Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/0071009553bd7d79dad1caab5092c19408888966.roa
File:                     0071009553bd7d79dad1caab5092c19408888966.roa (raw, json)
Hash identifier:          tQ7bFQVp1urLgWzXfuPHFYNICp6LwH0VND08QKCNig4=
Subject key identifier:   AE:C7:E3:12:94:16:12:F8:C2:70:4C:1D:9E:48:46:98:C1:7C:0C:44
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03D691
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/0071009553bd7d79dad1caab5092c19408888966.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     30133
IP address blocks:        200.93.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251537 (0x3d691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=0071009553bd7d79dad1caab5092c19408888966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:76:90:d4:54:ff:7b:0b:21:b0:6e:59:d9:
                    4f:a8:53:43:33:3b:5c:54:68:2d:61:f3:a5:9c:ba:
                    2e:ea:04:4a:9b:a1:e1:68:5d:a8:38:de:66:ba:dc:
                    0e:ce:50:eb:41:52:71:d3:99:64:89:6a:a3:82:04:
                    83:6c:c6:25:09:7e:13:e9:47:e6:52:f5:44:e5:14:
                    ef:61:6a:b6:95:0e:5c:97:41:77:ea:f1:4b:80:2a:
                    2a:cc:3f:53:ff:ea:57:40:23:62:35:9e:81:b4:86:
                    62:3b:58:f2:ed:27:6f:11:4d:69:d3:fa:7f:35:cf:
                    87:84:f3:63:81:f4:bf:14:ba:d4:d4:ab:c8:df:5f:
                    6b:07:86:f6:a4:e5:be:85:4f:c5:cb:22:d9:d1:eb:
                    ce:7f:9d:ca:86:90:ae:6f:dc:32:96:49:1e:14:eb:
                    58:c5:52:fe:6e:e7:7e:b4:31:4e:fe:24:fe:2d:35:
                    73:af:a8:fe:31:13:45:6a:ab:47:1b:4a:24:2d:55:
                    0d:da:6d:c0:09:ae:c5:d7:3e:06:94:4d:17:d3:1d:
                    56:00:0c:2d:65:01:67:1a:ce:a7:2e:ac:bd:af:ed:
                    8e:f1:8e:a1:39:60:f8:31:e1:04:d4:a7:af:52:10:
                    f6:31:6e:8f:59:3f:b6:e4:f0:14:12:ab:4e:13:3d:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C7:E3:12:94:16:12:F8:C2:70:4C:1D:9E:48:46:98:C1:7C:0C:44
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/0071009553bd7d79dad1caab5092c19408888966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:8b:81:82:f6:70:3c:59:7b:1c:ed:5c:fc:41:a4:1c:07:
         66:cc:5e:d6:ad:cf:d3:6c:61:0a:1e:40:51:1f:e8:a8:76:0e:
         a7:80:34:0e:ea:6d:4d:21:ec:1c:f4:3a:1c:b1:4d:98:f3:e4:
         e8:dd:36:55:f3:b0:56:3d:72:16:e6:72:73:85:6c:42:62:c6:
         95:3f:cc:66:a3:6b:ae:a4:f4:f4:5b:5b:8a:47:50:50:7a:32:
         61:db:74:f5:fc:ea:35:88:bf:3c:cc:ae:ed:17:78:6d:f6:b7:
         1a:ae:d7:cb:b1:22:14:67:fb:ab:bc:17:ab:25:14:88:8f:a2:
         7e:03:23:e4:d0:99:d3:da:a1:9c:a9:fe:83:44:ff:1d:4f:03:
         47:b2:92:9d:25:c5:61:b1:75:09:0f:47:34:ed:33:67:03:9e:
         16:30:6a:49:f0:93:3c:e3:b3:37:05:59:e3:99:de:1c:01:38:
         a4:c7:60:39:fe:c7:93:71:31:b5:84:4a:db:90:d1:b8:d9:6e:
         c6:a9:4e:2f:1a:e9:ea:04:18:5b:f0:9d:7d:7c:3f:19:12:c8:
         15:e2:2d:60:70:32:b3:a8:cc:c6:d9:9b:fa:0a:79:b9:72:96:
         61:ba:b4:48:9d:b7:94:44:17:e0:92:3e:bd:f4:9e:30:fa:21:
         8c:48:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org