Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/50959917106ebcc84aaf48ee381cc911f0c587d1.roa
File:                     50959917106ebcc84aaf48ee381cc911f0c587d1.roa (raw, json)
Hash identifier:          o4/vFp5D5kUHN1UfSb7Cqr74+gdzSSoGmIrOwFlfvpc=
Subject key identifier:   70:ED:AE:75:0D:BE:61:F5:B3:B0:33:C5:6E:E2:F6:CF:D7:E0:90:2F
Certificate issuer:       /CN=ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0
Certificate serial:       04C3A6
Authority key identifier: 02:A5:56:3B:A0:72:3F:25:B5:F3:32:14:81:3D:C5:B9:9E:6D:7A:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/50959917106ebcc84aaf48ee381cc911f0c587d1.roa
Signing time:             Fri 28 May 2021 23:44:30 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     15236
IP address blocks:        148.213.0.0/18 maxlen: 18
                          148.213.112.0/20 maxlen: 20
                          148.213.128.0/19 maxlen: 19
                          148.213.160.0/19 maxlen: 19
                          148.213.64.0/20 maxlen: 20
                          148.213.80.0/20 maxlen: 20
                          148.213.96.0/20 maxlen: 20
                          148.213.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312230 (0x4c3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=50959917106ebcc84aaf48ee381cc911f0c587d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:55:3c:ec:49:34:5d:df:2d:d5:53:8c:fd:
                    c2:76:d2:7b:b1:50:7a:5f:61:5c:59:47:fa:88:3d:
                    4f:8e:e4:b6:b3:4b:7d:1d:22:cf:c0:2c:3d:66:1b:
                    f2:8c:95:33:46:25:7b:35:2c:25:b7:90:70:5f:5d:
                    1b:23:b6:18:4d:91:09:37:6b:95:73:45:b5:42:fa:
                    30:ad:0e:24:3a:75:af:e6:47:14:c9:a5:67:f2:c5:
                    dd:70:82:88:4e:ea:c1:68:52:b9:a4:7c:66:df:57:
                    10:06:5f:28:49:0c:4d:29:81:5e:96:49:d9:6e:f9:
                    bd:dc:19:01:87:81:02:9b:4f:e7:81:fb:34:46:eb:
                    92:ff:e8:b5:ee:c5:58:49:45:c1:c5:8f:6b:f2:86:
                    11:9a:98:38:2f:73:3c:07:38:2b:37:d8:aa:9e:ee:
                    9f:c7:d3:d0:52:4d:db:bc:9b:74:4f:71:22:33:d6:
                    09:a7:2f:f4:db:29:72:5d:a5:ad:96:19:2c:9a:b2:
                    ae:7f:9a:45:74:a7:d1:57:99:32:c8:ba:47:70:ce:
                    9b:41:45:1b:c1:62:59:c9:88:45:60:82:52:16:14:
                    a4:e5:86:dd:7f:b6:bc:42:af:7f:e3:5b:33:f5:52:
                    3f:a4:fc:d0:c3:e3:ff:ea:e6:89:db:04:82:dc:f8:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:ED:AE:75:0D:BE:61:F5:B3:B0:33:C5:6E:E2:F6:CF:D7:E0:90:2F
            X509v3 Authority Key Identifier:
                keyid:02:A5:56:3B:A0:72:3F:25:B5:F3:32:14:81:3D:C5:B9:9E:6D:7A:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/50959917106ebcc84aaf48ee381cc911f0c587d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.0.0-148.213.191.255
                  148.213.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:dd:e3:aa:8d:7d:b9:7a:18:3a:f0:3d:d1:a7:64:10:4a:c9:
         2a:74:a0:f1:d3:26:f7:11:db:c1:99:72:9d:29:b4:ec:ae:c1:
         17:91:0a:e8:fc:fd:e9:f0:3f:ed:85:80:4c:23:f3:f4:db:55:
         3b:73:47:21:9c:76:3e:c4:19:2e:df:f3:81:8d:89:0a:4c:6c:
         20:3a:b2:11:b5:2b:d4:ab:8f:64:63:2f:74:4a:6b:37:38:52:
         0e:4b:4b:52:b4:f8:cb:d8:d6:6e:25:4c:c0:90:07:15:1d:03:
         3d:6c:09:00:de:9e:82:c2:2e:bb:12:33:4b:80:05:dc:65:97:
         3a:b5:37:fa:1c:e7:e9:46:52:d6:c4:91:ea:b8:c6:0b:bf:17:
         3b:35:e4:76:27:ea:ac:66:67:66:97:9b:93:0f:c8:87:09:f2:
         8f:3d:47:ba:2a:33:3d:0c:41:2e:18:86:ba:73:1b:79:1d:2f:
         5f:ef:3a:50:f6:2d:5d:48:03:bc:21:bf:80:d4:c1:d6:e1:6a:
         7d:73:4d:f4:7f:fa:3d:40:b2:4a:90:c2:23:5c:5a:fe:0d:d6:
         73:1a:9a:c3:91:80:6d:a1:48:23:c3:40:c6:df:0e:a1:12:9e:
         75:d1:1f:de:59:5e:d7:ac:ff:3d:d8:ed:f1:a6:ec:f1:fb:84:
         b2:a6:c1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org