Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/e5dd33a84d0e1a6398b1128f0caf38d8f5d44070.roa
File:                     e5dd33a84d0e1a6398b1128f0caf38d8f5d44070.roa (raw, json)
Hash identifier:          JZIkLujUvc+dVcBOe6uTOgCNU1sCq3hdWWxpACFqQIY=
Subject key identifier:   13:D8:8D:7E:BD:63:93:F2:C4:CD:82:ED:73:ED:DE:13:EA:76:F2:04
Certificate issuer:       /CN=b107b01f11ca47163588855443601d83d9a33e5b
Certificate serial:       0DCCAA
Authority key identifier: BD:36:E0:95:78:AC:DB:C7:20:85:CC:75:62:F6:EC:CA:BF:A0:C3:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b107b01f11ca47163588855443601d83d9a33e5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/e5dd33a84d0e1a6398b1128f0caf38d8f5d44070.roa
Signing time:             Wed 24 Mar 2021 14:30:23 +0000
ROA not before:           Wed 24 Mar 2021 14:30:23 +0000
ROA not after:            Tue 24 Mar 2026 14:30:23 +0000
asID:                     28318
IP address blocks:        131.72.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904362 (0xdccaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b107b01f11ca47163588855443601d83d9a33e5b
        Validity
            Not Before: Mar 24 14:30:23 2021 GMT
            Not After : Mar 24 14:30:23 2026 GMT
        Subject: CN=e5dd33a84d0e1a6398b1128f0caf38d8f5d44070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d5:b5:00:2b:3c:fc:e6:10:7a:e7:41:4f:04:
                    6a:b3:38:e6:44:78:60:51:c2:ed:37:4c:50:d7:f5:
                    12:5f:07:61:c3:e8:c2:bb:98:29:30:bd:ee:c0:37:
                    37:15:14:a9:70:a7:ba:42:ef:d1:ac:9e:82:d3:07:
                    75:3c:9d:fc:e9:05:2d:44:a0:9c:76:cf:60:e3:06:
                    96:09:27:96:04:4b:70:c5:6b:0e:85:33:65:43:06:
                    04:80:f2:fa:d3:ca:ab:54:6a:d2:63:d4:42:c5:17:
                    48:46:67:48:20:d0:49:78:51:b9:ce:cd:a5:f7:f3:
                    3f:6e:1a:a4:18:2c:24:42:78:18:09:42:af:42:d8:
                    d4:7e:97:69:c6:6d:6e:12:f8:bf:31:f9:d4:42:9e:
                    86:e1:d2:0e:15:78:65:1f:72:3a:8b:bd:8a:c8:84:
                    ad:78:4c:40:2c:28:8b:c5:d1:19:95:e6:c9:5f:12:
                    c6:7a:24:80:d6:e5:c8:80:67:77:23:a7:38:05:f2:
                    dd:2f:d6:99:e7:ca:a0:48:cc:ea:b1:93:6b:e5:06:
                    18:3a:c7:d7:e1:8a:0f:8c:a0:4e:d0:6a:b8:e2:2c:
                    61:79:b8:99:f5:19:b2:66:d1:ec:23:29:3b:1b:98:
                    91:79:76:66:ba:d6:26:3a:02:91:fb:d3:76:94:1b:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D8:8D:7E:BD:63:93:F2:C4:CD:82:ED:73:ED:DE:13:EA:76:F2:04
            X509v3 Authority Key Identifier:
                keyid:BD:36:E0:95:78:AC:DB:C7:20:85:CC:75:62:F6:EC:CA:BF:A0:C3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b107b01f11ca47163588855443601d83d9a33e5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/e5dd33a84d0e1a6398b1128f0caf38d8f5d44070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6b44b3a-7ad8-4b43-8bc9-9de263b4289b/b107b01f11ca47163588855443601d83d9a33e5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:df:6b:02:d6:05:66:0f:1c:7c:7a:05:22:94:94:12:b2:
         12:2e:20:99:ab:8c:4d:bb:ff:3e:a0:ec:e8:60:28:8a:fd:95:
         86:bc:af:cc:0d:e0:07:6d:1c:0e:f0:f2:d1:1d:ff:a1:69:d8:
         fa:66:b2:f7:f2:85:d5:33:aa:46:95:00:e6:e9:d5:2e:8c:e4:
         96:2d:95:fe:b8:61:ab:26:0f:db:2e:37:63:4b:83:93:6d:90:
         4c:45:de:9a:ee:20:0f:c4:c5:bf:9d:c7:bf:19:78:42:f4:7a:
         70:06:2d:ed:26:17:d7:34:a3:9b:f9:b9:7e:3d:1a:06:31:27:
         c7:7c:bb:1e:a5:2b:3d:39:c1:0d:5d:8f:4a:9a:23:fd:7f:29:
         b7:fa:3b:ec:ce:1e:a5:50:11:44:3d:5e:8f:d3:30:9a:72:d2:
         3c:1c:15:ef:fc:e3:53:fb:9c:0a:b0:23:64:d4:30:8c:48:b0:
         f2:7e:47:c3:80:0d:a4:bb:2b:e2:77:4d:65:0f:a1:dc:89:f5:
         b5:f3:4f:0a:72:f2:86:c6:63:fb:c7:83:a3:f6:8b:72:c4:0e:
         ba:2a:6e:a2:98:ce:02:26:2d:6b:fa:af:12:e1:01:52:2c:f6:
         47:6c:8d:b6:e6:5c:5b:d0:45:4b:91:8d:8c:6a:15:bd:35:93:
         30:f0:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org