Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/c3a6a6d55f6cd6041db5ae2866526b87d825d63e.roa
File:                     c3a6a6d55f6cd6041db5ae2866526b87d825d63e.roa (raw, json)
Hash identifier:          EheL+zKvc/ATa0fzKTZe4KzslVA69aRrEqJxG+9M0Cw=
Subject key identifier:   D8:D5:13:DF:7A:5B:2F:A9:38:86:54:6B:AD:46:8A:BE:49:2E:0A:97
Certificate issuer:       /CN=74935393919dd2a404caa7ccadf12085d19ef35d
Certificate serial:       0E3E64
Authority key identifier: 5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/c3a6a6d55f6cd6041db5ae2866526b87d825d63e.roa
Signing time:             Wed 24 Mar 2021 14:32:23 +0000
ROA not before:           Wed 24 Mar 2021 14:32:23 +0000
ROA not after:            Tue 24 Mar 2026 14:32:23 +0000
asID:                     264669
IP address blocks:        168.90.252.0/23 maxlen: 23
                          168.90.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933476 (0xe3e64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74935393919dd2a404caa7ccadf12085d19ef35d
        Validity
            Not Before: Mar 24 14:32:23 2021 GMT
            Not After : Mar 24 14:32:23 2026 GMT
        Subject: CN=c3a6a6d55f6cd6041db5ae2866526b87d825d63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:90:cf:96:7b:a2:8a:22:04:d6:f3:f1:3a:
                    3d:d5:74:74:84:c7:4d:e4:49:26:da:b7:95:30:fb:
                    8a:ba:71:5b:54:b6:77:be:9c:c7:0e:81:6d:ac:bd:
                    23:ad:49:2e:ff:9a:17:86:65:6e:47:4b:80:17:e9:
                    53:e4:03:49:da:af:21:8c:03:a8:f1:30:c7:80:2f:
                    68:e2:8c:f0:a7:d3:65:94:5b:56:f9:ec:94:a6:4d:
                    db:71:5c:a2:20:72:94:58:d4:6d:fc:3e:06:c3:7f:
                    56:f4:a0:42:34:46:7c:6f:ae:ab:f6:51:ae:e2:d1:
                    93:56:44:49:5f:80:1d:69:30:0f:35:69:95:55:56:
                    99:75:62:50:f8:2b:e7:7d:31:22:4e:32:b5:23:56:
                    77:37:79:74:36:39:e8:74:02:98:a4:f4:e1:5e:91:
                    01:98:68:a8:f4:03:88:86:0a:41:1a:e3:14:b8:97:
                    f8:e4:a3:ff:65:3c:05:43:93:c6:cb:82:aa:f0:7e:
                    a1:98:7f:02:0f:6b:3a:49:63:49:b6:45:c8:b0:cb:
                    5d:2e:41:62:3c:eb:82:ae:ca:91:ed:da:50:b0:d1:
                    65:b5:66:2e:12:d2:2d:9e:34:9b:a4:1e:b2:67:d8:
                    23:0c:85:f1:9d:b3:ea:04:7a:5e:6b:e1:a9:e4:ff:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D5:13:DF:7A:5B:2F:A9:38:86:54:6B:AD:46:8A:BE:49:2E:0A:97
            X509v3 Authority Key Identifier:
                keyid:5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/c3a6a6d55f6cd6041db5ae2866526b87d825d63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.252.0-168.90.254.255

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:ef:51:f9:10:2d:30:0c:23:83:a1:78:99:38:df:93:31:
         03:4c:d8:c0:f5:22:98:49:22:32:59:a3:79:84:be:16:11:87:
         35:f6:d0:6d:5a:f6:b1:5e:8b:e6:f9:d4:11:fa:66:19:6c:9c:
         c1:95:08:2a:26:98:0a:5c:60:b0:b3:da:ae:dc:95:e9:af:97:
         70:5f:2c:69:1c:db:83:57:ca:e7:f2:b7:f0:63:35:2d:49:a7:
         92:c9:00:80:0d:dd:79:e7:9b:16:2e:e9:11:6b:16:a8:07:21:
         57:83:25:a1:88:92:ea:bc:bf:05:fc:42:0f:5f:4d:eb:7e:b2:
         16:56:23:6e:05:1a:eb:54:4e:e2:c9:ab:92:37:b4:6d:74:28:
         aa:c3:5d:f7:1b:bb:d1:3a:ac:60:b1:63:9a:15:65:7d:14:af:
         1f:40:de:c4:e9:8c:57:fa:d5:99:ab:ad:b8:4e:98:d5:aa:60:
         47:cf:3c:2c:6c:72:f3:e4:29:73:63:6b:f7:ae:97:3d:05:23:
         ce:47:9c:5d:e7:4f:bd:24:1c:a1:97:56:a9:88:a8:d5:f9:d5:
         61:d0:9b:b2:7b:fc:f3:6c:68:ca:b3:95:90:f5:75:cb:69:f3:
         c3:96:dd:f1:35:f4:46:22:af:62:95:1a:f6:0e:7e:74:a0:0f:
         8f:c3:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org