Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fd127e2216ec8d599183e5bcf5dc985a2506a06d.roa
File:                     fd127e2216ec8d599183e5bcf5dc985a2506a06d.roa (raw, json)
Hash identifier:          BqhSp/OM4TXBaHi15ktc7dUF3ccxuILHosjKxTiuWH8=
Subject key identifier:   0E:2D:65:93:0F:46:3C:75:62:18:D7:0E:F1:1A:39:E0:F0:62:B7:AB
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       0DD719
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fd127e2216ec8d599183e5bcf5dc985a2506a06d.roa
Signing time:             Wed 24 Mar 2021 14:34:36 +0000
ROA not before:           Wed 24 Mar 2021 14:34:35 +0000
ROA not after:            Tue 24 Mar 2026 14:34:35 +0000
asID:                     52269
IP address blocks:        190.143.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907033 (0xdd719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 24 14:34:35 2021 GMT
            Not After : Mar 24 14:34:35 2026 GMT
        Subject: CN=fd127e2216ec8d599183e5bcf5dc985a2506a06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:80:9d:2e:7d:25:c9:b8:ea:b4:50:0b:a2:e7:
                    14:6a:2f:2c:8a:a4:94:b6:e3:63:0d:a7:89:00:22:
                    e4:5a:08:8f:16:8a:d6:9a:c0:dc:ef:bb:e2:36:5a:
                    20:d8:ec:b3:d2:f4:63:a4:fa:c5:37:11:0a:4a:4d:
                    80:08:27:79:a1:68:d7:64:c0:c3:7e:17:8d:fd:62:
                    67:71:4a:93:ce:85:9d:a3:83:bd:67:05:e2:8c:82:
                    68:f1:9b:dd:19:18:bd:62:cb:15:1c:78:9c:7f:22:
                    0c:cc:50:0c:3c:4a:88:a1:81:d5:e3:5c:2f:03:9f:
                    8d:7c:01:30:62:5f:c3:d0:0b:f4:46:63:55:ed:72:
                    3b:19:60:ee:68:93:8b:6a:10:53:ff:5f:9f:84:41:
                    55:ec:3c:1f:13:0a:fe:08:70:a1:36:3c:b6:fe:13:
                    71:13:61:52:11:0d:da:3e:59:29:74:de:b1:2b:b6:
                    5c:e2:1e:1d:e0:b9:37:25:11:2f:2b:48:f4:43:17:
                    7b:a6:9b:ca:89:9e:7a:5c:11:1f:d9:42:ed:5f:b7:
                    9a:b8:b2:90:6a:69:e0:5d:23:20:73:76:a5:d2:5a:
                    c7:94:68:ff:48:79:31:77:61:e8:40:84:98:a4:4f:
                    5a:25:9a:4d:ac:12:89:40:cd:5a:05:3f:d4:7f:45:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:65:93:0F:46:3C:75:62:18:D7:0E:F1:1A:39:E0:F0:62:B7:AB
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fd127e2216ec8d599183e5bcf5dc985a2506a06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:3c:64:79:a7:6c:f7:c9:b2:a8:d8:49:e4:7e:3e:41:85:
         84:5c:86:b4:7f:d4:a2:d2:7b:e4:fe:8b:48:13:dd:74:f8:9f:
         86:4f:bd:02:6f:e6:1f:c2:68:24:f3:82:07:55:64:83:94:b2:
         e7:8c:27:9e:06:67:9c:bd:9e:a5:31:97:56:f7:03:5e:d5:7b:
         a4:77:87:af:c8:55:71:85:8a:de:17:58:30:9f:82:10:d4:74:
         4e:77:98:6c:b2:cc:5d:28:ff:b0:8b:7b:d4:31:dd:3a:43:43:
         6f:81:ad:80:e4:f5:74:58:a7:b3:80:92:02:03:6f:9e:89:dd:
         1c:9a:15:ca:f3:94:e7:f1:87:fb:86:7c:53:4a:4a:ff:f0:2e:
         81:7c:c0:9e:96:71:6f:15:9c:b2:8e:4a:49:d5:e8:4d:34:7d:
         c6:bb:b7:ec:2c:07:65:fc:63:90:5f:61:d9:6e:ef:56:23:8b:
         25:20:69:10:5d:fe:28:c2:2a:e5:61:d6:f0:6e:ce:f9:66:8d:
         00:12:63:f9:cc:32:bc:3d:ac:2f:98:5f:48:cf:44:22:8c:24:
         34:98:72:31:4d:a9:9f:c9:fe:c0:86:30:a9:70:aa:76:b1:bb:
         9f:61:0e:33:e2:19:0c:19:93:5e:82:18:b7:67:2f:c7:f8:f4:
         13:8e:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org