Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/d18f53b5f59af1d48707c339154bc91e948ad454.roa
File:                     d18f53b5f59af1d48707c339154bc91e948ad454.roa (raw, json)
Hash identifier:          VUTfe325Z3yDapAf9aM8ij3T1ChlNzyHoxtfsMQ1tk0=
Subject key identifier:   63:78:03:6F:F4:8C:4F:E1:9B:3C:0F:EA:37:E5:D9:05:18:15:23:91
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       0E0E82
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/d18f53b5f59af1d48707c339154bc91e948ad454.roa
Signing time:             Wed 24 Mar 2021 14:42:05 +0000
ROA not before:           Wed 24 Mar 2021 14:42:05 +0000
ROA not after:            Tue 24 Mar 2026 14:42:05 +0000
asID:                     262206
IP address blocks:        200.30.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921218 (0xe0e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 24 14:42:05 2021 GMT
            Not After : Mar 24 14:42:05 2026 GMT
        Subject: CN=d18f53b5f59af1d48707c339154bc91e948ad454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:98:19:56:27:04:77:26:3e:63:b6:a0:fa:
                    03:0d:1f:20:65:71:0b:31:9b:15:ad:cf:f5:51:cc:
                    18:75:aa:b7:65:12:66:83:f3:6c:d9:8c:27:e0:de:
                    19:b9:e2:67:97:bf:1b:09:bf:f1:8b:2e:f0:e9:20:
                    26:34:97:be:09:71:ce:90:b2:04:20:42:f9:34:fd:
                    37:a4:65:89:b6:ca:6b:c1:1f:1e:9e:3e:4d:a4:f3:
                    a6:8b:f9:36:6c:08:6e:a0:18:d5:46:08:6e:aa:b4:
                    c6:2b:d3:72:fd:83:24:13:2c:d8:70:f9:7c:95:78:
                    37:f6:8c:a4:dd:f6:fc:60:8c:9d:db:98:5a:e0:40:
                    c8:87:f7:1d:97:ff:7b:5d:02:8a:83:93:57:c2:1f:
                    17:3b:91:0e:f4:b6:c9:7c:67:8d:ce:6b:4b:ee:4d:
                    2d:ac:9b:0e:1b:13:bc:7d:a1:ab:8e:b7:1f:32:7c:
                    82:3e:c4:8b:0f:93:6a:6e:15:7e:b3:fa:3a:11:12:
                    47:c7:f1:e2:10:43:4d:46:57:23:81:ef:eb:ea:cd:
                    94:07:5d:37:98:f9:2a:a6:25:05:13:81:c8:74:79:
                    6e:57:c6:d7:86:a0:bf:7e:88:38:ad:9a:18:d3:91:
                    8d:90:f9:12:46:5b:c4:71:f5:9a:b7:ba:a9:da:d6:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:78:03:6F:F4:8C:4F:E1:9B:3C:0F:EA:37:E5:D9:05:18:15:23:91
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/d18f53b5f59af1d48707c339154bc91e948ad454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c9:f3:da:11:29:82:48:b7:e4:55:38:4d:dc:38:dd:a9:86:
         a0:c0:99:5f:70:26:bc:ce:50:2a:02:d4:0b:4f:01:ec:4b:23:
         1f:db:75:fb:ec:87:7e:a4:b4:0e:a4:01:a7:3e:f0:20:79:d3:
         71:6a:20:b6:61:96:fd:b5:24:88:24:75:13:35:5e:4d:e3:75:
         aa:e2:b5:fa:0a:33:86:03:f3:24:31:a4:9c:fc:fc:ee:39:c6:
         55:64:38:bf:56:36:10:2e:5c:32:65:97:18:e8:01:2a:b8:dc:
         0f:bb:65:3c:2f:2b:61:bf:a6:cf:df:87:95:54:54:3c:36:26:
         80:66:48:7a:6f:2d:ab:31:73:ee:b7:45:41:a8:ce:55:dc:74:
         9e:24:89:80:55:d8:dd:12:26:55:8b:44:16:a4:de:41:35:c4:
         de:96:03:05:b6:94:98:7c:90:41:5d:68:7a:5e:26:c1:f2:6a:
         30:67:ce:4f:a0:ae:6a:2b:f5:4b:68:2c:0c:95:85:94:76:89:
         22:af:d5:9f:8e:92:85:24:3a:3e:4d:9c:c4:46:9a:77:62:92:
         e9:56:46:9d:ce:8a:98:56:89:73:9c:a8:f9:70:15:d5:3e:8e:
         84:1a:e3:9b:40:90:51:ec:f1:b0:81:77:b4:1e:17:f9:bd:bb:
         f2:d0:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org