Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/b27642317de3663a93c781c4a371649590988a53.roa
File:                     b27642317de3663a93c781c4a371649590988a53.roa (raw, json)
Hash identifier:          wb6u9pwluKYxC25X1eCBl3EcqY/JsPqX9fV5Z25odLo=
Subject key identifier:   74:BE:6A:9E:33:4B:F7:3D:A2:15:18:BC:3B:EE:48:FD:E9:7D:32:D8
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       0DF096
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/b27642317de3663a93c781c4a371649590988a53.roa
Signing time:             Wed 24 Mar 2021 14:28:59 +0000
ROA not before:           Wed 24 Mar 2021 14:28:59 +0000
ROA not after:            Tue 24 Mar 2026 14:28:59 +0000
asID:                     28075
IP address blocks:        131.72.0.0/24 maxlen: 24
                          181.118.79.0/24 maxlen: 24
                          181.118.112.0/24 maxlen: 24
                          181.118.113.0/24 maxlen: 24
                          181.118.114.0/24 maxlen: 24
                          201.190.242.0/23 maxlen: 23
                          201.190.249.0/24 maxlen: 24
                          201.190.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913558 (0xdf096)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Mar 24 14:28:59 2021 GMT
            Not After : Mar 24 14:28:59 2026 GMT
        Subject: CN=b27642317de3663a93c781c4a371649590988a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:6d:c6:2a:6a:de:09:1a:bc:8a:0f:2d:59:
                    f9:4e:43:53:98:de:f7:6e:e5:b3:1b:e4:36:76:cf:
                    e1:1f:75:42:62:78:ec:3a:97:5c:ba:38:ee:f3:03:
                    67:47:d3:06:0a:66:84:a7:00:33:b4:26:cc:cb:77:
                    2a:b7:a2:40:9b:2e:20:36:71:62:cf:45:7c:48:34:
                    94:a9:a8:b1:b2:cb:ba:79:3c:09:34:8c:69:4a:d2:
                    be:ea:03:84:ae:a2:24:9a:08:a8:86:ae:c6:6c:0c:
                    3d:e5:29:b0:e8:84:3c:59:73:4d:62:17:12:89:58:
                    71:a5:07:da:e2:8c:2e:85:27:62:ec:83:a7:8c:6b:
                    72:1c:8d:24:9d:3a:22:12:6c:b9:ae:89:74:9c:1a:
                    b5:21:05:7b:07:59:a8:da:63:13:d8:d5:e7:85:38:
                    10:84:c2:df:33:f5:c4:73:db:a3:37:f1:1d:64:d1:
                    c9:7e:d2:ab:79:f6:94:8b:57:a7:3b:ae:95:fb:b6:
                    98:05:23:d8:d0:d3:47:0d:c2:04:06:13:7d:de:2c:
                    ac:42:b1:6b:96:4a:89:d7:f4:d7:9e:bb:f6:be:ae:
                    82:76:9c:36:68:26:92:78:d5:c2:14:49:dd:da:69:
                    df:f2:4c:68:fb:f0:b1:70:8e:cc:37:46:d6:54:ef:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BE:6A:9E:33:4B:F7:3D:A2:15:18:BC:3B:EE:48:FD:E9:7D:32:D8
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/b27642317de3663a93c781c4a371649590988a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.0.0/24
                  181.118.79.0/24
                  181.118.112.0-181.118.114.255
                  201.190.242.0/23
                  201.190.249.0-201.190.250.255

    Signature Algorithm: sha256WithRSAEncryption
         49:39:16:b9:8c:2e:8b:6d:d8:b8:63:2a:c9:9b:14:4f:bb:16:
         69:7a:35:e6:f7:36:2e:7d:39:da:90:d6:98:8d:ef:7c:d6:21:
         8b:79:4a:9c:ee:e1:4b:f4:79:eb:04:b5:5c:d0:93:27:39:ec:
         dd:66:9d:25:99:e3:d3:66:8c:fa:38:c8:57:9a:08:4a:f3:7e:
         92:2e:95:6d:a9:b4:63:b2:05:6e:dd:f9:34:02:52:16:2f:19:
         99:c5:71:57:25:43:90:9b:94:ea:89:bd:f2:7c:45:c2:b3:40:
         fe:e2:bc:40:33:8a:db:18:38:10:60:4d:00:e0:13:23:8c:18:
         46:96:a1:e2:de:46:34:78:32:22:17:0a:76:94:9a:51:8b:8a:
         17:ad:a6:34:ab:d1:c2:fb:09:ee:38:02:07:41:9b:a5:a5:3e:
         3a:1d:88:46:92:9e:39:98:83:b6:05:a2:30:71:70:98:03:32:
         aa:2c:23:76:95:29:59:7a:fe:9d:ef:95:78:47:af:0a:f5:05:
         8a:be:52:11:40:f6:07:aa:71:67:9c:2c:cb:3e:01:ec:81:1c:
         cd:80:fb:b1:cb:41:0c:65:6f:4b:ee:84:08:cc:83:12:05:f8:
         f4:c2:60:cf:e2:49:48:f8:b4:df:fa:47:bf:50:cc:c7:49:26:
         9a:83:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org