Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8d7fd970ca98d47a42f175c83399b2fdccff4d95.roa
File:                     8d7fd970ca98d47a42f175c83399b2fdccff4d95.roa (raw, json)
Hash identifier:          9zh5Asic/e2JWParRetb61RT9Q2QpuD8qFynvEYeaGk=
Subject key identifier:   09:3E:25:D5:37:58:7D:BF:08:86:22:E1:FD:EC:2A:29:DE:4D:37:4F
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E257F
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8d7fd970ca98d47a42f175c83399b2fdccff4d95.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     263733
IP address blocks:        200.46.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927103 (0xe257f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=8d7fd970ca98d47a42f175c83399b2fdccff4d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:84:2d:d8:80:61:ca:7b:45:5a:87:41:08:
                    bd:04:7b:82:d4:17:c5:fd:ad:13:e4:15:5a:ed:cc:
                    89:be:dc:3b:24:04:8d:78:46:2a:38:77:5e:69:f5:
                    8a:62:c4:75:ae:e6:23:1c:4d:16:97:9a:8d:e3:09:
                    6e:e1:1e:91:28:83:8c:80:cc:65:eb:e7:37:9f:8f:
                    ce:2d:32:2d:8d:d4:7f:8a:f2:96:09:45:92:cc:94:
                    ed:d9:1d:8e:d5:9d:f5:09:53:ed:4b:ce:5a:a4:bf:
                    92:c8:cb:fc:4a:d8:e5:16:e9:3a:77:ad:e5:b1:55:
                    ba:bd:65:ac:8b:18:3c:10:90:6b:bd:68:52:81:c6:
                    31:84:33:59:7f:e9:71:f2:35:ee:65:b1:b0:cc:4b:
                    52:ee:bc:cc:db:0e:52:da:4a:eb:3a:22:b8:80:ba:
                    a0:d1:77:9f:e3:e3:bd:37:e6:15:eb:c9:fb:46:e6:
                    10:32:d8:2b:ab:5c:38:a1:b4:5e:03:ae:a0:7e:2a:
                    b4:15:b6:b7:c0:41:62:33:70:37:11:73:20:0c:7d:
                    78:c8:fd:1f:46:e3:b9:09:47:ed:14:dc:83:cd:93:
                    d8:17:a7:a2:d6:ec:34:5a:8b:42:c1:d4:7e:91:83:
                    ce:de:5f:80:29:ff:78:5d:fd:c5:a0:62:42:63:82:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3E:25:D5:37:58:7D:BF:08:86:22:E1:FD:EC:2A:29:DE:4D:37:4F
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8d7fd970ca98d47a42f175c83399b2fdccff4d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:06:cf:c6:f2:cf:07:7d:37:ac:1e:52:76:49:bd:2d:d2:2f:
         37:af:91:53:cc:c1:4b:7d:ff:cb:9a:57:27:e8:3e:8f:40:12:
         91:90:1a:41:ce:b1:5a:05:49:be:47:bb:03:e7:01:26:1c:ed:
         fd:4f:73:9f:1f:38:4a:df:09:a6:84:99:03:ce:dd:0b:34:f8:
         d4:01:95:29:3f:26:30:ba:38:19:64:f4:68:1e:ba:f7:24:2c:
         e5:a1:d1:51:96:ae:6e:6c:ed:d0:80:66:9e:75:ae:3a:7e:f4:
         84:38:c9:03:e4:04:19:20:5e:33:34:76:dd:8d:18:5e:42:8a:
         24:6d:79:ef:fa:4a:dc:46:e2:9f:e8:2d:69:7c:b7:05:6a:13:
         06:8c:85:46:e1:d2:b8:26:74:bd:31:1c:7e:38:e5:92:8f:4a:
         35:fe:7b:f4:34:dc:22:41:20:7a:62:cc:38:40:be:e6:0d:ab:
         f9:1b:11:b5:a8:56:20:59:a3:d8:ca:a9:be:24:11:17:c6:3e:
         bb:b8:a4:71:90:c5:a8:fa:15:95:54:46:8a:79:e5:f0:19:58:
         d2:66:ff:49:d3:66:0d:2f:af:45:50:5d:07:4f:e3:81:f9:b9:
         29:14:5b:fd:ee:75:cb:ef:93:9d:f6:03:8b:4b:ab:e5:ab:79:
         1d:9a:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org