Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/e3d7ae25d0b93a3603d8be0ce698533db374f93f.roa
File:                     e3d7ae25d0b93a3603d8be0ce698533db374f93f.roa (raw, json)
Hash identifier:          9kpzBh28EvCYVfcBRpFDbt/VRNbQmlMtpHjccH6kHho=
Subject key identifier:   F6:5A:C5:1F:3D:E2:D0:73:61:5B:3C:A7:61:EC:D0:A8:E2:4E:50:1D
Certificate issuer:       /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial:       0E01AD
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/e3d7ae25d0b93a3603d8be0ce698533db374f93f.roa
Signing time:             Wed 24 Mar 2021 14:42:17 +0000
ROA not before:           Wed 24 Mar 2021 14:42:17 +0000
ROA not after:            Tue 24 Mar 2026 14:42:17 +0000
asID:                     263239
IP address blocks:        190.5.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917933 (0xe01ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
        Validity
            Not Before: Mar 24 14:42:17 2021 GMT
            Not After : Mar 24 14:42:17 2026 GMT
        Subject: CN=e3d7ae25d0b93a3603d8be0ce698533db374f93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ae:53:11:96:b3:39:fb:bd:5c:9b:f6:50:eb:
                    2f:de:74:7d:09:7e:a7:f7:ea:7d:67:d3:a3:34:d0:
                    3c:9a:4a:63:30:b4:1c:eb:72:e1:98:a5:76:11:3b:
                    9b:97:6b:a6:22:a9:93:a0:23:c9:86:ec:7a:bf:3d:
                    49:00:97:f6:be:67:79:be:dd:21:92:17:4c:43:87:
                    bf:1d:03:f5:19:29:f1:f6:e5:a7:96:05:45:70:96:
                    e0:f8:07:a0:22:95:b8:b6:79:4b:d7:0c:82:72:60:
                    16:64:31:44:64:a4:4d:b7:b7:00:c0:c0:e7:66:0e:
                    f6:d4:9d:58:71:51:1e:b3:40:0b:1f:9c:87:eb:a1:
                    2e:ce:f4:31:22:90:7e:a0:64:ea:c3:dd:b4:6b:e0:
                    06:e9:bf:f4:70:55:32:1f:46:13:be:5d:06:a9:fb:
                    ff:d3:ef:9a:51:d2:fd:e4:e5:af:1d:2b:c4:7b:f7:
                    fd:15:91:d6:59:de:38:92:f6:bc:63:db:1e:3e:98:
                    60:0e:de:fb:c7:24:7b:71:d7:62:27:06:da:18:2c:
                    bf:fe:41:3c:22:1b:c0:d2:ea:1d:70:ac:dc:eb:6d:
                    45:c0:22:1e:bb:e7:bf:ee:51:a3:41:89:0a:19:09:
                    7c:a3:30:d2:eb:2e:c8:4b:65:a5:b9:2f:74:4d:b8:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5A:C5:1F:3D:E2:D0:73:61:5B:3C:A7:61:EC:D0:A8:E2:4E:50:1D
            X509v3 Authority Key Identifier:
                keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/e3d7ae25d0b93a3603d8be0ce698533db374f93f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:94:2c:b0:c7:79:9a:90:cd:5f:45:f0:ed:76:37:39:43:06:
         89:33:60:6e:d2:ea:12:8b:e8:3e:d1:a9:69:6d:a4:80:d5:e8:
         d5:0c:46:1b:8f:6e:2e:e4:ef:84:39:93:83:41:d9:1c:bd:70:
         89:fd:fd:f3:9e:35:74:2e:b7:9e:81:f2:79:0c:53:c8:a9:ca:
         45:a4:4f:93:1c:96:25:70:0b:48:56:d7:dd:44:5b:f3:ee:1d:
         24:1d:20:c7:36:3d:a0:3a:1b:e2:b6:98:4e:6e:ae:59:55:e1:
         74:b2:f7:38:65:89:d3:b8:de:46:0b:69:7d:19:ae:ed:fe:31:
         f3:13:31:90:da:38:89:ce:f1:dd:a4:6f:77:54:c4:a0:77:19:
         7a:00:a8:f2:9d:36:50:9a:b1:57:23:d6:0c:8e:93:f1:85:e6:
         8e:f0:f4:61:e5:94:98:38:70:fa:e2:07:eb:13:a5:77:2c:f8:
         dc:59:b5:6f:d8:19:1a:5c:70:48:7d:45:63:3f:e7:2f:2a:b8:
         51:90:ec:0e:b3:29:11:84:b2:a6:fa:aa:90:d1:16:06:eb:2b:
         1a:a1:d6:08:00:d8:61:8b:d3:c1:b7:6b:3f:f4:f3:00:27:2d:
         d1:f6:0d:28:47:b9:61:bd:cc:92:06:dd:6d:f4:5d:ac:16:b6:
         92:8a:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org