Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a5f65694268a962d0c53cf74e8cac94afd62f6e5.roa
File:                     a5f65694268a962d0c53cf74e8cac94afd62f6e5.roa (raw, json)
Hash identifier:          gSAFoN0vuRQYJcoIOouX8im4TYlqaBH4BQNjeij540o=
Subject key identifier:   E4:BD:03:92:95:6E:F8:91:AA:AB:99:5C:C5:16:A4:90:BD:82:05:FA
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       0E1683
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a5f65694268a962d0c53cf74e8cac94afd62f6e5.roa
Signing time:             Wed 24 Mar 2021 14:42:05 +0000
ROA not before:           Wed 24 Mar 2021 14:42:05 +0000
ROA not after:            Tue 24 Mar 2026 14:42:05 +0000
asID:                     27742
IP address blocks:        200.30.128.0/24 maxlen: 24
                          200.30.130.0/24 maxlen: 24
                          200.30.132.0/24 maxlen: 24
                          200.30.165.0/24 maxlen: 24
                          200.30.170.0/24 maxlen: 24
                          200.30.177.0/24 maxlen: 24
                          200.30.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923267 (0xe1683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 24 14:42:05 2021 GMT
            Not After : Mar 24 14:42:05 2026 GMT
        Subject: CN=a5f65694268a962d0c53cf74e8cac94afd62f6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:79:63:9f:07:0d:08:7e:fc:11:16:0d:2e:
                    56:77:bb:3e:e9:8c:05:79:2c:07:1b:bd:b6:a5:2b:
                    6b:ce:b4:90:af:f2:9b:3e:c6:c9:bf:67:b5:ad:cd:
                    c9:13:70:9c:fd:04:05:db:a4:c5:e1:5d:6c:7b:4b:
                    25:53:22:a3:c6:d1:8a:76:69:95:fa:e6:10:4d:91:
                    cb:95:37:38:5f:60:ec:7c:6c:52:07:da:0c:f2:9e:
                    74:8c:f5:22:81:6f:3c:48:2d:b6:e9:00:6a:75:fc:
                    5c:8c:91:9c:dd:66:cd:72:3b:d2:4a:18:4d:52:de:
                    0f:57:42:67:49:9f:da:90:56:d4:e4:26:c0:65:eb:
                    50:d4:ed:ec:da:92:4c:d3:75:71:3c:a8:90:7f:09:
                    e9:0f:94:64:2c:4b:92:37:7b:49:3a:b4:43:27:a6:
                    bb:d0:e7:c6:ee:a3:f2:2c:2c:11:7c:1b:65:ef:eb:
                    86:f7:4c:83:2e:98:af:41:cd:23:f7:03:99:8e:8c:
                    2e:94:1c:5e:ce:87:ac:96:77:fe:a2:c1:c3:72:4e:
                    00:59:ef:bd:bd:56:5d:79:cf:e0:04:2a:7e:05:3d:
                    7c:b2:7d:c7:aa:c6:9a:d8:66:e8:ee:a2:20:09:44:
                    3c:80:c4:7a:f5:76:9f:f2:bd:32:de:03:2c:63:3d:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BD:03:92:95:6E:F8:91:AA:AB:99:5C:C5:16:A4:90:BD:82:05:FA
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a5f65694268a962d0c53cf74e8cac94afd62f6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.128.0/24
                  200.30.130.0/24
                  200.30.132.0/24
                  200.30.165.0/24
                  200.30.170.0/24
                  200.30.177.0/24
                  200.30.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:26:7a:29:9e:7f:8d:00:fb:19:0e:ed:f7:f2:55:8f:58:
         de:ae:f9:64:aa:b8:7e:d3:c4:18:4c:59:33:36:eb:db:ef:43:
         64:f3:5e:cf:32:db:7d:41:1e:5e:8d:cf:66:f1:45:2a:66:c7:
         b3:af:af:49:e0:e7:c8:b6:82:9a:e2:f8:d1:ee:46:11:d6:28:
         ed:69:4a:44:ec:14:14:3a:79:48:8f:02:38:9e:e1:3b:27:42:
         cf:91:9f:8d:6b:11:39:8b:85:e5:fa:6d:ae:bf:f5:6f:f5:40:
         02:aa:48:ea:c3:72:88:5c:4e:54:fd:d6:81:78:df:d6:d9:cd:
         07:5c:e0:eb:b6:0b:c7:e3:27:50:d3:58:bf:fc:6c:9b:9b:ef:
         4e:3b:e5:29:2c:54:dc:05:5f:35:ab:59:6c:46:58:03:ab:3d:
         8e:11:65:dc:57:6f:47:1e:be:97:5f:58:cf:6a:ab:7f:f8:18:
         59:a5:26:fc:2a:6b:04:8b:75:fc:5f:8f:a2:74:66:23:ae:79:
         34:19:bd:dc:8b:64:52:3e:c2:fc:77:b7:ce:14:51:10:b6:a2:
         6f:92:4c:23:95:08:50:14:dc:7f:be:75:5c:9b:12:4d:f6:4b:
         8e:73:03:11:56:df:cf:c1:e6:0b:c4:89:07:14:de:f7:87:65:
         d1:b2:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 00:39:15 2024 by rpki-client on console-fra.rpki-client.org