Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06153e56-b39a-4709-b94a-b54e217f4c1d/f57d1402e8ae6ca97c0cfc1ca872df270f76dcfa.roa
File:                     f57d1402e8ae6ca97c0cfc1ca872df270f76dcfa.roa (raw, json)
Hash identifier:          G2mKZ+srL03HC4ArKVzVbuKWI9wJ58T7QR7tF0OVLV0=
Subject key identifier:   7F:CC:BE:8E:E6:CB:7E:E9:E0:A7:F2:74:38:BB:96:A4:35:3B:3F:A4
Certificate issuer:       /CN=e943551257ff06a2975ffdc87d612247337f3774
Certificate serial:       0736B0
Authority key identifier: A2:26:D2:B1:8E:E6:4A:BB:48:86:C2:1C:18:01:1A:68:FC:DB:31:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e943551257ff06a2975ffdc87d612247337f3774.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06153e56-b39a-4709-b94a-b54e217f4c1d/f57d1402e8ae6ca97c0cfc1ca872df270f76dcfa.roa
Signing time:             Wed 24 Mar 2021 14:30:24 +0000
ROA not before:           Wed 24 Mar 2021 14:30:24 +0000
ROA not after:            Tue 24 Mar 2026 14:30:24 +0000
asID:                     27779
IP address blocks:        200.0.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472752 (0x736b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e943551257ff06a2975ffdc87d612247337f3774
        Validity
            Not Before: Mar 24 14:30:24 2021 GMT
            Not After : Mar 24 14:30:24 2026 GMT
        Subject: CN=f57d1402e8ae6ca97c0cfc1ca872df270f76dcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:36:03:c6:ba:09:22:ca:e5:26:bc:dd:df:54:
                    ed:60:95:e0:e4:84:ee:21:f0:fc:d7:16:cd:ea:04:
                    a9:bf:11:44:fe:72:84:e4:3c:83:f3:97:46:78:02:
                    42:e2:59:1c:8b:7e:42:c1:05:1e:45:ec:c1:39:4e:
                    c1:dc:9b:b8:16:d6:a4:97:4e:37:86:bf:25:3e:f5:
                    65:07:2e:4e:69:f2:2e:00:f5:f9:87:a4:21:1b:55:
                    09:91:d4:df:c8:b4:23:aa:c9:e0:2b:36:d3:93:e6:
                    2a:c3:80:56:4b:8a:d2:82:e9:05:05:a3:c1:26:4f:
                    c4:6e:90:e1:e2:80:19:70:93:17:93:8c:0d:d1:12:
                    d7:d7:28:34:44:29:02:1e:41:de:1a:64:e3:bf:3a:
                    f6:3e:bf:94:2a:4e:89:13:62:cf:c1:e2:7e:53:13:
                    3f:13:9a:c5:ca:dd:07:a3:e9:71:70:d0:e4:92:d3:
                    dc:69:4c:29:96:a8:81:fa:ef:34:d1:12:b4:92:56:
                    9f:3a:aa:ea:6c:33:01:8e:fb:52:6d:f6:eb:db:b7:
                    5e:c2:27:de:6e:6b:25:eb:27:a8:56:0d:70:16:80:
                    c8:7b:b2:31:04:8b:74:df:0d:89:1c:c2:34:5f:d2:
                    35:4b:7f:85:d0:4d:e4:b2:39:78:2c:a7:6b:11:21:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:BE:8E:E6:CB:7E:E9:E0:A7:F2:74:38:BB:96:A4:35:3B:3F:A4
            X509v3 Authority Key Identifier:
                keyid:A2:26:D2:B1:8E:E6:4A:BB:48:86:C2:1C:18:01:1A:68:FC:DB:31:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e943551257ff06a2975ffdc87d612247337f3774.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06153e56-b39a-4709-b94a-b54e217f4c1d/f57d1402e8ae6ca97c0cfc1ca872df270f76dcfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06153e56-b39a-4709-b94a-b54e217f4c1d/e943551257ff06a2975ffdc87d612247337f3774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b2:46:b2:59:40:43:2a:b2:f8:57:eb:f6:1f:3e:0b:0b:ec:
         a0:70:46:a5:e4:2f:12:ee:10:de:6d:b6:2c:05:e9:1a:a2:e9:
         59:1c:63:4d:83:0b:5e:29:d5:07:82:dd:f6:f8:a7:59:3c:55:
         71:b0:74:8a:e4:c0:78:18:4c:f6:43:1d:2d:1e:10:e9:d6:68:
         d0:45:be:4b:b2:02:c1:13:8d:cf:30:95:16:e6:d8:2f:10:11:
         d8:bf:09:4c:82:f1:ff:2a:64:ff:df:90:16:be:42:94:0b:0d:
         70:67:69:77:c0:5d:75:6e:ac:12:f3:13:d6:fe:b6:e2:5a:84:
         fc:a0:e1:a6:d8:ee:66:25:3b:a9:a6:4e:f7:77:da:ed:f1:11:
         05:08:70:c0:d2:e1:09:24:b9:19:c8:87:84:f3:3d:0c:f1:a9:
         b6:5b:e4:36:cd:8e:d0:ea:60:2f:d2:33:b6:91:19:f7:7b:9a:
         09:70:42:f4:bf:ef:46:9c:05:20:71:76:fe:34:8f:07:95:54:
         ad:67:ea:19:7c:c8:d6:e2:ae:23:8f:e5:ab:ec:3a:22:9a:f2:
         cc:64:61:80:bf:f7:c4:9f:30:03:37:31:40:95:bd:49:ee:40:
         d6:a7:6c:8e:76:54:3d:c0:f2:c7:3c:07:3c:59:74:36:3c:cf:
         05:8e:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org