Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/3aa5a299756de4b272352f845823f3ad050f1193.roa
File:                     3aa5a299756de4b272352f845823f3ad050f1193.roa (raw, json)
Hash identifier:          77HQIApvtI2UJtWTR/F8mElmiQ5zGGDhSFX+4kR5IeE=
Subject key identifier:   F7:EB:9A:2E:C2:06:AE:59:69:A1:DD:BF:93:71:38:DD:F4:71:3C:78
Certificate issuer:       /CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
Certificate serial:       060154
Authority key identifier: 1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/3aa5a299756de4b272352f845823f3ad050f1193.roa
Signing time:             Wed 24 Mar 2021 14:36:18 +0000
ROA not before:           Wed 24 Mar 2021 14:36:17 +0000
ROA not after:            Tue 24 Mar 2026 14:36:17 +0000
asID:                     270075
IP address blocks:        200.10.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393556 (0x60154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
        Validity
            Not Before: Mar 24 14:36:17 2021 GMT
            Not After : Mar 24 14:36:17 2026 GMT
        Subject: CN=3aa5a299756de4b272352f845823f3ad050f1193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:84:22:6d:69:47:aa:78:b4:57:eb:21:c5:
                    e0:92:6d:aa:5c:3b:27:1c:ad:d7:23:60:27:09:fc:
                    38:87:29:7c:cf:a2:0b:f9:27:3d:1e:70:87:53:78:
                    aa:81:59:e4:18:5f:27:06:58:fc:82:e7:2a:50:83:
                    e0:16:28:61:76:db:5d:a1:5c:08:e3:fc:3a:e3:fd:
                    7d:26:2f:e0:48:ac:8e:e0:9d:2e:99:68:cb:66:78:
                    06:18:9e:04:21:d8:8d:5f:10:09:49:94:03:a9:d7:
                    6a:2c:2a:ff:16:d9:d8:7c:81:61:84:21:e7:15:cf:
                    a3:88:61:7c:c4:ff:38:d6:60:31:ea:b0:cf:d3:41:
                    96:bc:18:8f:58:49:f8:b9:d4:71:b9:0e:25:fd:63:
                    0b:9f:c2:4a:55:fe:4d:17:c7:ea:c6:7d:35:7b:a9:
                    f4:2b:c8:e6:93:46:ef:93:61:f4:43:16:d2:c9:35:
                    83:b6:11:e1:0e:f0:db:2e:15:19:5b:6d:45:24:e1:
                    04:2b:94:93:ca:65:1e:48:1e:0a:8a:75:7a:24:de:
                    63:be:41:0c:95:b7:3c:9d:2d:f9:ff:b1:05:6e:b8:
                    fa:0d:e8:43:f1:9e:5a:cf:86:e2:67:1d:70:1a:b9:
                    f2:ef:69:73:9c:a5:98:aa:9d:1d:87:48:7d:f0:01:
                    f1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EB:9A:2E:C2:06:AE:59:69:A1:DD:BF:93:71:38:DD:F4:71:3C:78
            X509v3 Authority Key Identifier:
                keyid:1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/3aa5a299756de4b272352f845823f3ad050f1193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/6ad6db935edff4c1f2be54056c36a0c9320b83cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:03:2d:9c:69:10:ec:97:0f:6e:84:4e:76:8c:9c:d3:61:70:
         6b:7b:fe:29:ae:a9:cf:2e:ce:47:a5:54:f6:05:b6:bf:52:7e:
         29:35:2e:77:46:2e:6c:3a:c2:12:3f:d5:ad:dd:dc:cc:26:6e:
         59:61:9e:fd:be:2a:5b:47:bb:84:9d:42:e1:ff:14:8a:ea:23:
         32:a6:dc:e0:70:6d:e0:8a:72:a4:79:34:8c:ab:e2:0b:53:ef:
         42:75:13:3f:2f:e1:46:84:1a:f9:a4:da:3f:53:eb:7a:cf:13:
         dd:fc:b8:7a:fe:31:79:1d:74:2d:60:8d:3e:5c:2a:68:67:01:
         97:40:88:38:96:91:6e:5c:6d:a0:97:8e:8d:07:04:f0:10:ed:
         11:e4:2b:86:00:21:59:06:58:27:c4:bb:21:66:72:2f:fc:2e:
         93:e9:8d:c0:1c:e1:92:95:3d:9e:3d:f5:8d:2c:8c:f0:b3:33:
         29:6d:23:92:c6:23:c1:16:46:2b:3a:1e:84:61:8a:b9:8a:91:
         18:8d:f1:d0:bf:fa:ee:39:7e:20:48:19:68:00:1d:54:d1:39:
         4b:2a:05:27:c3:d7:56:a1:61:03:81:db:7a:03:2b:8c:45:6e:
         d9:a6:33:8f:f6:70:8b:ff:b7:c2:2e:03:8a:52:ae:da:c9:41:
         af:e9:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org