Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/50285a1abd6765b058400dd0ce7bc09bf4f4ca49.roa
File:                     50285a1abd6765b058400dd0ce7bc09bf4f4ca49.roa (raw, json)
Hash identifier:          QczMAPdRQIfJcob2QhdoI13plQFi6D5n95xm9FB3LlA=
Subject key identifier:   F3:FF:DA:C4:2E:55:6F:9E:21:A2:EB:55:0F:35:A5:1C:D1:8A:A3:BB
Certificate issuer:       /CN=1d39e33473e4bb1b07dda4a78b92c9b0f538c685
Certificate serial:       0D1902
Authority key identifier: F8:44:59:C4:4D:8A:E6:17:2A:87:3E:3D:D2:41:C2:89:60:F8:B1:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/50285a1abd6765b058400dd0ce7bc09bf4f4ca49.roa
Signing time:             Wed 24 Mar 2021 14:47:29 +0000
ROA not before:           Wed 24 Mar 2021 14:47:29 +0000
ROA not after:            Tue 24 Mar 2026 14:47:29 +0000
asID:                     52285
IP address blocks:        190.111.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858370 (0xd1902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d39e33473e4bb1b07dda4a78b92c9b0f538c685
        Validity
            Not Before: Mar 24 14:47:29 2021 GMT
            Not After : Mar 24 14:47:29 2026 GMT
        Subject: CN=50285a1abd6765b058400dd0ce7bc09bf4f4ca49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:ec:c2:99:8a:28:8f:7d:89:bd:ec:e0:92:
                    d5:30:73:d7:7d:9c:09:13:ec:41:30:19:b6:19:a3:
                    3b:1d:16:b2:6a:0a:e5:d1:50:55:ed:23:34:de:f9:
                    3b:ce:4e:10:6b:a6:82:0d:60:d1:28:ee:fc:05:54:
                    3a:04:17:11:73:01:44:5d:c1:5f:e9:ac:78:b0:5e:
                    3e:32:b7:48:0d:3d:95:fb:1d:e7:4f:e2:a2:2b:3a:
                    c8:d7:8f:3a:14:18:0c:14:fa:96:ce:7e:cb:03:b3:
                    40:35:5a:62:b5:20:55:e3:42:86:27:4e:84:4d:05:
                    d3:8c:59:2c:77:c0:f0:fd:19:c0:86:0a:a1:78:22:
                    f3:d9:67:cd:20:f6:41:aa:d7:01:f7:d8:86:d9:72:
                    17:1e:0f:43:ee:b0:aa:b1:fa:6a:0a:58:5a:c1:8d:
                    9f:88:ae:53:82:a1:b4:c5:f2:c6:20:98:65:e7:c7:
                    e3:ee:d8:ae:a6:52:be:6f:6c:92:8d:dc:d3:75:30:
                    69:80:cc:b5:44:00:aa:0b:f5:95:9a:8c:aa:8c:f6:
                    cd:d7:ff:84:ee:80:94:8d:4a:67:28:dc:ab:78:92:
                    78:84:12:6e:4f:eb:75:f3:f6:81:09:21:c0:62:f1:
                    28:ca:e0:75:a8:7f:95:16:cf:98:fc:44:ad:b3:cf:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:DA:C4:2E:55:6F:9E:21:A2:EB:55:0F:35:A5:1C:D1:8A:A3:BB
            X509v3 Authority Key Identifier:
                keyid:F8:44:59:C4:4D:8A:E6:17:2A:87:3E:3D:D2:41:C2:89:60:F8:B1:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/50285a1abd6765b058400dd0ce7bc09bf4f4ca49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:62:96:61:53:a2:36:95:a8:07:d8:e5:e1:c8:e5:cb:55:fe:
         9c:76:13:4b:31:df:f9:49:cf:6e:7c:f1:f2:24:03:d0:d6:2b:
         4c:7b:d0:42:a0:8c:a0:6f:0b:ed:42:38:bf:d0:f0:e1:5f:a6:
         d6:17:e0:cd:1e:33:1d:e5:36:dd:e5:03:71:80:93:bb:cd:1f:
         40:60:ca:8a:17:47:7d:bf:9e:2e:7d:6c:cf:7b:57:ef:89:eb:
         e0:a5:03:a9:4f:70:49:6b:5c:7a:40:3b:3e:5b:4a:df:dd:3e:
         40:17:e3:14:0f:87:bc:dc:d1:8f:b3:25:43:0d:65:dc:0d:44:
         ba:9c:75:66:15:6b:08:e2:64:c4:3f:b9:75:d7:2c:09:cb:5e:
         9c:17:f7:a5:cb:97:1e:e0:7a:ca:f6:df:6d:fb:f6:26:31:58:
         a6:a4:78:41:d1:43:2e:d3:03:b7:cb:1a:00:f8:c1:cd:32:48:
         ec:13:82:8c:12:dd:24:18:c0:f5:a7:ff:be:a0:11:db:72:0c:
         94:38:a8:42:c8:35:ad:30:50:4f:e1:3c:b6:1b:7b:de:96:29:
         f0:90:af:f8:10:b2:13:d5:04:88:2f:26:ee:99:89:44:f1:80:
         54:94:ed:29:ea:c0:74:95:bc:9f:07:28:94:ec:0b:01:a1:e8:
         80:d6:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org