Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/e958f3d5fa0b371c87a4ad24eb705b70ea8b74c5.roa
File:                     e958f3d5fa0b371c87a4ad24eb705b70ea8b74c5.roa (raw, json)
Hash identifier:          92BZE84MnYfm7HkfTtkOXB3fD0wSliLXoA9cI21wBN4=
Subject key identifier:   AF:7B:F1:DA:6E:6A:B1:25:90:8F:6B:4C:9A:B3:1B:8F:2A:3D:44:32
Certificate issuer:       /CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
Certificate serial:       0D849E
Authority key identifier: BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/e958f3d5fa0b371c87a4ad24eb705b70ea8b74c5.roa
Signing time:             Wed 24 Mar 2021 14:30:01 +0000
ROA not before:           Wed 24 Mar 2021 14:30:00 +0000
ROA not after:            Tue 24 Mar 2026 14:30:00 +0000
asID:                     265774
IP address blocks:        164.163.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885918 (0xd849e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
        Validity
            Not Before: Mar 24 14:30:00 2021 GMT
            Not After : Mar 24 14:30:00 2026 GMT
        Subject: CN=e958f3d5fa0b371c87a4ad24eb705b70ea8b74c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:cc:6b:b4:01:13:c6:18:6c:0c:f9:e4:2e:
                    83:c4:26:6d:cb:47:aa:d7:46:50:f1:b9:7d:a3:6b:
                    0d:5e:8e:b9:14:07:f0:11:2d:22:00:ca:45:c1:92:
                    1e:e5:04:3d:47:59:31:57:9f:be:b8:c3:64:64:bd:
                    4d:a0:70:58:d0:71:d5:2b:62:d4:3e:f5:30:38:43:
                    62:8d:27:d8:7d:b8:9b:6b:7e:a3:80:5b:0a:29:92:
                    2f:9f:61:47:40:07:a3:a7:5d:0e:0e:b4:d9:0b:af:
                    ea:5a:5a:32:d0:bf:2e:26:aa:f9:27:3f:35:7d:31:
                    fb:98:06:23:c6:9a:22:a4:77:8f:2c:ca:a1:79:96:
                    66:8e:37:75:9d:85:b5:7a:3d:6d:b4:73:c6:1b:57:
                    79:78:2c:26:3e:05:ee:fa:cf:31:ac:ec:1e:11:d0:
                    ee:43:e7:ac:f1:47:00:b4:3d:e3:cb:eb:08:e2:ee:
                    ae:5e:69:9b:00:78:ef:6f:45:cb:5f:c2:cc:46:21:
                    1f:68:bf:32:64:ab:43:08:af:19:5c:b5:96:c5:3d:
                    92:3f:73:2d:83:31:c8:76:52:4f:aa:07:5f:5e:86:
                    34:6a:10:79:46:a7:81:4d:08:05:16:45:ce:a9:78:
                    a7:7b:98:2d:43:d9:8c:0b:b8:a1:67:f5:70:21:fd:
                    fe:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7B:F1:DA:6E:6A:B1:25:90:8F:6B:4C:9A:B3:1B:8F:2A:3D:44:32
            X509v3 Authority Key Identifier:
                keyid:BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/e958f3d5fa0b371c87a4ad24eb705b70ea8b74c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:da:65:6f:e4:e8:f1:d8:1c:dc:5f:6b:6e:ee:97:18:3f:
         0e:82:fa:ad:ab:3a:a3:ac:c6:ad:99:f7:5f:75:7b:d7:8c:fe:
         4f:c0:02:3e:20:29:9e:8e:7e:1b:46:4c:78:6b:8c:2a:91:1c:
         da:37:10:13:65:e8:b9:a1:c6:78:10:4f:bc:30:56:38:85:14:
         56:e4:84:aa:a6:60:7a:54:f1:da:b9:0b:58:8e:f0:77:55:ec:
         43:d2:45:9e:f3:d3:73:16:df:e6:81:41:e9:e4:4a:fe:e6:c8:
         3c:55:eb:36:3e:75:1f:d9:9b:e0:90:99:ea:dc:11:1f:9e:5a:
         2e:4d:a5:db:1a:6a:ff:ea:13:b7:fd:e4:29:68:b0:90:00:1d:
         4d:91:c7:0f:2f:5a:e5:d6:9a:74:a9:6f:1c:bc:83:85:eb:94:
         72:fa:47:53:e6:29:f4:14:fe:3a:0d:5f:ca:cb:b6:1d:f2:99:
         c8:0b:e5:d4:ea:96:ff:e1:4e:95:fb:54:08:cb:d6:8d:ba:e7:
         a8:41:2c:d8:66:d2:e6:ff:d9:77:a9:92:ab:61:74:9b:3b:2e:
         6f:fc:dc:29:46:b6:80:74:a7:2d:9d:24:5f:e9:eb:7a:24:b0:
         6c:74:3f:25:3f:29:28:fb:47:3e:33:62:5b:4c:d1:23:a1:8e:
         17:d3:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org