Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/6469ab4a4c61a2ca3ea0060e5fa7cef5aa589ada.roa
File:                     6469ab4a4c61a2ca3ea0060e5fa7cef5aa589ada.roa (raw, json)
Hash identifier:          Snw4lFUKyIVqZ2Xi+7k88bASQVYaKlsK8mkQo4Ct0lI=
Subject key identifier:   CC:23:6A:D0:93:80:01:42:74:45:81:8D:E6:6F:ED:42:D0:66:F1:2C
Certificate issuer:       /CN=d31209578eceb0ae819110ed32dee1b09ec4df21
Certificate serial:       0C0D9B
Authority key identifier: F0:85:3A:FA:EE:61:C7:D4:EA:74:FA:14:A3:EC:21:56:40:2A:84:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31209578eceb0ae819110ed32dee1b09ec4df21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/6469ab4a4c61a2ca3ea0060e5fa7cef5aa589ada.roa
Signing time:             Wed 24 Mar 2021 14:33:48 +0000
ROA not before:           Wed 24 Mar 2021 14:33:48 +0000
ROA not after:            Tue 24 Mar 2026 14:33:48 +0000
asID:                     40676
IP address blocks:        200.24.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789915 (0xc0d9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31209578eceb0ae819110ed32dee1b09ec4df21
        Validity
            Not Before: Mar 24 14:33:48 2021 GMT
            Not After : Mar 24 14:33:48 2026 GMT
        Subject: CN=6469ab4a4c61a2ca3ea0060e5fa7cef5aa589ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:c0:1e:33:3a:db:e6:cc:ac:18:0e:eb:aa:
                    70:68:0e:f6:5a:b2:24:89:3b:31:64:04:0e:12:6d:
                    1c:6c:cb:b8:2e:b1:39:b9:04:7b:d6:74:3c:c6:89:
                    f6:e7:86:66:83:2f:67:bd:51:fe:0b:8b:b4:bd:74:
                    b0:fd:4e:c5:a5:71:d6:b2:10:ab:5b:6a:66:8d:5b:
                    08:75:8e:1f:a3:5a:8c:e1:12:1f:40:ad:03:85:ef:
                    06:cc:d9:e0:7b:43:34:6e:96:f9:6a:fd:4d:d7:0d:
                    2a:70:0c:d6:d7:bf:f1:d0:52:aa:09:ba:4f:24:76:
                    0f:70:29:d6:8c:2e:c8:7a:07:91:00:59:4f:9c:fe:
                    9d:5d:ea:dd:fa:78:78:38:16:b0:de:69:d2:1d:87:
                    ca:d0:c2:96:22:9c:10:c1:0b:b3:bf:7b:9d:eb:c2:
                    d1:d9:6e:83:07:64:84:71:0b:e6:34:68:ac:c8:7b:
                    a1:c8:ab:80:31:1e:f1:41:da:a9:12:d8:2a:b6:05:
                    d7:89:8b:15:66:6e:b0:d6:0b:06:6a:3b:cb:bb:0b:
                    24:58:c0:bf:53:97:5d:3d:21:c1:be:1c:f0:a0:15:
                    c8:89:03:9a:bb:09:67:e5:d3:4a:9d:70:e1:4a:f5:
                    73:59:52:c6:74:f7:9b:46:95:0a:90:6e:da:c8:ae:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:23:6A:D0:93:80:01:42:74:45:81:8D:E6:6F:ED:42:D0:66:F1:2C
            X509v3 Authority Key Identifier:
                keyid:F0:85:3A:FA:EE:61:C7:D4:EA:74:FA:14:A3:EC:21:56:40:2A:84:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31209578eceb0ae819110ed32dee1b09ec4df21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/6469ab4a4c61a2ca3ea0060e5fa7cef5aa589ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/d31209578eceb0ae819110ed32dee1b09ec4df21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:d9:a0:90:07:79:51:7c:81:c8:d9:00:ff:11:b4:2f:d1:ed:
         5b:45:de:02:04:e2:1d:04:54:94:d6:9a:ff:93:ae:d6:da:ba:
         45:3e:b8:88:22:61:05:47:47:93:06:31:da:95:9d:52:83:4b:
         c6:4d:ae:0c:67:78:f9:32:67:a4:a2:aa:27:49:b5:ef:e8:2d:
         c1:ce:7c:1f:e5:78:13:f3:56:c0:74:c5:f9:fe:3a:4c:d6:a7:
         6f:1a:2b:82:ae:c0:66:8f:f3:2e:a2:1d:71:65:10:cc:2d:51:
         ff:e6:39:b6:33:2c:b7:0a:9a:aa:ec:23:6d:f8:bb:52:94:f6:
         23:3a:c3:72:6f:66:55:bd:63:e7:9c:4c:d5:c3:db:2d:b3:9f:
         6e:8c:d6:89:10:d7:7c:7b:a8:7f:31:e3:ba:df:46:4a:2b:d6:
         b9:41:72:f3:30:94:77:37:1c:52:2d:e0:da:51:86:19:4e:ff:
         03:18:3c:a3:2b:c6:f5:c7:34:b5:70:e1:52:23:e3:0e:2b:39:
         b0:a2:ee:55:72:23:d3:37:e2:81:e3:e6:a3:be:f7:e4:77:05:
         be:29:a2:b7:df:48:35:84:8b:73:6a:bc:41:d0:b1:71:76:c6:
         9e:a2:e1:63:2d:ce:b4:c1:f6:ca:de:73:ab:1c:1b:fa:4a:0a:
         67:82:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org