Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/85cce2684cf8f7ea5db20f477f0c29f0d6ffa7db.roa
File:                     85cce2684cf8f7ea5db20f477f0c29f0d6ffa7db.roa (raw, json)
Hash identifier:          lf8uhGdgmQmw1T0qQx0pn3B7pCyn7ewqjwK9QeEyink=
Subject key identifier:   7B:96:72:5F:8C:2A:26:90:03:FF:A9:34:C9:93:B5:2D:25:0B:CF:21
Certificate issuer:       /CN=548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c
Certificate serial:       0D5290
Authority key identifier: 63:E5:E6:23:3C:CB:BD:E4:C1:C5:3D:77:C7:93:6E:B2:9E:FB:A3:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/85cce2684cf8f7ea5db20f477f0c29f0d6ffa7db.roa
Signing time:             Wed 24 Mar 2021 14:34:45 +0000
ROA not before:           Wed 24 Mar 2021 14:34:45 +0000
ROA not after:            Tue 24 Mar 2026 14:34:45 +0000
asID:                     14970
IP address blocks:        206.223.124.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873104 (0xd5290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c
        Validity
            Not Before: Mar 24 14:34:45 2021 GMT
            Not After : Mar 24 14:34:45 2026 GMT
        Subject: CN=85cce2684cf8f7ea5db20f477f0c29f0d6ffa7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:a9:53:f3:70:d2:fc:7c:6e:75:57:38:da:
                    0d:a6:c2:26:ee:6d:5f:4f:f9:2f:da:c3:76:ad:78:
                    52:99:6a:b9:e6:16:3a:20:f8:2a:cf:ed:51:2b:16:
                    88:53:90:fa:bf:f1:97:5c:6e:00:45:16:22:21:5e:
                    ee:00:fd:9a:fe:9f:16:9d:06:12:a6:2d:e5:93:04:
                    65:d3:3b:dc:48:19:6b:95:f2:a5:0f:4b:bd:ac:c4:
                    37:ca:18:c0:d7:26:0e:ca:f3:25:38:8e:10:2b:21:
                    58:76:6b:82:26:a6:ca:89:e8:c4:90:d7:dc:2c:81:
                    a4:54:5a:15:13:a0:b2:c2:75:84:3f:df:14:79:49:
                    a5:c3:51:17:1c:7f:8e:d7:6a:75:b9:99:d1:33:87:
                    bd:8a:db:76:76:ec:f5:79:46:33:f3:bc:9c:6a:f7:
                    08:62:05:72:02:e9:b7:17:44:bd:83:41:fb:ee:6e:
                    a6:c9:77:7b:4f:36:a3:a7:47:32:8a:e7:2d:29:93:
                    f0:d5:ee:97:4c:e5:58:41:75:1c:78:22:e7:b5:94:
                    1d:7a:bd:aa:77:c3:34:55:00:01:d7:b7:42:b0:1a:
                    1b:3b:36:e3:78:fb:ac:fe:b5:b1:c1:b8:73:5c:76:
                    ed:26:dc:bc:93:5a:e4:d8:9f:64:9d:76:d7:97:0a:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:96:72:5F:8C:2A:26:90:03:FF:A9:34:C9:93:B5:2D:25:0B:CF:21
            X509v3 Authority Key Identifier:
                keyid:63:E5:E6:23:3C:CB:BD:E4:C1:C5:3D:77:C7:93:6E:B2:9E:FB:A3:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/85cce2684cf8f7ea5db20f477f0c29f0d6ffa7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:08:99:51:1a:bc:5c:64:a5:46:89:42:4c:b8:7b:75:45:
         5e:2e:e4:45:38:d3:b5:52:49:a9:e9:23:39:42:9f:5c:17:a3:
         90:5f:19:9b:06:83:83:e2:c5:8d:48:14:b2:bc:75:03:39:d2:
         f6:e5:dc:15:02:81:2d:a6:c5:5a:e4:90:2e:ca:dd:7a:a0:51:
         1f:9b:1f:ea:c1:d4:c8:73:74:33:5a:d8:e4:04:f5:d0:e1:43:
         e9:98:51:bf:29:03:87:bc:0d:ea:2a:96:75:2f:13:67:12:ab:
         50:ca:1e:58:fc:2e:77:8a:31:25:54:33:ea:54:c3:72:45:eb:
         c4:ce:7e:c9:c4:9c:46:56:7c:ce:d0:ad:36:7e:97:ab:19:e8:
         1a:b5:be:d2:2b:f5:19:bd:9c:ab:f8:ed:25:a7:40:7b:ec:ff:
         02:be:0f:3c:e3:f5:3b:0a:37:d9:a6:1b:73:b0:85:f1:2c:e3:
         9c:31:bc:81:b2:86:40:fc:98:1d:7d:21:75:87:7c:73:4e:1f:
         1f:7a:24:6d:6a:9e:27:4c:29:8b:ac:1b:9d:35:a4:05:44:4a:
         35:b0:4b:05:92:a6:db:c3:0d:2c:d0:36:9e:41:d7:5f:59:02:
         7a:a5:71:2c:1e:28:47:aa:6d:e6:34:85:36:64:88:7b:ca:12:
         24:15:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org