Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/7e6647ea602c0fd93ce8538d7409a295e048eeff.roa
File:                     7e6647ea602c0fd93ce8538d7409a295e048eeff.roa (raw, json)
Hash identifier:          N9KGWdpwzzyQCHLaVUrTc+BGHnPizs8N/AjGnTZId8c=
Subject key identifier:   80:B5:E2:9E:A0:03:6C:D0:7B:90:90:F9:47:71:63:6F:0D:7E:2F:24
Certificate issuer:       /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial:       0D6143
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/7e6647ea602c0fd93ce8538d7409a295e048eeff.roa
Signing time:             Wed 24 Mar 2021 22:51:37 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     27820
IP address blocks:        200.0.29.0/24 maxlen: 24
                          200.0.30.0/23 maxlen: 24
                          200.0.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876867 (0xd6143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138405134343f63286b605fe9165839fd04a4252
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=7e6647ea602c0fd93ce8538d7409a295e048eeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:b1:bb:22:91:5c:12:04:1b:47:13:47:2a:
                    5d:38:ae:d3:d8:8c:88:d5:c2:69:21:9b:21:65:09:
                    3e:72:e4:f0:ea:97:72:a1:91:36:45:15:f1:76:76:
                    fa:49:b2:d1:e8:ca:12:3d:f5:33:74:ce:f6:76:60:
                    c2:39:9d:9a:10:d1:59:f3:34:ca:00:45:14:98:a2:
                    b8:b0:9a:e2:73:71:9e:7b:e1:63:93:49:f3:d4:9b:
                    95:d1:dd:fe:ca:c4:ba:31:1a:57:3c:b3:74:59:e0:
                    29:1c:b5:96:8c:2c:3f:ef:39:0e:84:a9:a1:db:aa:
                    19:a8:73:ef:0a:46:3d:ab:b6:01:8d:13:b4:ac:65:
                    dd:db:3b:56:89:7c:15:b9:6b:fe:65:17:92:27:20:
                    15:cc:4c:3b:32:db:2d:2d:86:1d:87:46:a8:fc:9b:
                    4b:36:86:9b:6b:96:71:d0:f3:3f:5c:c2:d7:0f:a4:
                    7c:4d:7a:a1:a4:dc:28:73:17:1d:3a:13:66:7c:40:
                    ff:b4:1e:d6:89:81:15:33:8a:26:90:6c:d4:60:8d:
                    4c:46:86:a2:77:44:cd:be:e3:a0:54:31:cf:b2:76:
                    b2:58:6c:ad:43:8c:df:c3:50:2c:5c:e6:ee:96:42:
                    9e:64:b5:75:65:47:2c:4a:57:9c:62:0d:a9:7d:84:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:E2:9E:A0:03:6C:D0:7B:90:90:F9:47:71:63:6F:0D:7E:2F:24
            X509v3 Authority Key Identifier:
                keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/7e6647ea602c0fd93ce8538d7409a295e048eeff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.29.0-200.0.31.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:42:87:20:79:0e:7f:86:6c:ee:3c:6b:2d:9b:6f:01:b4:
         db:11:30:69:a6:14:c7:e4:c9:20:3c:28:8f:eb:7b:42:91:89:
         1e:32:ff:07:87:b6:f7:a9:91:e4:79:c2:23:db:28:f4:5d:3a:
         07:78:dc:db:e7:7d:f4:a8:af:80:09:49:a7:60:0f:c4:1f:bc:
         83:45:63:71:b1:48:21:00:c9:b4:ad:70:b6:2b:70:dd:4b:ce:
         10:1b:ad:92:9c:31:a0:53:84:78:ab:09:04:33:54:fb:3c:e6:
         cb:f0:6d:61:2a:1c:03:e8:b0:9e:2d:fb:db:d1:8d:3d:b4:c3:
         1d:39:55:75:5e:ac:b8:75:a8:c0:e1:d0:7c:c7:f6:7e:fa:a2:
         9f:e2:16:55:15:b1:93:ea:90:03:06:d4:49:11:6c:8d:e8:0a:
         0a:93:57:8a:c9:98:96:91:05:37:34:39:96:dc:06:71:11:45:
         e5:fe:3b:b0:52:17:ff:29:10:2b:35:cd:76:aa:a6:e3:80:1c:
         b8:24:71:d4:4d:24:5d:85:70:ea:0f:43:19:95:c8:4c:52:be:
         95:33:a4:ea:7f:21:d8:68:fe:ff:fc:41:42:a9:21:05:ec:62:
         e2:88:20:8a:be:26:96:ae:38:74:5a:fa:d6:f0:28:03:44:16:
         e9:1b:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org