Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/08e818803f9f17d7a51bf7a6c498f853472a85d1.roa
File:                     08e818803f9f17d7a51bf7a6c498f853472a85d1.roa (raw, json)
Hash identifier:          wU4mSIB+APcDhLZ8KgUg02C9aBb8OTZKtvgdJoIJuCU=
Subject key identifier:   5D:B4:BA:1A:00:66:19:C6:9E:E7:AF:A0:52:EB:8E:60:72:F3:C4:01
Certificate issuer:       /CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
Certificate serial:       0D393C
Authority key identifier: 7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/08e818803f9f17d7a51bf7a6c498f853472a85d1.roa
Signing time:             Wed 24 Mar 2021 14:37:10 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     28050
IP address blocks:        200.74.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866620 (0xd393c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=08e818803f9f17d7a51bf7a6c498f853472a85d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:26:e9:40:69:4d:7d:2c:7f:79:da:10:2b:
                    a6:fe:22:88:a9:f1:ad:3d:ec:17:6d:3d:20:55:54:
                    3d:36:27:39:01:22:12:f8:f3:f3:72:42:80:a2:70:
                    9a:82:53:6c:64:dd:42:18:54:69:af:a1:33:35:b0:
                    1f:e8:a4:2d:b4:ae:fb:1b:2d:bf:a6:aa:a9:b0:a7:
                    c0:21:30:4d:17:20:51:ab:1b:88:5a:4b:75:64:4c:
                    11:17:81:d9:8f:f9:a1:4f:75:1e:81:b6:1a:4a:0a:
                    92:96:54:2f:05:5c:d5:c8:45:e0:69:63:04:45:db:
                    29:c9:44:18:1a:20:ff:fc:ea:21:a8:41:c2:e8:fc:
                    bd:62:b9:a8:16:2d:58:03:4a:3a:8a:b8:90:53:ef:
                    29:b3:8b:72:5a:44:6a:9b:40:16:c6:11:02:f1:21:
                    24:44:98:8f:0d:de:6f:3a:da:2a:42:19:d5:c9:66:
                    0f:8f:15:cd:42:5f:51:dd:ae:f7:28:2e:c1:c4:5b:
                    9e:07:a4:b6:72:6a:3f:af:f7:11:0a:5c:e9:90:98:
                    c6:90:b7:00:50:ca:d7:11:3b:24:1d:4a:e4:e9:1c:
                    77:40:69:e5:8f:03:18:7c:27:0b:51:44:8e:db:94:
                    ae:88:da:f9:cc:89:8a:6e:70:2b:06:00:4e:61:6a:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B4:BA:1A:00:66:19:C6:9E:E7:AF:A0:52:EB:8E:60:72:F3:C4:01
            X509v3 Authority Key Identifier:
                keyid:7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/08e818803f9f17d7a51bf7a6c498f853472a85d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a5:4f:b1:49:b9:60:48:e9:95:e9:fc:59:7a:dc:d9:81:5e:
         d8:0b:bd:8b:a0:45:44:02:25:31:0f:80:c4:91:b7:c7:bd:b7:
         23:17:47:31:40:d0:ac:81:89:80:9b:b5:b1:5a:5f:a9:8c:53:
         fe:fe:27:02:ec:c2:ef:c8:fd:ae:ff:a0:3d:6c:2b:10:00:13:
         9e:08:4a:ff:e9:ae:3a:b7:30:fd:c9:cd:9f:ce:87:30:61:94:
         49:25:6e:9c:55:cb:af:de:01:16:f5:24:e3:4f:d5:ec:7a:1a:
         94:24:09:fc:65:4d:34:2e:61:b0:64:8d:0b:85:ad:8f:48:01:
         56:6d:0b:85:9b:d7:18:98:28:33:91:c0:9b:7e:04:68:19:57:
         14:b0:a7:5b:f8:9f:f6:fb:a9:fa:c3:82:74:95:8e:d9:5c:7e:
         a6:d1:89:11:fd:21:61:30:6a:92:6d:d4:69:c8:35:f4:1a:49:
         a9:3b:93:c2:ff:b4:38:c7:d1:f1:1b:c4:1a:e0:11:ba:a8:1b:
         37:e3:53:bd:ed:80:48:11:fd:83:2c:5a:67:7f:16:50:3a:ef:
         a4:df:13:43:3a:e9:7a:fc:dc:bc:fe:07:c0:fd:93:c8:f1:98:
         e4:44:f8:e1:8e:93:7a:0b:ba:a4:20:39:ca:94:24:50:cb:bc:
         ff:3a:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org