Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/b83baebdb89c505343f6782fb4bad0eba1ffd810.roa
File:                     b83baebdb89c505343f6782fb4bad0eba1ffd810.roa (raw, json)
Hash identifier:          Fpw0pQ0tXTEDwQZiYX62uWYCDT+ofX5a+uM98yHXkWg=
Subject key identifier:   F0:7B:78:AD:EA:49:FB:B6:6E:57:B2:A8:B9:5C:D0:1E:2D:C7:58:2D
Certificate issuer:       /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial:       0D43E7
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/b83baebdb89c505343f6782fb4bad0eba1ffd810.roa
Signing time:             Wed 24 Mar 2021 14:45:34 +0000
ROA not before:           Wed 24 Mar 2021 14:45:34 +0000
ROA not after:            Tue 24 Mar 2026 14:45:34 +0000
asID:                     262168
IP address blocks:        179.49.64.0/21 maxlen: 21
                          200.115.20.0/22 maxlen: 22
                          2803:500::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869351 (0xd43e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Validity
            Not Before: Mar 24 14:45:34 2021 GMT
            Not After : Mar 24 14:45:34 2026 GMT
        Subject: CN=b83baebdb89c505343f6782fb4bad0eba1ffd810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2c:0d:c1:1e:b5:f8:3d:b9:ff:32:b6:e5:3a:
                    a7:99:95:62:66:77:e2:03:d8:c6:21:38:23:22:bf:
                    37:7d:98:a9:85:cd:42:4b:c1:4a:c3:9e:72:93:9d:
                    a5:4f:b7:e9:87:af:e6:af:52:db:a2:0b:45:9c:ff:
                    48:62:4d:e2:7f:22:2b:ad:fc:7e:28:a7:3c:e5:8e:
                    90:10:06:21:4f:aa:4e:bd:6a:86:d5:95:4a:02:d8:
                    d2:87:f1:35:f0:71:9c:f5:79:ab:3d:5f:1a:9e:4c:
                    77:1f:e2:58:2a:56:68:85:17:01:44:d6:38:35:a3:
                    8e:1c:a7:d4:eb:3c:9c:d0:c3:70:78:07:81:8f:76:
                    f9:9f:21:5a:43:74:55:cd:b5:7d:a7:3a:c9:92:a6:
                    7f:b2:75:52:b8:98:0e:79:5c:ec:ad:3f:35:eb:d7:
                    b8:ef:64:1e:f9:9f:04:2d:f6:e0:9b:4e:48:21:aa:
                    61:2a:36:70:d8:f5:ee:6d:38:17:b9:37:4b:b2:0b:
                    c8:9d:c3:0f:69:cf:36:c5:f0:8d:0a:b2:af:f6:b2:
                    06:6c:37:94:b2:75:1f:1c:d9:bf:36:22:8c:67:7e:
                    ea:c1:d7:a9:a5:3e:d5:01:c4:c2:41:34:b5:f4:7c:
                    3c:a2:93:99:d2:59:4b:4a:af:37:d8:ec:99:4e:80:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7B:78:AD:EA:49:FB:B6:6E:57:B2:A8:B9:5C:D0:1E:2D:C7:58:2D
            X509v3 Authority Key Identifier:
                keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/b83baebdb89c505343f6782fb4bad0eba1ffd810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.64.0/21
                  200.115.20.0/22
                IPv6:
                  2803:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:84:c1:e3:c7:92:a6:46:9c:82:05:28:e3:4f:19:9b:43:
         e5:59:9c:d4:2c:f4:ed:66:cb:30:8a:71:ba:8c:f9:61:d6:8c:
         42:54:d6:f5:63:2b:46:26:97:f8:d9:55:65:4a:e5:2d:7f:92:
         8c:da:b5:1d:e5:ee:92:b6:43:6d:a2:a3:59:56:58:9d:db:ec:
         da:f1:e5:41:5d:b3:bb:42:33:0f:1f:d3:f2:78:07:aa:17:c0:
         d5:b1:6f:5d:d9:ac:b6:d2:60:70:50:90:4c:a9:02:7c:a0:c9:
         f4:fe:61:2a:b5:26:42:08:51:7f:21:72:ae:f9:e1:05:bc:bc:
         23:bf:83:80:11:be:cc:50:84:d8:b1:98:91:6f:58:fc:86:1f:
         85:08:4f:4e:64:1a:f0:c6:03:0a:86:fd:49:b0:94:8b:85:84:
         7f:ad:81:15:f6:7a:56:83:a8:40:52:e6:c4:17:74:4f:55:81:
         c2:dd:b3:43:a8:f6:bf:f7:4d:c3:a9:ce:76:36:a0:e3:a8:e6:
         80:e8:ac:4c:a6:64:5a:be:a9:ef:c0:09:73:7d:d0:06:a1:73:
         5b:25:8a:49:ab:1d:ec:e6:e5:b6:08:bb:f0:82:b2:1a:58:0b:
         d1:cf:8b:e5:fe:d1:70:e7:a8:8c:00:2b:b8:7d:5d:09:17:ef:
         85:d4:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org