Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/da0d928b00635cd0eac991f9fb681ed61937ad7b.roa
File:                     da0d928b00635cd0eac991f9fb681ed61937ad7b.roa (raw, json)
Hash identifier:          Xlk0w//Wi1rCr29IeD5ynBaZziuBcZMF2x3EMW4fVvg=
Subject key identifier:   7A:B4:B6:A3:9C:3E:22:08:F6:58:23:D9:47:D7:16:21:98:15:22:88
Certificate issuer:       /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial:       0D72C9
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/da0d928b00635cd0eac991f9fb681ed61937ad7b.roa
Signing time:             Thu 08 Apr 2021 12:29:18 +0000
ROA not before:           Thu 08 Apr 2021 12:29:17 +0000
ROA not after:            Wed 08 Apr 2026 12:29:17 +0000
asID:                     21826
IP address blocks:        181.208.0.0/17 maxlen: 24
                          181.208.128.0/17 maxlen: 24
                          186.14.0.0/16 maxlen: 24
                          186.188.0.0/17 maxlen: 24
                          190.142.0.0/16 maxlen: 24
                          200.75.96.0/19 maxlen: 24
                          200.8.0.0/16 maxlen: 24
                          200.82.128.0/19 maxlen: 24
                          200.82.160.0/20 maxlen: 24
                          200.82.176.0/20 maxlen: 24
                          200.82.192.0/20 maxlen: 24
                          200.82.208.0/20 maxlen: 24
                          200.82.224.0/19 maxlen: 24
                          2803:8100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881353 (0xd72c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
        Validity
            Not Before: Apr  8 12:29:17 2021 GMT
            Not After : Apr  8 12:29:17 2026 GMT
        Subject: CN=da0d928b00635cd0eac991f9fb681ed61937ad7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:f1:03:86:f5:c7:f6:f5:54:10:6f:f6:6a:
                    f5:e0:de:dc:63:21:c7:57:7e:28:83:74:6b:dc:94:
                    35:76:cc:9d:12:c9:69:7b:c3:6d:58:44:41:5d:38:
                    38:2d:2f:71:24:61:c4:e3:95:2a:f3:1d:91:85:bf:
                    f1:cb:f5:11:e6:e4:b7:ae:96:fc:91:d8:0f:88:9f:
                    ac:e0:74:8d:3f:4e:13:3f:d8:6a:ca:7b:2d:a5:d7:
                    e3:f3:82:5a:87:31:03:a7:61:c6:b2:ca:20:ec:18:
                    57:b1:f3:c9:41:a1:01:f9:db:6f:58:5b:0c:3b:66:
                    64:6f:9b:3c:9d:e0:6a:00:c4:b1:b5:c3:4a:d5:d5:
                    28:de:71:64:c5:27:0a:0d:e7:3e:fa:a5:45:d1:8b:
                    f2:a5:da:be:d9:8a:07:25:d8:22:20:7b:a5:fd:6d:
                    c9:e5:0a:a0:b2:01:d8:14:b1:45:c4:6c:2d:78:0f:
                    eb:cc:8a:17:c7:93:cf:fe:28:4e:27:d3:7c:9e:27:
                    dc:1c:5b:d1:59:8c:f5:5c:7b:03:7b:eb:44:bc:88:
                    14:45:a8:a2:8e:6e:57:6f:2d:06:c2:01:9e:66:1a:
                    a7:98:23:d3:ef:ab:d5:8d:69:fc:ca:9c:7f:ba:3c:
                    2b:a7:5e:fc:7b:75:cf:05:8f:b1:23:67:06:9f:aa:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:B6:A3:9C:3E:22:08:F6:58:23:D9:47:D7:16:21:98:15:22:88
            X509v3 Authority Key Identifier:
                keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/da0d928b00635cd0eac991f9fb681ed61937ad7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.208.0.0/16
                  186.14.0.0/16
                  186.188.0.0/17
                  190.142.0.0/16
                  200.8.0.0/16
                  200.75.96.0/19
                  200.82.128.0/17
                IPv6:
                  2803:8100::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:c5:bd:fc:13:ff:9f:84:c8:b9:a7:af:02:f4:69:71:b1:
         4f:44:51:f2:ed:be:17:de:51:68:a7:32:94:d0:19:9e:35:a0:
         3d:40:34:62:e8:f8:4c:fb:47:27:49:27:cb:c7:e8:14:aa:bd:
         a4:db:3b:9a:e8:f9:74:bd:13:d2:f5:a4:5e:b5:09:1f:72:29:
         0f:22:1b:fd:1a:58:3d:c4:2d:7a:04:f2:03:1f:f7:51:d3:5f:
         f5:75:6c:33:02:8d:ce:b1:27:69:23:e4:bd:56:69:57:fa:36:
         73:40:07:eb:d6:d6:3a:5e:c8:1e:f0:75:9c:e5:77:d7:a5:fb:
         38:63:7c:7c:f7:e9:c6:72:91:b9:ce:e7:16:42:13:86:11:60:
         90:7d:54:51:45:5a:2b:24:18:81:d7:48:ea:0c:f9:80:3b:ff:
         62:7e:ef:eb:40:12:a0:9c:1a:0c:a4:ab:98:54:2c:4b:22:4b:
         a1:0a:2b:bb:23:bb:87:6e:e9:e5:82:32:b5:7f:b1:d1:3c:67:
         4f:3c:cb:89:ef:9c:2b:6a:74:b2:6b:50:ce:66:c9:95:1f:88:
         20:6f:29:bb:78:29:cd:cd:a9:bf:53:64:25:3d:ed:8b:ab:3a:
         e9:d7:53:ae:d6:34:f4:15:07:6f:80:40:47:ac:a4:52:69:d8:
         f2:5f:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org