Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/9b0975a7a601f7ec678618e7c01ee09c7f1c372f.roa
File:                     9b0975a7a601f7ec678618e7c01ee09c7f1c372f.roa (raw, json)
Hash identifier:          ns+kTUkHBxqqqKFzgixseY37fLfhrP0DmBOQvodqcwo=
Subject key identifier:   AC:8F:21:EA:A8:56:D9:A2:B7:87:46:DB:4F:3F:F7:2B:32:77:2B:4B
Certificate issuer:       /CN=1034a2eadc759845b0599fd410ba1e4691a1ea9e
Certificate serial:       0DABDE
Authority key identifier: DC:65:2D:66:4B:B7:E8:A2:15:54:3E:D2:85:30:B3:3B:47:AC:11:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1034a2eadc759845b0599fd410ba1e4691a1ea9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/9b0975a7a601f7ec678618e7c01ee09c7f1c372f.roa
Signing time:             Wed 24 Mar 2021 14:29:50 +0000
ROA not before:           Wed 24 Mar 2021 14:29:50 +0000
ROA not after:            Tue 24 Mar 2026 14:29:50 +0000
asID:                     28066
IP address blocks:        179.63.200.0/21 maxlen: 24
                          190.122.192.0/20 maxlen: 24
                          190.122.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895966 (0xdabde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1034a2eadc759845b0599fd410ba1e4691a1ea9e
        Validity
            Not Before: Mar 24 14:29:50 2021 GMT
            Not After : Mar 24 14:29:50 2026 GMT
        Subject: CN=9b0975a7a601f7ec678618e7c01ee09c7f1c372f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:a3:eb:49:02:0d:aa:85:68:55:fe:ef:31:
                    fb:ab:23:f3:c9:82:b1:e7:68:b6:bb:a9:eb:b9:78:
                    f1:14:6e:80:13:db:ce:5a:e5:39:3b:43:6e:f6:db:
                    cc:5f:d1:77:cd:8d:8e:3d:3c:60:80:b8:32:26:3c:
                    62:7d:46:98:95:50:e7:8e:27:c4:45:8e:71:26:3c:
                    1c:8e:e5:17:9f:5b:72:d3:16:ae:be:84:44:89:14:
                    46:0b:72:61:51:d5:e6:a5:79:19:b1:66:a3:c7:04:
                    ef:ae:f9:8a:50:48:f3:2f:34:1b:be:c5:5a:a3:60:
                    c9:96:05:8f:83:8a:0b:87:2f:57:70:d6:f6:f3:7c:
                    97:7e:da:f9:dc:63:3b:f8:ee:65:28:19:2b:79:d6:
                    12:72:6b:24:a2:d2:12:c6:3f:d1:aa:4e:23:7f:cd:
                    86:75:6d:18:a4:c0:b9:70:6e:6c:9c:62:fc:5f:81:
                    10:12:4d:49:84:86:4a:f0:69:54:cc:08:bf:ba:fc:
                    a7:a8:2c:ab:30:c8:4e:fb:c1:41:18:5b:00:a9:06:
                    29:ec:a5:e8:4d:0f:98:0a:d8:b6:8f:f6:7f:56:b1:
                    ef:80:c2:67:48:4d:a4:02:75:ce:ea:45:0b:89:61:
                    89:5c:6c:7e:26:aa:2c:be:be:fd:db:7b:5a:01:8b:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8F:21:EA:A8:56:D9:A2:B7:87:46:DB:4F:3F:F7:2B:32:77:2B:4B
            X509v3 Authority Key Identifier:
                keyid:DC:65:2D:66:4B:B7:E8:A2:15:54:3E:D2:85:30:B3:3B:47:AC:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1034a2eadc759845b0599fd410ba1e4691a1ea9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/9b0975a7a601f7ec678618e7c01ee09c7f1c372f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/1034a2eadc759845b0599fd410ba1e4691a1ea9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.200.0/21
                  190.122.192.0-190.122.215.255

    Signature Algorithm: sha256WithRSAEncryption
         73:e8:ab:35:7b:a2:14:0e:a4:15:85:71:1a:a7:94:3a:6b:ee:
         3b:47:17:75:38:a2:66:da:e4:18:ba:db:b3:55:20:a9:95:1c:
         27:6e:e5:ba:dc:2d:99:27:23:8c:85:f1:73:91:c6:2d:a1:56:
         91:12:a1:e7:e9:a2:85:d2:11:76:95:c6:65:8c:e2:a8:a6:1a:
         53:e7:14:4c:dd:06:77:84:36:62:c7:30:92:ce:47:2c:9a:f8:
         bf:de:7e:0f:7a:0d:39:e6:16:33:2c:56:c1:1d:cb:16:4e:9f:
         4b:a6:7d:e5:29:a4:cb:ae:0b:a0:65:92:3e:96:5b:f3:f8:64:
         d5:f3:04:11:b6:36:5b:bc:d2:cc:5b:0f:3d:2f:f2:5c:dd:fc:
         d8:a1:df:88:0b:d1:93:b2:c5:02:a1:8a:5f:8d:c1:7b:67:30:
         41:99:c1:25:37:f9:98:1b:18:ce:bf:01:39:e7:d0:f3:61:f2:
         45:f9:66:56:09:ae:8b:19:e4:ee:ae:73:7b:9a:bc:15:b6:7a:
         5f:f6:44:69:b5:ce:f3:6e:ef:0e:c4:7a:26:d0:84:bc:ac:e9:
         8e:c3:ea:51:5c:f3:10:55:cd:d4:8e:9e:b3:90:80:34:6c:b0:
         ec:82:01:2a:86:94:84:cc:69:64:01:da:5c:52:6f:c4:6f:b7:
         ec:fa:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org