Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/4639a2781e1120abb48c763a616e2cb911aa516f.roa
File:                     4639a2781e1120abb48c763a616e2cb911aa516f.roa (raw, json)
Hash identifier:          zB25v9WUWjmIpKNyX/VRAnuChKVt4Au+h/AO4oVYaUw=
Subject key identifier:   CA:AD:0D:0F:29:AD:CC:0F:43:22:CA:66:E9:BA:07:4A:2C:6D:4F:65
Certificate issuer:       /CN=b107b01f11ca47163588855443601d83d9a33e5b
Certificate serial:       0DD008
Authority key identifier: BD:36:E0:95:78:AC:DB:C7:20:85:CC:75:62:F6:EC:CA:BF:A0:C3:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b107b01f11ca47163588855443601d83d9a33e5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/4639a2781e1120abb48c763a616e2cb911aa516f.roa
Signing time:             Wed 24 Mar 2021 14:30:23 +0000
ROA not before:           Wed 24 Mar 2021 14:30:23 +0000
ROA not after:            Tue 24 Mar 2026 14:30:23 +0000
asID:                     28318
IP address blocks:        190.103.16.0/22 maxlen: 24
                          190.103.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905224 (0xdd008)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b107b01f11ca47163588855443601d83d9a33e5b
        Validity
            Not Before: Mar 24 14:30:23 2021 GMT
            Not After : Mar 24 14:30:23 2026 GMT
        Subject: CN=4639a2781e1120abb48c763a616e2cb911aa516f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:6e:5e:90:d8:ac:16:fe:d8:35:e3:bc:05:
                    49:ad:60:9a:74:33:e6:65:d0:4c:4f:43:75:57:61:
                    6d:60:d9:f9:7e:ed:60:c9:4c:ad:6a:9a:6a:d5:7e:
                    fe:75:9b:8e:0e:5e:79:ee:1f:89:7a:fa:5a:fa:8b:
                    4f:fa:9a:0d:61:fb:54:8a:c8:3c:a0:b8:46:a2:b8:
                    e1:be:90:36:6e:2c:28:59:c7:6a:71:6d:72:27:6c:
                    87:69:19:28:24:c5:55:d0:c6:a9:1d:16:7e:e2:1e:
                    28:6c:b2:79:87:1a:7c:df:4e:41:8c:98:b3:95:65:
                    22:28:ef:60:fa:f7:c9:b0:99:d1:10:eb:60:81:b4:
                    af:d0:2b:5e:09:cc:21:24:1c:1d:6c:58:01:9a:62:
                    aa:68:52:cd:5e:6b:b7:27:55:3f:9e:7c:9b:1a:0e:
                    2a:c3:a8:b8:09:2e:bd:e7:20:3c:34:22:4d:c3:c8:
                    62:31:89:1b:62:05:e3:e9:01:1b:b3:ea:ae:3c:30:
                    d5:8b:87:3a:26:47:4f:ea:a5:6b:65:57:a7:57:2e:
                    b3:15:04:06:6d:69:91:1f:22:4c:6d:ba:69:11:04:
                    3a:13:23:f1:1d:cc:0b:35:c1:13:03:a7:56:ea:6e:
                    21:35:16:6d:0c:42:71:0f:1d:30:38:d7:9d:58:ef:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AD:0D:0F:29:AD:CC:0F:43:22:CA:66:E9:BA:07:4A:2C:6D:4F:65
            X509v3 Authority Key Identifier:
                keyid:BD:36:E0:95:78:AC:DB:C7:20:85:CC:75:62:F6:EC:CA:BF:A0:C3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b107b01f11ca47163588855443601d83d9a33e5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/4639a2781e1120abb48c763a616e2cb911aa516f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/b107b01f11ca47163588855443601d83d9a33e5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:83:21:0e:c9:2e:a6:ee:31:b9:53:02:28:6c:17:c3:13:
         f3:4e:c1:a0:7f:4f:c3:63:21:83:0f:53:f5:30:83:8b:de:01:
         c7:94:50:0d:69:38:b7:45:c1:96:e2:b7:e1:a2:ad:80:0f:9a:
         66:bb:27:88:c1:4b:9a:09:65:72:90:1e:7b:c3:d9:34:23:8e:
         6f:d9:8d:b1:6c:88:cc:96:0d:a5:8d:c8:3c:dc:bb:31:e7:7f:
         97:d2:92:2d:75:27:55:81:92:ea:0a:1b:6f:5b:ed:97:24:62:
         5e:91:6a:18:82:62:a4:4b:5d:bf:68:0d:16:ed:52:d7:1b:c0:
         e1:1d:8a:e0:43:fb:77:77:41:c3:01:16:a3:2a:a8:2a:39:f6:
         f0:67:a1:c8:fa:71:8c:8a:64:ab:ec:3a:68:ee:71:e3:9e:a1:
         e3:a3:12:9a:cf:72:a2:a0:ee:a5:52:24:f4:16:4f:ba:d0:57:
         76:29:b8:58:56:b5:23:5b:a8:20:af:92:8e:41:fb:94:47:ca:
         5f:cf:e0:37:28:bb:e4:67:d1:1c:5e:c3:20:c0:f6:b1:b7:f0:
         ea:b8:ed:a7:c9:f2:84:a9:62:81:d6:4f:10:06:72:0d:40:89:
         f2:3d:f7:d0:55:5b:01:5e:de:d9:c8:5c:8b:54:58:c4:96:b9:
         40:cc:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org