subject key identifier:   24:D2:06:FD:18:C2:D9:89:52:7C:25:6F:22:DC:9F:D4:86:DC:34:DE
Certificate issuer:       /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial:       0D60E6
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/6858146198825ceefede0c5455277540c579dabf.roa
Signing time:             Wed 24 Mar 2021 14:29:03 +0000
ROA not before:           Wed 24 Mar 2021 14:29:03 +0000
ROA not after:            Tue 24 Mar 2026 14:29:03 +0000
asID:                     270103
IP address blocks:        190.115.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876774 (0xd60e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Validity
            Not Before: Mar 24 14:29:03 2021 GMT
            Not After : Mar 24 14:29:03 2026 GMT
        Subject: CN=6858146198825ceefede0c5455277540c579dabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:77:33:a0:85:8c:8d:11:a1:7a:76:24:9d:17:
                    7a:6c:89:2f:01:0d:2d:7a:04:87:7c:49:10:4d:1a:
                    f7:01:46:1a:f6:ad:e8:89:8f:69:95:07:c3:5d:23:
                    fc:34:c4:f4:65:11:43:1a:bd:00:61:d3:06:13:44:
                    ee:98:ed:bb:02:bb:d8:f5:d9:9e:42:44:b3:94:11:
                    ad:b0:a3:92:37:17:19:57:4e:99:93:32:63:b2:77:
                    f4:ac:c3:df:e4:c6:bd:71:b7:5d:06:45:44:2c:78:
                    20:2e:30:46:3f:bb:f7:54:c3:7a:23:5d:9d:a2:9c:
                    8e:6e:b2:e0:89:10:a2:c2:d9:fd:dd:55:ad:fe:e1:
                    d0:8b:6c:05:fb:11:87:7e:2c:03:40:12:e6:98:a4:
                    54:86:ef:34:61:db:e6:92:ec:4a:d7:0e:88:a1:80:
                    b7:d6:cb:40:0b:86:56:f7:34:d4:70:4f:70:32:0c:
                    6c:f0:af:d8:b4:02:12:16:31:b0:25:0c:a6:d9:82:
                    82:1d:07:06:e7:13:52:49:8f:a7:53:a7:75:37:fb:
                    ca:8b:ee:50:54:c5:c9:47:75:56:3c:bd:9b:59:b8:
                    0f:94:80:09:83:9a:32:f9:e3:c8:69:d0:fe:c4:cf:
                    42:1e:b9:5c:ed:e1:ef:99:71:47:06:14:83:55:75:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D2:06:FD:18:C2:D9:89:52:7C:25:6F:22:DC:9F:D4:86:DC:34:DE
            X509v3 Authority Key Identifier:
                keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/6858146198825ceefede0c5455277540c579dabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:ff:df:57:c2:53:ef:51:ad:cc:e6:0f:d5:ed:a3:ae:25:77:
         af:51:ac:3e:01:a7:33:c9:59:10:a4:0f:8d:f1:69:10:94:95:
         5a:f1:91:bb:45:4d:c3:79:63:88:0e:6a:d8:ea:a2:cc:72:bb:
         51:7e:0a:1f:e5:2b:53:5c:95:38:a8:e8:94:38:1b:7b:8f:f7:
         12:1c:06:49:bc:60:f5:f3:11:cd:9c:a4:e5:2d:e5:08:91:a5:
         94:30:b2:90:34:15:cf:34:d5:0e:41:73:3f:60:bc:a1:94:7c:
         f0:1c:20:73:68:64:9b:44:0e:5c:1d:15:b2:3f:e6:6d:ca:fa:
         ae:13:71:9d:5f:91:39:ff:f2:6f:fb:02:4e:59:ca:a9:ef:57:
         70:04:2e:a1:85:59:3d:49:da:5e:ed:75:02:44:56:65:db:5c:
         40:81:64:fd:4a:6c:d1:43:01:22:c3:d0:9a:79:c7:e7:52:09:
         ce:83:ea:ff:ce:d3:0d:3f:94:64:c9:99:0f:0e:cb:6d:29:25:
         c2:46:31:1e:71:29:59:d7:ba:87:a5:ff:42:d2:b7:aa:72:84:
         b8:b2:e6:47:e9:c1:a0:4e:4a:5e:8c:92:62:b0:83:8c:5a:e1:
         82:31:9e:77:32:19:e1:52:f7:3c:30:8d:48:54:51:b3:25:1b:
         cc:52:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org