Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/315400bc6d773fc0691ffd0cf3cff051f1b7b6d1.roa
File:                     315400bc6d773fc0691ffd0cf3cff051f1b7b6d1.roa (raw, json)
Hash identifier:          RLoWRexdK7nf405tHpOSrvtAx/zFkr0T0oXhFTkiRjU=
Subject key identifier:   8D:0C:18:4A:11:65:23:A4:5F:CC:CD:CB:CD:70:E9:B7:B4:68:8C:34
Certificate issuer:       /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial:       0D7773
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/315400bc6d773fc0691ffd0cf3cff051f1b7b6d1.roa
Signing time:             Thu 08 Apr 2021 12:29:18 +0000
ROA not before:           Thu 08 Apr 2021 12:29:17 +0000
ROA not after:            Wed 08 Apr 2026 12:29:17 +0000
asID:                     21826
IP address blocks:        181.208.0.0/17 maxlen: 24
                          181.208.128.0/17 maxlen: 24
                          186.14.0.0/16 maxlen: 24
                          186.188.0.0/17 maxlen: 24
                          190.142.0.0/16 maxlen: 24
                          200.75.96.0/19 maxlen: 24
                          200.8.0.0/16 maxlen: 24
                          200.82.128.0/19 maxlen: 24
                          200.82.160.0/20 maxlen: 24
                          200.82.176.0/20 maxlen: 24
                          200.82.192.0/20 maxlen: 24
                          200.82.208.0/20 maxlen: 24
                          200.82.224.0/19 maxlen: 24
                          2803:8100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882547 (0xd7773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
        Validity
            Not Before: Apr  8 12:29:17 2021 GMT
            Not After : Apr  8 12:29:17 2026 GMT
        Subject: CN=315400bc6d773fc0691ffd0cf3cff051f1b7b6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:c0:ec:28:74:3c:33:55:8b:21:a1:7c:80:
                    1d:4f:48:b7:5f:db:48:77:8c:b1:db:8b:26:5f:9e:
                    20:c3:47:20:09:44:e1:2a:b0:42:5d:69:76:0b:24:
                    34:37:27:e3:08:3b:0c:7f:b3:2a:9c:80:f8:e6:d1:
                    53:ad:23:a8:4c:bc:f3:c4:07:f7:f7:36:cb:2e:99:
                    3a:16:3e:53:b5:b0:9c:45:54:93:9b:34:f2:51:f1:
                    84:5b:e4:d1:8f:99:e8:45:f2:d7:fe:45:53:cb:bc:
                    50:fe:58:48:a5:7d:45:5f:66:3c:e8:b5:55:bb:ad:
                    a7:54:05:79:bc:d8:c4:69:21:f5:31:98:78:4d:f5:
                    e4:9a:bd:23:12:44:20:de:e2:d9:37:56:bf:38:2a:
                    35:96:44:c0:40:c9:a9:7e:62:ba:78:48:fe:bc:66:
                    38:35:d9:78:4d:c2:c4:14:a5:74:91:14:73:3b:77:
                    2c:52:71:c3:1c:4b:f3:e9:90:90:7e:57:99:b5:b9:
                    b7:af:ea:61:ad:37:83:a2:e1:b1:41:95:c3:64:24:
                    20:d8:6f:4e:ef:85:a3:0c:80:d1:41:a0:60:8b:3f:
                    d2:9a:75:08:d2:7d:56:66:1d:d3:fc:86:79:b1:d1:
                    ec:9e:2f:98:bf:37:71:8e:ec:52:8f:c3:00:06:71:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0C:18:4A:11:65:23:A4:5F:CC:CD:CB:CD:70:E9:B7:B4:68:8C:34
            X509v3 Authority Key Identifier:
                keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/315400bc6d773fc0691ffd0cf3cff051f1b7b6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.208.0.0/16
                  186.14.0.0/16
                  186.188.0.0/17
                  190.142.0.0/16
                  200.8.0.0/16
                  200.75.96.0/19
                  200.82.128.0/17
                IPv6:
                  2803:8100::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:ab:a0:1f:42:ce:83:1a:cd:66:47:19:87:b0:10:7a:cd:e9:
         8a:3d:7e:f8:d9:4e:a1:ab:9c:d6:de:fc:8e:16:8c:7f:a8:97:
         c7:0d:e7:0d:18:05:b2:df:d2:13:0f:d8:90:49:e2:52:e0:45:
         a0:a8:6c:2e:18:ba:17:71:fe:90:a0:e5:2c:a4:76:59:84:8e:
         4d:cd:b5:43:41:22:5c:2d:45:a0:4c:c0:17:f3:38:a8:d6:71:
         30:23:1c:4a:13:40:c2:c5:d8:2e:bc:62:61:6e:db:33:0b:b9:
         af:97:2a:2c:d0:7a:d1:69:e3:c0:2b:0e:16:ab:b9:6a:a0:d9:
         c6:c8:70:6f:84:51:61:bb:1c:83:9e:5a:7e:f8:90:06:92:43:
         29:7c:32:d4:f8:dc:3b:ca:34:d7:a1:f1:42:b4:ca:05:1e:62:
         10:b2:0f:c0:9a:b0:9f:c1:c7:32:d1:df:12:93:4f:a0:98:64:
         6c:39:fb:5e:8a:7c:74:fa:49:94:2e:fe:03:c4:4e:0e:80:64:
         6e:f5:17:72:27:17:24:a5:bf:f8:77:42:d1:ee:61:60:02:80:
         f9:95:d9:ba:bb:db:ba:94:ba:ad:d1:f5:7f:e7:26:76:ab:75:
         9b:f7:e2:e0:23:93:5f:65:db:1e:2b:18:09:88:db:72:74:73:
         25:ba:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org