Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e530701-9320-432a-a3b4-497154afc524/77f199729dd908c8d358e25a4bdb76187b6cb4d5.roa
File:                     77f199729dd908c8d358e25a4bdb76187b6cb4d5.roa (raw, json)
Hash identifier:          Du4aiOvUwqfrqegdRbvU2GOriBEpMqdKLk4yRQM7na0=
Subject key identifier:   18:E9:46:49:4D:AF:BE:15:56:4C:AA:7F:95:5C:DD:BE:86:3E:A5:B8
Certificate issuer:       /CN=fd8df723b27ad8f4fd8d44a08c80601e45809074
Certificate serial:       0DAEB2
Authority key identifier: 6D:22:E5:A5:5A:34:C2:41:E7:87:BA:41:1E:4D:98:97:FC:89:C9:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd8df723b27ad8f4fd8d44a08c80601e45809074.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e530701-9320-432a-a3b4-497154afc524/77f199729dd908c8d358e25a4bdb76187b6cb4d5.roa
Signing time:             Wed 24 Mar 2021 14:32:48 +0000
ROA not before:           Wed 24 Mar 2021 14:32:48 +0000
ROA not after:            Tue 24 Mar 2026 14:32:48 +0000
asID:                     27980
IP address blocks:        200.1.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896690 (0xdaeb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd8df723b27ad8f4fd8d44a08c80601e45809074
        Validity
            Not Before: Mar 24 14:32:48 2021 GMT
            Not After : Mar 24 14:32:48 2026 GMT
        Subject: CN=77f199729dd908c8d358e25a4bdb76187b6cb4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:58:06:b2:ff:8e:cd:e6:25:f6:f2:81:33:
                    59:2d:8a:e0:c4:83:03:25:9e:a4:d3:1f:20:ec:9e:
                    ff:3f:c7:cf:60:54:bb:38:91:66:56:15:e8:17:0a:
                    cc:47:b7:07:47:1c:73:40:f5:6c:d5:11:03:89:f7:
                    87:df:5a:18:85:36:1f:d9:58:6a:42:1a:c6:4b:58:
                    70:66:96:33:75:dd:23:7e:da:5d:4a:dc:94:38:bc:
                    93:82:16:d5:19:a6:98:e4:95:2b:02:4d:47:8c:20:
                    a0:b2:92:45:44:db:39:2e:73:fa:79:2b:4e:2b:8c:
                    a6:56:9a:0b:9a:cb:84:c8:80:1c:f3:7b:b8:26:b5:
                    fe:00:b2:1e:d6:2b:63:a0:30:34:c2:90:88:c7:5d:
                    df:f8:71:8f:42:8a:c8:91:28:e5:8d:9e:9f:b8:71:
                    24:5e:0e:6b:9b:98:79:c3:e9:86:e3:92:a3:69:30:
                    04:53:b9:18:2a:9e:63:6e:31:36:bd:a8:22:64:5a:
                    70:5d:84:8c:b7:a9:3c:af:d3:61:34:19:c3:88:6b:
                    2a:a3:8d:de:88:05:11:d8:ed:a4:b8:d5:ab:ab:b4:
                    d2:8b:c6:3c:db:a6:0e:e0:94:44:22:f1:06:dc:03:
                    35:5f:d8:d8:76:cf:8d:13:ad:c1:92:7a:d5:41:46:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:46:49:4D:AF:BE:15:56:4C:AA:7F:95:5C:DD:BE:86:3E:A5:B8
            X509v3 Authority Key Identifier:
                keyid:6D:22:E5:A5:5A:34:C2:41:E7:87:BA:41:1E:4D:98:97:FC:89:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd8df723b27ad8f4fd8d44a08c80601e45809074.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e530701-9320-432a-a3b4-497154afc524/77f199729dd908c8d358e25a4bdb76187b6cb4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e530701-9320-432a-a3b4-497154afc524/fd8df723b27ad8f4fd8d44a08c80601e45809074.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d4:3a:58:b2:86:00:a0:09:fe:5b:ee:ab:ea:08:35:73:45:
         d8:7b:40:19:a6:8f:48:d5:b5:82:32:96:57:91:01:4e:e5:9b:
         ef:da:ef:0f:21:c3:4c:9b:fe:8a:4a:78:c2:59:21:1c:91:f3:
         bb:4c:f4:e8:f2:1c:50:11:93:b1:fc:96:9a:7b:ed:6f:19:3c:
         16:11:11:ce:c2:ed:22:9c:48:b1:0b:03:ec:3a:e3:33:1d:b4:
         59:71:b3:8b:7f:6e:34:b3:34:09:72:49:6d:47:cc:4c:53:77:
         29:94:b3:82:b6:bd:63:9b:9a:49:fb:7f:d9:9a:04:b5:ad:81:
         d0:6e:5b:65:c3:1c:75:55:5c:35:cc:2d:49:86:36:4e:e8:0b:
         7b:3c:35:37:3b:40:0a:fb:b0:9d:d6:e3:f8:23:85:46:cf:07:
         9b:1b:f2:83:db:e5:20:1b:10:12:a4:71:c7:e7:f1:ad:e3:3d:
         31:41:6b:78:48:f0:3b:c0:e7:bb:27:77:f5:8f:51:c3:16:5d:
         0a:02:e9:b5:3f:b0:d9:16:74:0e:03:7d:50:58:73:67:b3:4d:
         f0:5a:a3:5f:b1:35:da:0c:dd:eb:5b:1a:9d:9a:ba:9a:f0:0e:
         ed:4f:db:54:60:fd:f7:63:d3:44:d3:65:ed:7b:9c:62:52:c6:
         34:f8:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org