Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8d667cf84d5506b9a868573e36c2fcd1b916b923.roa
File:                     8d667cf84d5506b9a868573e36c2fcd1b916b923.roa (raw, json)
Hash identifier:          CZK+2xPcKBoK+e8onmfIwXJbeUSevAlSHWf1eBiEmW4=
Subject key identifier:   20:18:80:08:51:69:50:3C:11:A2:BD:69:6E:A2:C1:0D:B7:84:9D:AE
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       0F0295
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8d667cf84d5506b9a868573e36c2fcd1b916b923.roa
Signing time:             Fri 07 May 2021 21:52:35 +0000
ROA not before:           Fri 07 May 2021 03:00:00 +0000
ROA not after:            Thu 07 May 2026 03:00:00 +0000
asID:                     14080
IP address blocks:        200.118.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983701 (0xf0295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: May  7 03:00:00 2021 GMT
            Not After : May  7 03:00:00 2026 GMT
        Subject: CN=8d667cf84d5506b9a868573e36c2fcd1b916b923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:2b:f3:14:3e:18:9b:86:13:70:30:8f:0b:
                    ad:c6:75:7d:f0:01:5c:7f:fa:4a:94:d2:9f:79:5d:
                    9b:b3:93:10:03:f2:d3:42:33:f7:50:02:d6:d5:d4:
                    4f:a6:d6:c3:9b:47:85:99:fc:19:b8:f1:d1:35:59:
                    74:94:b7:33:a1:2d:a0:2e:2c:c5:e9:7f:f5:de:e0:
                    a4:de:2e:9d:ac:c5:54:bc:5b:36:7d:cc:57:21:1e:
                    04:45:a8:9a:d7:91:73:26:27:9c:32:52:ae:17:f3:
                    1a:50:d4:4a:7d:a4:3c:6a:0b:10:98:95:9e:c2:c7:
                    72:77:83:9b:8a:79:64:de:8a:ef:12:fa:5e:72:46:
                    8c:b2:7b:da:84:98:74:50:95:21:2b:73:5b:8f:2a:
                    7a:e3:c1:b2:c7:e1:09:96:6d:cf:a0:f1:91:d3:d8:
                    1e:50:73:cb:3f:28:b1:11:4a:0a:8f:0b:58:1e:4a:
                    de:0d:78:53:4a:0c:c1:9a:10:e3:87:7d:0f:d0:55:
                    b0:69:45:dd:7d:ca:a2:44:02:91:fe:98:a4:e9:67:
                    b0:8a:94:f8:c5:1c:74:68:1f:f0:4b:bd:f6:fc:fe:
                    13:a1:9a:ae:71:81:40:b1:44:48:03:4c:e9:ba:47:
                    3a:0c:df:b9:3c:3f:c4:04:42:4f:24:ee:2f:63:a0:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:18:80:08:51:69:50:3C:11:A2:BD:69:6E:A2:C1:0D:B7:84:9D:AE
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8d667cf84d5506b9a868573e36c2fcd1b916b923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.118.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:a4:8b:30:5f:8f:1e:5f:2b:2b:a4:f1:65:8a:ab:d4:69:c6:
         2e:db:d2:dc:c9:a2:bd:f9:07:ac:74:7b:7c:f9:a0:d1:10:45:
         9b:af:e6:15:e6:d4:f8:94:60:b8:fb:52:72:cb:3d:05:e4:8f:
         0c:d0:18:31:91:6a:4f:2f:eb:66:3e:7a:0a:f4:3e:73:4c:a4:
         a8:59:99:3c:9b:fa:9b:ba:ec:ab:00:85:16:62:00:1c:83:42:
         92:a7:05:83:19:d5:bf:68:8e:c7:d5:73:c4:bf:3d:4e:1f:2c:
         72:4a:7c:b1:35:35:de:cc:14:e9:b3:d2:e5:fd:fb:84:64:cd:
         5b:72:e8:c7:e6:5d:ea:cd:31:76:62:04:40:5d:e1:c6:a8:1c:
         4c:ba:60:71:ec:ee:fa:ad:d3:97:e4:cf:ce:ad:77:25:ef:62:
         1b:72:c8:6a:f2:fa:f3:f0:60:09:58:c1:39:75:9e:c0:73:5e:
         f0:82:ec:73:29:49:40:e7:b1:05:a2:64:30:6b:cc:9a:67:19:
         db:74:d7:96:69:f0:c0:5a:a2:9f:03:86:4b:52:e4:e6:84:91:
         c9:20:6a:57:8f:b5:a9:e0:3c:a6:f2:f4:04:c4:73:51:da:f3:
         69:56:b2:da:b3:08:ec:c3:7c:b5:e9:a4:56:26:21:75:5c:f3:
         a5:43:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org