Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/3d4f97f5d060d9a56e09900eb929c20f917595bd.roa
File:                     3d4f97f5d060d9a56e09900eb929c20f917595bd.roa (raw, json)
Hash identifier:          csev25L5GA/FBxzGQBgtdb7xavs3yq4czSHOlmCG9dw=
Subject key identifier:   BD:F9:E1:AB:54:08:05:5A:4D:D1:88:B0:66:81:25:A2:D4:54:1A:1F
Certificate issuer:       /CN=b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f
Certificate serial:       0DE03B
Authority key identifier: 2C:1E:B6:2A:68:B7:1E:98:C5:3F:97:1A:91:9C:F5:FE:2F:B3:DB:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/3d4f97f5d060d9a56e09900eb929c20f917595bd.roa
Signing time:             Wed 24 Mar 2021 14:41:37 +0000
ROA not before:           Wed 24 Mar 2021 14:41:37 +0000
ROA not after:            Tue 24 Mar 2026 14:41:37 +0000
asID:                     27806
IP address blocks:        200.13.136.0/22 maxlen: 24
                          200.13.141.0/24 maxlen: 24
                          200.13.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909371 (0xde03b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f
        Validity
            Not Before: Mar 24 14:41:37 2021 GMT
            Not After : Mar 24 14:41:37 2026 GMT
        Subject: CN=3d4f97f5d060d9a56e09900eb929c20f917595bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:10:51:72:bd:fe:63:d8:f5:1c:63:f0:c9:5e:
                    7e:2e:50:d1:e7:d3:c2:e8:7f:f9:a5:83:09:12:dd:
                    f2:d3:ea:07:55:44:0b:21:6f:c3:44:1b:97:b0:03:
                    39:23:71:8b:97:7a:80:f4:eb:24:91:13:0b:76:a4:
                    03:b8:8c:b9:16:2e:d2:fa:79:99:70:17:b9:1f:1e:
                    9a:c9:09:37:40:ca:12:6e:a5:23:6f:e6:9a:b1:36:
                    9a:51:c1:e3:83:6e:59:2b:3e:e2:1e:ce:a8:e6:f4:
                    8d:21:7b:a2:ee:5f:32:b2:08:4d:1f:1c:c2:7b:3d:
                    de:47:87:07:95:4f:76:51:a5:2f:92:bd:73:5b:51:
                    eb:fd:25:60:5d:2f:77:34:b0:2d:ea:60:c8:97:ae:
                    e1:2e:ae:08:c6:95:b9:fe:96:11:5c:2c:44:e7:a7:
                    a3:20:f9:f2:00:31:f3:7e:f0:95:80:af:72:f9:a2:
                    49:5d:ae:31:7b:ee:73:d3:c1:be:6b:13:22:16:b8:
                    3c:7f:d7:dc:a7:54:10:24:05:e9:b0:d5:62:dd:5b:
                    df:09:c5:0c:57:c8:14:4d:6c:82:a8:2b:bc:3b:ea:
                    9d:4c:8b:75:ae:3f:74:97:f3:a3:57:22:23:b3:3e:
                    68:3d:fa:f3:d4:64:c3:9e:19:26:6b:f9:15:00:56:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F9:E1:AB:54:08:05:5A:4D:D1:88:B0:66:81:25:A2:D4:54:1A:1F
            X509v3 Authority Key Identifier:
                keyid:2C:1E:B6:2A:68:B7:1E:98:C5:3F:97:1A:91:9C:F5:FE:2F:B3:DB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/3d4f97f5d060d9a56e09900eb929c20f917595bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.136.0/22
                  200.13.141.0-200.13.143.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:d7:7f:2e:3b:06:66:ad:30:12:bb:11:c1:ed:46:c2:fd:88:
         be:2a:19:29:65:cf:a0:39:e2:b0:34:c4:ee:84:ed:f3:94:7b:
         c9:f1:fb:74:55:f6:a6:a7:38:75:36:a0:83:91:a2:18:62:b8:
         54:42:09:a8:f9:51:86:7d:e0:84:92:bb:0e:75:67:d4:7a:ed:
         18:6d:4a:c8:1b:dc:d6:2d:6c:1e:b4:58:55:c6:d3:25:26:7f:
         eb:58:a7:7e:a6:6d:eb:a9:1b:5a:f9:51:13:fa:9e:f1:73:c2:
         6e:05:38:c8:28:27:c1:a3:1c:8e:44:78:d4:ce:e1:56:43:6b:
         c1:32:be:b6:59:7e:93:33:79:75:30:1a:63:b9:de:e5:7a:d9:
         fe:a7:bc:2c:9f:29:f4:47:51:c9:f1:08:7c:f7:d6:3e:69:6d:
         ad:58:31:9f:5c:a4:05:fd:b9:03:05:4b:71:c4:5b:0a:f2:b9:
         bd:c3:48:5b:ca:5f:20:81:f9:c8:94:62:66:8c:37:5a:61:e3:
         bb:fe:84:59:c7:68:6c:62:22:1e:9f:e7:7a:24:39:ff:85:6d:
         65:a2:15:1d:35:6c:74:c2:50:5c:91:7a:5e:a1:ea:c8:5d:cf:
         6e:27:52:31:0d:5a:91:29:b2:f4:12:6b:ea:2e:22:20:18:88:
         ec:d6:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org