Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/2dbee96b9f2dbbc351529c0d71bc5b12254f1c13.roa
File:                     2dbee96b9f2dbbc351529c0d71bc5b12254f1c13.roa (raw, json)
Hash identifier:          Dut4/4jO2No3fYVWuCT4WfzQRUPxn7zeCSB1cnNev58=
Subject key identifier:   F1:F1:9A:54:56:44:98:74:72:C4:9B:29:FD:C7:05:F1:40:6A:EE:B0
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       0BF257
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/2dbee96b9f2dbbc351529c0d71bc5b12254f1c13.roa
Signing time:             Wed 24 Mar 2021 14:43:23 +0000
ROA not before:           Wed 24 Mar 2021 14:43:23 +0000
ROA not after:            Tue 24 Mar 2026 14:43:23 +0000
asID:                     7438
IP address blocks:        201.131.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782935 (0xbf257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 14:43:23 2021 GMT
            Not After : Mar 24 14:43:23 2026 GMT
        Subject: CN=2dbee96b9f2dbbc351529c0d71bc5b12254f1c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:77:27:44:e8:4a:a6:55:65:3e:1d:3b:44:31:
                    82:49:67:10:ea:3e:dd:27:74:59:a6:5d:dc:de:fe:
                    94:d9:eb:56:4d:b0:d0:5e:7f:67:a0:4e:c8:00:f5:
                    fc:29:ed:d5:c4:32:aa:48:d4:cf:2d:b7:1a:8e:fe:
                    0d:68:51:a8:17:01:f0:4a:57:13:0e:3a:37:04:de:
                    86:4e:b5:6a:ed:66:8f:1a:e8:ca:e6:f6:6b:e0:64:
                    70:7d:fa:85:d9:84:ec:d2:8a:65:51:2e:1c:9f:5e:
                    b1:f1:ef:0f:1c:04:f8:64:5a:9a:f4:c9:dc:5a:6b:
                    b8:0a:42:45:c2:c1:73:cd:14:f2:73:6f:e4:37:79:
                    f7:cf:4e:5b:e6:bb:2a:f2:b5:82:48:b2:84:b0:40:
                    f7:74:dd:17:dc:2c:ca:f4:96:68:d0:b1:90:4b:ff:
                    68:f4:86:d4:ac:0a:b8:b8:67:90:0b:36:70:4e:dc:
                    c7:88:8e:36:6e:5a:97:5e:01:50:6e:13:84:57:7d:
                    e9:3f:6d:b5:b5:e6:34:91:00:d0:6e:fc:4b:e1:7a:
                    af:12:46:69:3d:5e:61:32:16:c5:bb:bd:fa:5f:42:
                    af:36:ec:d9:3c:d0:8c:ca:6b:f3:c9:61:10:2d:6c:
                    26:4c:cb:11:1f:0e:a6:37:d1:27:f9:95:b3:e4:bf:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:9A:54:56:44:98:74:72:C4:9B:29:FD:C7:05:F1:40:6A:EE:B0
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/2dbee96b9f2dbbc351529c0d71bc5b12254f1c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:df:7d:96:b6:a5:ea:9f:59:cd:ac:25:d7:c3:c2:fe:9e:1a:
         16:65:c7:c1:4c:44:45:c4:ad:8b:bf:a0:39:98:01:89:8c:42:
         53:1a:bc:8f:6e:18:40:27:86:2b:8d:38:43:ed:10:bb:39:05:
         e2:1e:e2:7c:52:f2:d0:27:55:e3:6e:5b:df:83:3d:3d:00:30:
         ae:d3:ae:10:90:23:1b:8e:54:95:5f:07:cb:a5:96:00:0e:50:
         76:37:01:3e:94:b5:9c:fd:47:8c:6e:7d:36:9c:a8:fa:6b:76:
         55:38:01:96:12:be:75:30:95:0b:c5:a8:15:dd:75:1f:3e:59:
         04:1b:49:1f:58:4a:4d:f1:d7:e9:3b:57:98:7c:d2:d4:55:f4:
         5f:0c:34:c3:cc:ce:29:d4:41:10:59:6c:a6:c9:e8:8f:64:87:
         26:2f:24:02:7c:d9:43:fb:90:53:0a:f6:6d:18:5a:38:73:66:
         9e:7d:11:b4:08:9e:2a:fc:95:e8:91:ce:32:7a:f2:dc:47:af:
         f9:51:19:18:47:2e:25:b3:ff:ca:12:58:b9:e8:7a:f9:b3:ce:
         02:0b:a9:bf:88:7c:43:eb:d5:83:22:d4:a8:cb:2f:72:a3:7d:
         f1:18:ea:11:a9:83:7d:7a:f3:a9:83:cd:d5:c7:a7:8b:d6:11:
         47:5b:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org