Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/2483bb041d45d98ee6ec950822b4e6ad7b9fd353.roa
File:                     2483bb041d45d98ee6ec950822b4e6ad7b9fd353.roa (raw, json)
Hash identifier:          5ZMM+9zxyfxvpnPOYxbcsJeFvPdqTycxIL8EnS4Luh0=
Subject key identifier:   9D:4F:51:4D:80:3C:6E:8A:16:9E:5D:53:3A:0A:D0:C7:55:78:AF:88
Certificate issuer:       /CN=c402a9a6a7d206670319a5692be8577f996a3072
Certificate serial:       0CDA47
Authority key identifier: 50:61:90:77:BC:A3:B6:CE:64:76:F9:52:7C:E8:AB:C4:1B:C1:63:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c402a9a6a7d206670319a5692be8577f996a3072.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/2483bb041d45d98ee6ec950822b4e6ad7b9fd353.roa
Signing time:             Wed 24 Mar 2021 14:33:20 +0000
ROA not before:           Wed 24 Mar 2021 14:33:20 +0000
ROA not after:            Tue 24 Mar 2026 14:33:20 +0000
asID:                     267906
IP address blocks:        131.0.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842311 (0xcda47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c402a9a6a7d206670319a5692be8577f996a3072
        Validity
            Not Before: Mar 24 14:33:20 2021 GMT
            Not After : Mar 24 14:33:20 2026 GMT
        Subject: CN=2483bb041d45d98ee6ec950822b4e6ad7b9fd353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:63:e4:a5:20:58:21:2d:a2:38:1d:df:4f:
                    3d:cb:2f:20:38:f1:02:79:d3:5b:83:64:c5:05:ff:
                    89:2a:4b:10:8c:62:27:00:31:19:f5:6a:f1:71:8b:
                    5b:6e:f5:89:7f:25:17:26:24:d2:5a:4c:ff:07:db:
                    bf:e9:55:d9:fd:cb:07:fc:1d:be:99:73:0d:d1:f1:
                    28:b2:78:dd:db:1d:6c:97:f6:f4:b3:80:94:5a:96:
                    ad:4a:a8:bd:6b:37:8f:a6:8a:ee:8d:41:bb:f9:eb:
                    68:eb:f5:5e:8b:ff:cf:95:28:2f:45:c7:27:3e:2a:
                    98:6e:90:20:31:7c:21:93:8c:b1:0f:2f:cb:cd:eb:
                    0e:01:fb:22:b2:13:c2:95:20:b2:a5:a1:1a:c6:b1:
                    56:bc:72:f9:b5:fe:68:bb:5d:fa:6c:d3:1b:9b:63:
                    e4:8a:1b:0e:8f:4a:09:bb:1c:a5:0b:4f:d4:de:17:
                    85:da:df:ca:0d:2c:ba:e1:24:68:cb:be:6f:9f:31:
                    d9:9b:5c:6a:eb:e4:29:94:7f:23:49:e5:22:c3:ce:
                    47:fc:41:c3:d3:c9:2d:b4:ff:7d:e9:da:46:53:58:
                    39:ae:f4:75:8e:91:74:ca:52:12:45:8a:44:e8:b8:
                    41:ec:da:a3:14:e5:b1:20:05:53:1b:10:57:95:c0:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4F:51:4D:80:3C:6E:8A:16:9E:5D:53:3A:0A:D0:C7:55:78:AF:88
            X509v3 Authority Key Identifier:
                keyid:50:61:90:77:BC:A3:B6:CE:64:76:F9:52:7C:E8:AB:C4:1B:C1:63:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c402a9a6a7d206670319a5692be8577f996a3072.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/2483bb041d45d98ee6ec950822b4e6ad7b9fd353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/c402a9a6a7d206670319a5692be8577f996a3072.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:e2:7d:f7:b3:d7:14:1e:d4:01:3f:bd:21:0f:22:92:07:
         83:93:b0:be:99:82:ee:bc:68:22:55:23:cf:12:f4:10:d3:b2:
         61:0e:3a:cc:b6:17:cc:1f:7f:3f:5a:df:63:6a:33:fa:f1:d7:
         cd:99:5b:f9:c3:63:4b:8e:cb:c7:34:34:21:7e:09:35:19:41:
         95:13:d4:31:e8:2e:ed:7c:80:b5:31:36:8e:a1:51:d9:d9:ec:
         ae:48:32:d8:26:07:c9:dc:ed:20:b0:60:e5:64:12:3c:1f:de:
         81:e4:46:da:3d:45:c2:28:8b:3d:a2:e9:df:75:78:f0:86:53:
         66:e0:11:ca:09:47:45:01:70:e6:2f:a6:62:a5:ae:d3:0d:ae:
         9b:a2:5c:90:36:c7:7d:d4:f3:c5:d2:cf:a1:42:2b:78:04:52:
         d1:32:03:3d:a0:d8:c2:6a:68:a1:59:5e:03:69:31:e8:bb:18:
         c9:61:6e:1f:de:60:43:c6:9f:c3:a1:0f:6f:5a:d6:f8:42:24:
         fd:35:d9:58:f4:19:92:fd:b9:9f:ed:f3:33:62:25:0b:39:47:
         2e:b8:9b:34:9e:a3:ce:8f:a9:2a:a3:d9:20:42:a0:7a:c4:af:
         01:00:1f:2d:f2:27:90:84:c6:5d:c5:15:a2:e6:86:f0:33:58:
         be:8b:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org