Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/6d30dbb2ab050e6a83f4fafa4429c3273e445c74.roa
File:                     6d30dbb2ab050e6a83f4fafa4429c3273e445c74.roa (raw, json)
Hash identifier:          Cze2V1s+ngvuTgRk2GXja3wcGRjVAfvvo/tEP+Gu3ck=
Subject key identifier:   A5:08:63:EC:9D:CE:B4:B8:ED:90:36:14:2C:96:F0:4D:02:47:86:EC
Certificate issuer:       /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial:       0D4991
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/6d30dbb2ab050e6a83f4fafa4429c3273e445c74.roa
Signing time:             Wed 24 Mar 2021 14:45:34 +0000
ROA not before:           Wed 24 Mar 2021 14:45:34 +0000
ROA not after:            Tue 24 Mar 2026 14:45:34 +0000
asID:                     12684
IP address blocks:        200.115.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870801 (0xd4991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Validity
            Not Before: Mar 24 14:45:34 2021 GMT
            Not After : Mar 24 14:45:34 2026 GMT
        Subject: CN=6d30dbb2ab050e6a83f4fafa4429c3273e445c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:a1:32:a6:39:4c:31:85:f9:f3:c9:84:f6:
                    c8:24:92:14:b2:10:45:4a:ca:69:fd:74:2c:64:7c:
                    94:94:32:78:67:71:ed:ad:ce:a3:f1:bd:b0:a3:9e:
                    e6:02:c3:e2:9d:ad:97:11:8f:b5:b3:3f:c9:00:f2:
                    64:5a:03:b4:e2:ef:db:24:78:5e:52:60:3c:de:60:
                    56:ea:1c:bc:a5:bf:70:86:51:6a:21:b5:5a:3c:19:
                    74:d7:d4:b7:01:6c:43:f0:66:46:f0:5f:66:58:cd:
                    02:6f:82:7b:4b:c5:e8:30:dd:9b:5b:bc:59:8e:63:
                    81:f4:02:ba:4e:1e:8a:c8:ed:97:63:3d:0b:58:3a:
                    65:6f:89:db:6a:f2:d3:b4:9e:0c:fd:16:5c:80:7f:
                    dc:c7:95:55:d2:9a:95:13:35:77:01:28:71:4b:e9:
                    29:22:31:5e:0b:91:4d:e5:9b:d8:f6:7c:56:20:1b:
                    fb:4d:58:4e:16:70:01:f3:71:83:26:60:7c:d8:96:
                    82:2c:de:d5:81:a3:4e:6a:2e:7f:8c:eb:86:1d:5f:
                    22:ff:da:c0:63:68:94:fa:aa:a8:f2:50:b8:64:40:
                    35:53:0b:9a:11:4c:54:74:b5:73:38:c1:72:79:f8:
                    27:93:33:4f:46:ee:91:de:b6:ed:d4:5f:30:6b:aa:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:08:63:EC:9D:CE:B4:B8:ED:90:36:14:2C:96:F0:4D:02:47:86:EC
            X509v3 Authority Key Identifier:
                keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/6d30dbb2ab050e6a83f4fafa4429c3273e445c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b1:ba:ca:e7:a6:75:7a:69:ad:31:1a:56:d9:57:09:cc:07:
         9b:65:63:18:f5:8f:83:82:d2:09:67:20:90:55:bd:5b:7e:84:
         10:01:5b:a1:d1:d0:3e:29:8c:d8:5c:89:d5:91:05:99:ed:55:
         04:4b:5a:16:f4:09:80:b5:77:a6:57:35:b7:7f:b9:38:2e:37:
         1d:de:9b:59:37:10:ac:a3:e1:8b:b9:bb:9f:fe:d0:fa:f5:e3:
         46:f8:f1:5c:9f:84:46:a1:43:ad:58:10:aa:1a:5b:0c:59:4e:
         29:8b:45:23:b9:22:aa:33:b4:16:26:eb:ad:a0:ed:21:ce:3f:
         c9:41:0c:cb:b8:8b:fd:4f:14:1e:9f:09:f2:bd:57:7f:4f:d0:
         a1:d6:a8:2b:f4:0b:e5:e2:bc:16:cc:7c:c2:77:78:b4:ef:ee:
         d1:da:29:b6:0d:fa:b4:2b:fa:31:a6:3c:2e:8f:aa:54:e9:c7:
         7d:66:b5:79:0f:4b:53:8a:43:a8:99:30:01:16:00:e5:dc:b4:
         5d:ec:07:70:01:c9:5b:c1:d4:80:6e:ac:4d:90:8d:f8:73:5c:
         69:38:4a:9d:ae:85:8d:bf:57:91:6f:c7:b3:93:7d:7c:92:da:
         4c:75:69:43:a7:94:26:bd:ac:fe:bf:c8:95:68:34:1c:85:8c:
         1f:82:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org