Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/075b3ecf9377a005d8a0a3ca622330abf1a7c657.roa
File:                     075b3ecf9377a005d8a0a3ca622330abf1a7c657.roa (raw, json)
Hash identifier:          0ITGojcxTR5iVo7NevnDNnnMcKlHBJWP5AZ+KnDHfUY=
Subject key identifier:   6C:03:FC:88:E2:AE:45:C1:FE:C6:79:8B:7D:A0:FD:3B:0F:D6:A4:26
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       0E9E9F
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/075b3ecf9377a005d8a0a3ca622330abf1a7c657.roa
Signing time:             Thu 13 May 2021 22:21:47 +0000
ROA not before:           Thu 13 May 2021 03:00:00 +0000
ROA not after:            Sat 13 May 2023 03:00:00 +0000
asID:                     27742
IP address blocks:        190.53.32.0/21 maxlen: 24
                          190.53.40.0/24 maxlen: 24
                          190.53.42.0/23 maxlen: 24
                          190.53.44.0/23 maxlen: 24
                          190.53.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958111 (0xe9e9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: May 13 03:00:00 2021 GMT
            Not After : May 13 03:00:00 2023 GMT
        Subject: CN=075b3ecf9377a005d8a0a3ca622330abf1a7c657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:00:c4:af:08:20:09:bd:76:2b:94:c0:6a:
                    07:78:39:32:a3:0b:ea:5f:1b:87:81:c8:ef:58:10:
                    95:1e:e0:6c:2d:11:65:cc:6b:69:cc:8e:d4:2f:66:
                    44:2f:0f:14:c5:75:25:1c:19:f8:7c:6e:f0:73:9c:
                    a2:98:25:1e:b4:8b:d3:04:99:27:5e:cc:b6:ce:b5:
                    84:89:0a:48:05:14:9d:85:1a:8e:cd:3f:8c:fe:95:
                    07:58:26:95:cc:f6:ed:fa:3b:a1:cf:81:55:7c:e3:
                    c9:37:d7:fb:86:e0:d9:a4:a9:a5:d0:bb:7a:fe:3d:
                    20:fa:66:f7:05:05:bb:39:43:b7:a4:b4:60:03:ab:
                    81:6f:c1:19:d7:2b:ad:c7:1a:d5:e4:3b:0c:a5:05:
                    93:67:4b:db:a7:f5:7f:75:a9:02:9c:8f:a3:21:46:
                    ff:94:3c:62:64:ea:7e:4e:5f:5f:af:2f:c8:53:7f:
                    05:2c:f2:9a:70:bd:e3:79:cd:07:e5:db:9d:57:7c:
                    88:fe:bb:f2:23:46:92:67:25:cd:12:8d:d6:4b:f3:
                    bf:3a:44:c8:5f:57:2d:79:90:5f:83:ef:6c:d5:0b:
                    0c:0d:a6:68:fa:cd:ff:54:29:85:c4:32:a8:4b:4b:
                    cd:0e:01:8f:76:e6:6c:fa:f5:2e:a5:c6:c7:1a:57:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:03:FC:88:E2:AE:45:C1:FE:C6:79:8B:7D:A0:FD:3B:0F:D6:A4:26
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/075b3ecf9377a005d8a0a3ca622330abf1a7c657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.32.0-190.53.40.255
                  190.53.42.0-190.53.46.255

    Signature Algorithm: sha256WithRSAEncryption
         3a:e9:58:ff:c0:3a:62:a7:12:b6:01:b5:6d:39:8d:d7:ab:b9:
         7b:74:1d:01:73:fd:92:ca:1b:aa:eb:38:d5:9f:46:28:78:a8:
         63:be:bb:5f:91:3a:bc:9f:25:21:fd:56:0c:b3:02:29:a8:65:
         12:db:88:d0:7a:a8:03:56:1a:61:e4:3f:42:96:4c:2f:96:96:
         99:22:f7:5c:17:73:d0:71:e1:8d:76:c2:5d:05:e4:05:c9:fa:
         b7:18:5f:4c:58:04:5d:40:43:5a:85:50:b9:27:aa:9a:2a:87:
         c7:61:b3:91:e8:46:2e:8d:fc:b9:bf:11:4d:f7:d3:ea:f9:e0:
         b9:d1:d7:32:bb:81:d0:2a:26:95:d5:a3:42:5b:39:5b:dc:1d:
         49:5b:3e:d1:18:ac:6e:e8:fb:67:d1:b5:a8:d6:d3:42:08:a7:
         84:60:4b:57:f7:ce:39:38:2f:5a:11:42:b0:c8:49:74:2a:88:
         b4:bf:dc:81:b0:d8:05:fc:ce:15:96:87:9d:1c:70:02:bf:85:
         a7:fd:9e:a6:6c:57:41:32:07:54:55:bb:45:8c:1f:0e:5a:b1:
         3a:6f:a3:8e:9e:95:55:2b:26:0e:f0:9b:13:bd:e9:e8:d9:b3:
         26:e1:f8:f7:d3:79:87:ee:f7:54:b8:d9:ea:95:8d:ff:3b:c9:
         27:d1:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org