Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a.roa
File:                     283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a.roa (raw, json)
Hash identifier:          xLAiyD83QEm6mGkEo1AVjXz+Sf3lgCDmFB/mZypNsms=
Subject key identifier:   4C:E3:61:80:1A:12:92:BF:0B:6C:8D:E5:08:1D:D2:2E:05:DA:A9:E0
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       0E0B00
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a.roa
Signing time:             Wed 24 Mar 2021 14:42:05 +0000
ROA not before:           Wed 24 Mar 2021 14:42:05 +0000
ROA not after:            Tue 24 Mar 2026 14:42:05 +0000
asID:                     20299
IP address blocks:        200.30.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920320 (0xe0b00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 24 14:42:05 2021 GMT
            Not After : Mar 24 14:42:05 2026 GMT
        Subject: CN=283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e2:90:c6:d5:72:64:96:ec:46:14:1c:ea:c5:
                    1b:44:04:ce:74:27:1e:cf:6a:7c:d5:00:a3:bb:9a:
                    4b:6c:76:d2:91:b7:9f:b5:89:11:ab:69:f9:d4:37:
                    50:df:fb:92:5f:ce:8f:f8:e5:3e:c7:bf:94:b3:b2:
                    08:64:60:47:89:c8:3d:71:1a:b8:b1:35:52:0b:4a:
                    6a:b9:07:3f:df:d9:31:a9:15:01:3c:ac:82:92:d6:
                    19:d5:b5:66:fa:f9:25:de:32:09:a2:58:62:bb:68:
                    d1:95:b9:ce:ee:ec:de:e7:8c:87:a2:cc:0b:d3:66:
                    67:fa:b6:ba:f3:1e:ef:34:b6:49:3b:87:e0:56:83:
                    2d:8a:66:f9:e8:07:c9:b8:36:bc:d6:38:82:93:ab:
                    28:31:7d:cb:a1:59:5b:07:d5:ac:d4:0f:f0:92:f1:
                    55:5d:fc:5c:61:fe:8e:d7:81:e1:58:41:10:83:34:
                    bc:43:e2:ed:5c:e4:d0:43:e8:fd:01:e4:32:ec:fc:
                    2a:39:80:9a:31:b2:7c:1b:0c:44:74:1d:11:6c:d2:
                    eb:cc:37:ec:18:29:03:75:e0:4d:8c:37:41:16:8e:
                    0b:81:18:83:2f:b2:8f:70:86:1d:90:c3:11:47:e8:
                    c6:38:f4:56:b4:da:0c:24:18:52:c8:dc:fb:8c:0e:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E3:61:80:1A:12:92:BF:0B:6C:8D:E5:08:1D:D2:2E:05:DA:A9:E0
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:cc:55:84:9d:6e:3f:f4:1e:a8:72:3b:4c:0b:47:9a:18:ca:
         f0:b3:0a:39:2d:34:fd:4a:54:cf:69:e8:4f:bb:f1:0e:2e:ec:
         e7:ea:36:22:96:1f:f1:48:f0:0f:7f:6d:25:ca:b0:ea:01:e0:
         25:30:5a:9a:ea:24:21:02:bd:34:8a:7f:2a:19:c9:f7:6f:84:
         88:ba:c5:6a:0b:b5:e9:26:19:68:23:6a:c8:90:5e:9c:54:af:
         8d:5e:cc:55:82:f9:40:e1:fd:bf:57:f9:7c:e1:d1:80:c1:d5:
         e8:7a:7d:b8:43:85:00:42:57:29:8b:0d:4a:c1:e2:bd:b4:92:
         70:db:d8:25:0c:23:b3:70:b6:07:66:58:be:aa:9c:85:57:62:
         28:be:4e:6a:17:3b:0b:4a:44:9d:b1:70:2a:d4:d4:5a:f3:02:
         39:a5:3e:64:e6:46:dd:bb:1b:cf:26:13:f9:d9:13:83:c2:e0:
         1b:7d:47:c2:43:4f:2c:29:60:ff:52:57:e6:02:6a:b1:bb:b9:
         a2:be:00:58:84:aa:2a:45:c1:cf:d3:10:ed:0a:ed:70:36:3a:
         f0:4d:99:de:38:e8:26:b8:3c:7f:f4:0e:f5:75:25:60:5c:8b:
         90:58:a2:ac:96:82:13:d1:30:50:2b:fd:29:5b:4c:2b:d7:c6:
         6e:ad:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org