Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a77265cfddf58b6f11f83116f0f96b1cbd73020a.roa
File:                     a77265cfddf58b6f11f83116f0f96b1cbd73020a.roa (raw, json)
Hash identifier:          x5TsGC6T2GfugqdsOds5JYPKJ2GgjL6nvNYyLbthWMM=
Subject key identifier:   50:36:C4:CB:62:7C:A8:DA:18:F5:D9:80:59:D4:A3:8D:2B:E6:3B:28
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E1AAC
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a77265cfddf58b6f11f83116f0f96b1cbd73020a.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     27860
IP address blocks:        201.218.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924332 (0xe1aac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=a77265cfddf58b6f11f83116f0f96b1cbd73020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:fe:ed:8c:54:5e:a8:32:1e:63:ca:bb:c7:
                    1e:7f:08:78:62:b4:f9:fa:48:92:61:da:67:3d:50:
                    69:b9:3a:98:83:9a:84:54:32:91:a8:6d:d7:05:39:
                    2c:74:c9:84:d3:43:89:f2:f4:e7:2c:e3:e8:c2:16:
                    5f:54:bc:26:10:7f:d5:11:5e:bd:06:fd:4c:d8:1c:
                    f4:68:ed:36:11:7f:b2:0f:8d:f4:10:94:41:e4:f2:
                    2e:ae:48:d4:1e:8c:b6:fe:88:9d:f6:5d:d4:f0:fc:
                    e7:db:a4:12:98:b4:48:21:15:a9:ff:95:d9:9d:ca:
                    57:03:8e:80:54:bf:1e:62:59:34:86:f7:d1:7b:18:
                    05:79:0b:8f:a2:be:07:08:42:84:3b:98:75:5b:62:
                    ca:4b:42:38:5d:e9:f0:ee:87:f6:d1:96:61:cd:a9:
                    23:37:67:93:61:59:68:71:73:ca:89:a3:67:93:86:
                    66:e2:c4:63:d5:b8:b9:60:c4:2e:0d:3f:29:ab:d1:
                    19:41:b4:7d:6b:3f:4f:bb:9b:18:cb:a4:df:71:93:
                    ce:5c:f7:79:a7:ee:90:6b:d9:1d:85:be:c8:b8:ab:
                    fe:ff:70:ca:2b:85:be:33:f3:c2:41:4e:19:3f:32:
                    6a:a5:b4:ac:e8:4b:98:21:2d:01:5c:6b:5e:be:1e:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:C4:CB:62:7C:A8:DA:18:F5:D9:80:59:D4:A3:8D:2B:E6:3B:28
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a77265cfddf58b6f11f83116f0f96b1cbd73020a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:67:f4:25:f0:83:46:e2:f5:1c:1c:98:7f:7c:06:7a:fe:
         09:65:8b:1a:72:f9:24:dd:55:36:bf:f7:d8:39:73:ab:81:9b:
         0b:22:a6:ca:56:b3:7b:48:65:ee:a8:ef:73:4a:d4:0c:da:a0:
         aa:2a:ea:8c:40:fd:25:2b:e9:e2:27:a6:ef:e3:1c:74:5f:50:
         11:d2:e2:fc:f5:7c:52:8f:c5:3d:75:a4:db:53:fc:37:7d:4f:
         76:0c:a4:60:f5:85:27:64:3b:c3:25:2a:5d:c4:51:ca:4b:53:
         85:49:96:e2:49:b6:5e:5e:e4:70:c5:01:bb:33:9a:1b:94:e6:
         2e:24:99:f0:b4:d0:3c:85:0d:4b:6b:8f:26:6b:30:fc:a5:a8:
         d8:24:dd:3a:9a:67:20:0d:e0:0f:62:87:fe:f7:b8:3f:88:d6:
         63:3c:cb:c0:da:76:a5:e1:68:ac:18:35:95:e7:5d:53:db:df:
         2d:8b:3f:0b:c3:39:f0:18:6d:34:aa:f7:25:4b:11:9f:d9:51:
         d3:05:b6:fb:29:2b:43:35:ab:82:23:74:f0:55:61:a3:c2:43:
         86:15:ea:9a:bf:5e:4b:b7:1c:47:e0:52:6a:95:59:e0:fe:67:
         85:63:e9:10:e5:c5:1d:4f:0a:ec:4f:8f:1b:5b:22:4b:e0:8f:
         c3:e8:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org