Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b3087c55df8e6d66c6fc29a7c0287ead480fa073.roa
File:                     b3087c55df8e6d66c6fc29a7c0287ead480fa073.roa (raw, json)
Hash identifier:          oKbU33QGTE2KIA9SSBS5uYt1aRMOvMoya+VjlOqG8xE=
Subject key identifier:   FC:87:E3:92:69:34:47:34:6F:04:42:8A:B8:43:B6:66:2D:BF:D0:32
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       195FD3
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b3087c55df8e6d66c6fc29a7c0287ead480fa073.roa
Signing time:             Tue 31 May 2022 14:45:43 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Wed 31 Dec 2025 03:00:00 +0000
asID:                     60725
IP address blocks:        190.98.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662931 (0x195fd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Dec 31 03:00:00 2025 GMT
        Subject: CN=b3087c55df8e6d66c6fc29a7c0287ead480fa073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:37:6a:cb:4b:0d:91:51:eb:90:f3:27:d4:
                    95:06:9c:ed:c8:5f:81:22:de:c4:e0:5f:63:ae:de:
                    79:6c:ed:26:d5:05:43:58:dc:d2:f2:dc:b9:02:09:
                    2d:c0:80:cf:09:6d:03:9f:89:ef:49:2d:e6:d5:25:
                    84:43:fc:e0:47:cf:48:c3:57:79:d1:2e:cb:9b:2e:
                    09:77:b5:5d:fe:e7:05:dd:26:35:6b:37:82:c8:73:
                    97:c5:df:44:17:17:2b:b8:ae:66:ab:0f:67:d1:53:
                    28:27:13:20:4b:60:f3:47:69:0d:95:b2:49:e0:49:
                    31:9e:4b:02:3c:a5:1a:17:c2:33:dc:96:e8:cc:3b:
                    4a:8d:11:9a:5c:a3:83:d8:69:1d:81:f3:16:f1:b7:
                    9d:bf:a2:c8:e6:25:53:ce:47:e8:78:c4:39:06:d3:
                    00:87:92:23:bc:c5:35:27:5c:83:dc:ab:75:bc:75:
                    6a:ae:5c:67:a9:46:79:82:6e:fa:c6:0e:04:10:67:
                    60:e3:2b:66:84:ee:a8:63:c0:e5:b4:ee:f2:4d:ca:
                    8a:82:5a:46:70:b5:ce:5e:86:bb:e3:c3:b2:24:11:
                    e5:45:ec:29:49:db:ac:9e:6e:35:9c:b1:c4:ff:bc:
                    7d:4e:5e:5a:bb:94:30:46:6f:b5:89:a7:23:54:8f:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:87:E3:92:69:34:47:34:6F:04:42:8A:B8:43:B6:66:2D:BF:D0:32
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b3087c55df8e6d66c6fc29a7c0287ead480fa073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:da:51:5b:ef:bc:8c:a8:24:0d:eb:c6:de:90:e1:49:62:b9:
         4e:75:02:55:63:e0:be:42:f5:40:60:af:df:d0:1f:bd:46:ef:
         a3:92:8d:67:fe:c4:1e:c8:db:fa:7e:95:01:c4:85:2b:b3:05:
         d5:d5:9a:a7:0d:40:9a:d4:75:1e:79:6b:20:02:55:37:b8:a3:
         76:89:f4:43:fd:cb:da:89:52:f5:7f:8e:65:9b:a9:d6:c3:66:
         9e:1f:2f:c4:54:90:7d:42:31:a6:59:bb:38:9e:dd:ee:47:bf:
         4b:37:a1:5a:05:3b:fc:3b:e5:19:de:4e:37:41:05:c6:28:04:
         19:86:0d:08:94:a6:b0:6f:d9:54:29:e2:7d:0d:fc:77:c8:3b:
         f1:23:24:7b:86:82:f3:f7:58:b3:19:26:39:4e:14:8a:04:32:
         39:3b:f1:3e:10:70:80:f0:77:98:d2:1a:dd:20:6d:f1:f8:b6:
         93:f6:4d:a9:bc:5e:0e:38:a5:70:01:14:47:bc:4c:70:f8:08:
         ba:cd:69:75:c0:20:c0:1b:46:b9:c2:9b:80:46:ec:c2:51:6e:
         49:72:e6:b9:8d:fc:ee:a1:be:dd:4f:3c:d1:5d:83:f2:9f:aa:
         83:20:b0:38:44:6a:fc:45:46:8a:52:bc:a7:f0:93:0c:88:90:
         27:82:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org