Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/e81f4a7a850167168704fb76fa9a597c73bc81b5.roa
File:                     e81f4a7a850167168704fb76fa9a597c73bc81b5.roa (raw, json)
Hash identifier:          oep2Ot3i860ETQ3mhOMyj/qiwU//92FjKXHDseEZbH0=
Subject key identifier:   10:68:F3:E0:47:0F:E1:14:BC:38:D8:B3:96:A5:31:55:82:45:A8:38
Certificate issuer:       /CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Certificate serial:       110E23
Authority key identifier: 81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/e81f4a7a850167168704fb76fa9a597c73bc81b5.roa
Signing time:             Thu 22 Jul 2021 00:54:26 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267781
IP address blocks:        200.229.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117731 (0x110e23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=e81f4a7a850167168704fb76fa9a597c73bc81b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:56:f6:49:e3:32:ad:a1:11:dc:57:c2:00:
                    8f:f1:47:6b:78:e1:e0:f7:59:d2:e3:89:4e:44:bc:
                    c9:c7:6f:05:8a:0a:d9:f1:02:1a:ae:bf:c5:0c:9f:
                    4b:e8:6e:53:0b:dd:53:c9:29:ac:80:c7:2e:f4:0a:
                    f0:10:a4:8f:a8:37:59:fd:c6:87:8f:06:c9:0d:28:
                    4a:14:0e:19:cb:e9:29:32:0c:b5:db:8b:45:67:0f:
                    aa:73:1b:9f:9f:f4:cc:88:22:55:e0:68:6a:be:9a:
                    c2:c6:c3:03:02:e8:3b:8f:25:e8:42:08:12:1b:25:
                    35:59:64:21:5b:b2:bb:20:f9:df:cb:5b:3f:61:bf:
                    9f:3c:d3:2c:3d:1d:09:18:db:85:84:11:2a:7b:ce:
                    78:9f:af:db:47:81:16:b5:56:b3:b6:f7:5e:d4:9a:
                    9b:cb:80:3d:45:33:1e:28:84:24:b3:62:ec:67:6c:
                    c2:14:c8:5e:9a:ad:b0:1c:4f:b8:6f:c5:19:d3:91:
                    7f:f2:36:c7:c3:f9:34:e2:84:3a:f8:f3:dd:83:75:
                    75:38:ae:11:63:e5:fe:dd:13:ad:a0:06:b8:61:b4:
                    f7:63:e6:ed:02:b8:5b:32:c5:92:df:e4:71:af:a9:
                    be:02:bd:82:57:3d:bf:dc:53:d7:82:11:d7:a1:6e:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:F3:E0:47:0F:E1:14:BC:38:D8:B3:96:A5:31:55:82:45:A8:38
            X509v3 Authority Key Identifier:
                keyid:81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/e81f4a7a850167168704fb76fa9a597c73bc81b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:fe:d9:c5:3a:72:fc:5e:0c:49:44:1a:32:48:cd:95:b8:5c:
         90:42:6a:fe:66:9e:af:0d:86:02:be:8c:da:9c:ff:e0:e6:bd:
         54:73:0c:22:c4:d5:72:20:d3:6d:d3:09:95:b6:1b:b0:84:5c:
         df:e0:39:cd:97:18:ba:9d:e2:1a:96:2a:97:55:0b:30:3b:33:
         5b:9c:3c:3d:aa:2d:74:20:1a:d0:88:2f:ea:9e:03:72:bf:49:
         da:8c:ed:18:21:eb:07:ee:63:24:be:ee:ef:f1:21:3b:31:e8:
         38:36:85:ac:14:c8:39:8f:58:75:32:df:d7:f5:ea:b0:08:46:
         a8:1e:66:43:f7:98:39:3b:f0:a5:f6:b2:12:f9:32:09:eb:14:
         67:46:9e:c2:99:d3:0a:c9:f9:f8:df:59:a9:3a:ea:41:30:5d:
         68:08:64:94:1b:0f:15:d0:dd:52:ee:a8:3f:d6:e0:8c:6d:c2:
         8c:37:9c:f8:a8:ca:71:06:9f:12:aa:46:08:b0:79:cd:a3:46:
         20:82:89:38:9d:e7:75:26:a1:f8:64:69:f4:00:90:0e:94:40:
         c4:1b:8b:79:29:97:b3:1c:b6:f9:9e:15:83:79:25:c8:f5:9b:
         1e:53:5c:01:e8:7e:07:37:bf:3b:fd:13:83:5a:45:08:54:7c:
         32:a8:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org