Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/80c9ddb682ffde97992ea10158a29cf578c276c5.roa
File:                     80c9ddb682ffde97992ea10158a29cf578c276c5.roa (raw, json)
Hash identifier:          kvAjj6rGRIxPOUJ8kJ9wflE9w/Rf0AYWw0kxsKsSVeo=
Subject key identifier:   C7:9A:98:89:8D:34:B8:FE:72:B7:8B:A2:08:31:2F:E1:36:21:C2:82
Certificate issuer:       /CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
Certificate serial:       01B3AA
Authority key identifier: BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/80c9ddb682ffde97992ea10158a29cf578c276c5.roa
Signing time:             Tue 13 Apr 2021 14:49:07 +0000
ROA not before:           Tue 13 Apr 2021 03:00:00 +0000
ROA not after:            Thu 13 Apr 2023 03:00:00 +0000
asID:                     263227
IP address blocks:        200.112.192.0/21 maxlen: 23
                          200.112.200.0/22 maxlen: 23
                          200.112.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111530 (0x1b3aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
        Validity
            Not Before: Apr 13 03:00:00 2021 GMT
            Not After : Apr 13 03:00:00 2023 GMT
        Subject: CN=80c9ddb682ffde97992ea10158a29cf578c276c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:9c:a3:47:a3:e2:72:33:2b:74:34:62:c9:
                    5e:b3:70:03:5f:34:61:d1:f2:a5:29:b7:fe:34:03:
                    3a:ee:a3:05:85:d9:02:6a:c4:b1:8c:46:b3:fc:fc:
                    f8:9f:07:41:51:ec:bc:31:1c:27:10:a9:5a:e6:4f:
                    e0:1c:72:45:e9:65:4c:f3:6c:11:c3:6d:19:e6:c2:
                    9f:e3:66:f4:1f:e3:02:9e:a4:c8:cc:4d:06:a0:78:
                    32:d1:93:91:6d:ba:49:33:61:d8:6c:c9:e2:a9:89:
                    31:70:60:9a:e8:d1:42:5d:51:16:8f:12:72:64:46:
                    32:76:e8:f8:60:ab:3d:95:ee:da:73:18:f7:b3:3a:
                    85:1d:71:8c:e9:f5:95:d8:1f:15:b7:10:c1:08:96:
                    19:14:62:af:27:56:35:65:ce:bd:21:e1:25:10:6f:
                    78:b8:e9:82:f0:34:bc:52:db:b6:e2:62:6b:17:14:
                    43:1a:d2:85:57:e3:62:ad:6c:ee:92:93:d1:b7:dc:
                    39:1b:c0:a4:23:fa:90:93:7f:56:e6:c7:39:5f:d4:
                    66:e5:cc:c0:bf:96:98:8e:1f:6f:be:f0:0a:44:02:
                    16:f0:12:f7:c7:cf:61:b4:d0:23:dc:4c:0a:a8:05:
                    5b:97:49:89:8a:ec:41:1b:ce:27:45:ca:f3:b3:96:
                    33:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9A:98:89:8D:34:B8:FE:72:B7:8B:A2:08:31:2F:E1:36:21:C2:82
            X509v3 Authority Key Identifier:
                keyid:BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/80c9ddb682ffde97992ea10158a29cf578c276c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.192.0-200.112.203.255
                  200.112.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:78:96:16:76:8e:20:cb:12:87:2b:db:18:7e:59:47:fe:24:
         91:93:0d:09:02:04:d2:99:fe:72:ed:f5:bb:a7:b9:48:fc:c1:
         b5:fd:9b:1e:c3:cf:33:40:34:dd:28:2f:9c:78:4f:61:30:92:
         13:14:a8:85:09:b8:3b:17:02:9b:90:12:fe:2b:86:18:a8:90:
         ac:ca:1d:1d:52:06:b6:a4:05:79:04:60:09:33:d4:85:29:5b:
         e4:a0:68:65:43:e1:bf:fe:bc:95:75:26:8a:14:69:dc:76:e3:
         b0:51:d3:76:83:b4:36:49:21:ee:79:5d:80:ee:48:0b:9b:77:
         82:36:a9:f9:03:cb:2c:45:e6:dc:95:fd:22:77:de:3f:e2:6d:
         cf:90:97:cd:b7:19:f7:3d:7e:0c:2e:91:f4:8d:01:db:95:52:
         db:76:24:f9:6a:dd:c8:23:d0:58:d1:ca:77:8b:e4:36:e7:d8:
         de:5f:13:ce:0f:d2:63:4a:db:26:d3:a8:55:a2:20:29:db:e5:
         ba:8b:ae:41:32:ed:1c:29:a8:91:5c:ee:f8:4c:18:67:07:41:
         c9:8f:cc:e8:ff:32:33:c7:3d:0b:30:fc:2c:72:18:e3:17:c1:
         23:e4:34:f8:1c:95:b5:26:27:74:7e:56:da:54:04:bc:3c:16:
         11:c5:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org