Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/c622cb734f14614f81e0facfd761971c189e9943.roa
File:                     c622cb734f14614f81e0facfd761971c189e9943.roa (raw, json)
Hash identifier:          4LpgmFdQ5SJpOBI05hhbenjzTMCfr1VyB3cafk1rPC0=
Subject key identifier:   F0:CA:FD:F2:C4:44:60:4C:1E:05:04:C5:63:6E:C4:96:D3:62:C8:E5
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       0C0312
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/c622cb734f14614f81e0facfd761971c189e9943.roa
Signing time:             Wed 24 Mar 2021 14:43:23 +0000
ROA not before:           Wed 24 Mar 2021 14:43:23 +0000
ROA not after:            Tue 24 Mar 2026 14:43:23 +0000
asID:                     7438
IP address blocks:        201.166.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787218 (0xc0312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 14:43:23 2021 GMT
            Not After : Mar 24 14:43:23 2026 GMT
        Subject: CN=c622cb734f14614f81e0facfd761971c189e9943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:e0:2a:b9:5d:94:96:08:3e:c6:4c:03:79:
                    13:bf:a7:a0:74:a1:fe:f6:14:ed:88:f5:31:07:fa:
                    da:ef:93:fa:4d:39:2e:db:ec:df:af:cc:7c:b1:fc:
                    25:1f:af:41:28:ae:d0:15:c3:55:ca:59:f5:9e:73:
                    35:dd:eb:36:a2:c7:93:51:b6:90:20:70:02:36:b8:
                    86:c1:05:85:31:b9:be:80:ec:9e:ab:3c:16:19:0d:
                    4a:1b:ce:c4:fc:86:d9:77:ad:4d:b1:15:ee:c1:0e:
                    70:3c:62:67:cf:23:63:bd:13:ac:e6:93:ac:46:39:
                    bb:85:14:38:27:c6:c5:74:14:24:2f:07:f9:dd:14:
                    e5:d8:21:79:e3:08:03:c6:c6:33:30:3a:16:07:18:
                    14:3d:d0:2f:df:77:fe:3c:db:86:ce:f5:1f:72:8c:
                    c6:56:96:23:63:4b:a8:ee:88:06:ad:70:6c:d8:58:
                    25:3b:8f:f6:a6:97:7e:e0:dc:9e:b1:c5:aa:3d:4d:
                    46:a9:a6:c2:aa:44:2e:eb:6e:b2:5f:b2:64:ed:fb:
                    42:d0:ca:5c:9a:0f:70:91:a4:52:d0:8e:4d:30:2a:
                    6f:f1:ac:5e:67:4f:e3:77:47:c0:be:87:17:d3:aa:
                    bd:5d:5c:fd:5f:f3:b9:9e:9b:84:70:d1:ff:7a:2c:
                    13:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:FD:F2:C4:44:60:4C:1E:05:04:C5:63:6E:C4:96:D3:62:C8:E5
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/c622cb734f14614f81e0facfd761971c189e9943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.166.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:50:cf:f0:4b:64:68:f9:a5:21:69:14:a2:73:b2:1a:aa:e2:
         b4:b7:cc:b2:0f:5d:29:7a:c1:3a:de:77:80:27:c4:c7:b6:69:
         c6:32:38:28:6d:07:62:69:e0:80:b9:73:1e:69:2f:4c:8c:6c:
         48:d7:a9:a6:f1:49:44:71:28:33:ae:03:6a:00:f0:85:ba:87:
         b8:b7:59:fc:b2:28:14:14:c1:62:59:9d:08:ce:a2:7d:25:ab:
         c0:44:8b:ad:c5:eb:79:ef:85:d4:9d:42:b6:03:ca:88:a8:99:
         9f:68:55:74:c3:8c:34:ca:ba:6d:70:c5:d1:1d:d1:c4:e2:61:
         35:17:90:8b:20:e6:20:eb:94:fd:17:1c:c5:42:dd:2f:3f:fa:
         37:da:41:fe:73:cb:15:4a:1f:c6:a6:c4:6d:5c:ac:62:6c:24:
         60:2e:42:c0:d3:a1:5f:9e:50:69:04:23:00:f6:8c:9d:3d:c9:
         02:a2:8a:14:a1:66:42:32:6b:16:42:de:34:d5:94:9e:74:35:
         99:98:02:a8:84:31:b6:45:8e:aa:08:d0:79:d4:72:0a:98:ad:
         6b:da:51:14:02:3c:59:51:bb:4c:90:bb:54:46:f2:ba:78:48:
         6c:a1:04:a8:9b:bc:1b:f4:8b:41:d4:33:dc:97:3d:86:62:22:
         88:91:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org