Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/426951fc-8add-4135-8197-0e4a985e19f7/cb08adff4dd9c2014550739c1a3f921221a77a29.roa
File:                     cb08adff4dd9c2014550739c1a3f921221a77a29.roa (raw, json)
Hash identifier:          fuzu8XDCoyZqBE1cpev6YWP15blJbjAAs+HeiP95uak=
Subject key identifier:   28:CB:9F:3F:D7:27:20:11:C9:FD:2A:A7:68:D0:DB:6A:1A:5C:03:E3
Certificate issuer:       /CN=020a5e82c5f8610e3e513cd50edc85d687800962
Certificate serial:       0C9874
Authority key identifier: 62:A3:5E:08:E8:3B:0E:E3:F6:68:45:A9:E8:34:3E:D1:66:4B:E0:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/020a5e82c5f8610e3e513cd50edc85d687800962.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/426951fc-8add-4135-8197-0e4a985e19f7/cb08adff4dd9c2014550739c1a3f921221a77a29.roa
Signing time:             Wed 24 Mar 2021 14:40:10 +0000
ROA not before:           Wed 24 Mar 2021 14:40:10 +0000
ROA not after:            Tue 24 Mar 2026 14:40:10 +0000
asID:                     23031
IP address blocks:        200.0.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825460 (0xc9874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020a5e82c5f8610e3e513cd50edc85d687800962
        Validity
            Not Before: Mar 24 14:40:10 2021 GMT
            Not After : Mar 24 14:40:10 2026 GMT
        Subject: CN=cb08adff4dd9c2014550739c1a3f921221a77a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:24:4e:78:06:8a:a2:0a:34:94:33:d0:e9:
                    39:1d:86:b2:fe:32:bc:44:20:41:07:af:f8:0c:16:
                    17:2b:74:8a:44:eb:97:4d:2e:b6:a4:ac:d5:c0:b7:
                    7a:90:69:dc:9b:49:b2:a8:23:a5:25:16:f4:24:91:
                    aa:18:90:29:5b:51:76:de:db:db:48:38:d7:bc:4b:
                    d7:4a:43:10:a4:5f:1e:9a:98:44:ab:2d:82:bd:3c:
                    76:33:21:de:56:2a:ca:e8:e3:4a:9a:0a:25:d4:0e:
                    cc:25:5f:b1:c7:58:b5:10:39:2c:b2:13:17:4e:87:
                    cd:68:4d:af:84:03:be:a0:a5:84:48:ce:c2:92:73:
                    69:dd:ae:56:00:e1:ce:fc:4d:62:22:e6:e2:e4:17:
                    d8:52:64:0b:8e:05:3e:90:5b:86:df:f8:0b:38:e3:
                    83:17:35:81:d0:c6:f3:21:4d:30:82:71:3c:16:f6:
                    70:10:c4:7c:97:82:a9:6e:9e:80:60:2b:e5:0d:15:
                    77:db:ae:15:e0:51:d1:36:0f:8c:f8:4e:50:03:c5:
                    c6:b1:08:13:52:53:3d:96:54:91:61:12:90:9d:e9:
                    67:cc:11:38:69:70:a5:9c:b0:59:d1:25:6f:0f:f9:
                    a5:38:70:64:21:c1:13:f3:ee:89:34:74:1c:43:98:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:9F:3F:D7:27:20:11:C9:FD:2A:A7:68:D0:DB:6A:1A:5C:03:E3
            X509v3 Authority Key Identifier:
                keyid:62:A3:5E:08:E8:3B:0E:E3:F6:68:45:A9:E8:34:3E:D1:66:4B:E0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/020a5e82c5f8610e3e513cd50edc85d687800962.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/426951fc-8add-4135-8197-0e4a985e19f7/cb08adff4dd9c2014550739c1a3f921221a77a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/426951fc-8add-4135-8197-0e4a985e19f7/020a5e82c5f8610e3e513cd50edc85d687800962.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:4d:5a:d9:e8:74:6c:be:76:57:13:16:9a:f2:7a:e0:5b:
         a9:b4:d4:10:dd:d2:8f:6a:5f:7b:67:40:a1:e6:aa:51:0e:ef:
         07:60:31:2f:c0:eb:3e:91:87:fb:77:aa:70:69:8d:4c:a4:96:
         85:95:df:4e:77:4d:17:74:13:61:03:3c:42:88:23:b3:23:b9:
         44:6c:ac:f3:9d:87:e3:81:30:03:18:e0:f0:9f:b7:9a:6f:ea:
         77:2d:a5:ce:5c:8b:dd:8e:bf:d8:75:0f:d5:25:cd:ec:bd:2e:
         25:fd:a7:6e:e6:5d:21:4c:2c:c7:e9:73:f8:a3:cf:5b:47:5f:
         5a:85:3f:94:4e:db:8a:a0:29:cc:26:87:b3:5e:80:3b:ce:73:
         c5:63:48:7e:79:89:ca:bf:f2:0d:1e:90:7b:13:94:8a:dc:80:
         31:8a:e0:dc:b2:68:ef:7f:92:1c:04:f0:e4:35:4b:b3:7e:13:
         7e:e7:1c:e5:7c:b8:16:a6:57:93:05:98:8e:ad:48:af:41:ff:
         18:9f:e5:0f:7b:06:3d:a8:67:67:58:2e:7f:9f:c0:da:87:96:
         ba:4a:61:e8:0c:d6:62:cc:03:71:84:0c:b8:9f:cd:61:ce:54:
         33:59:ed:c8:6c:5a:7d:c4:b9:b8:7f:e2:37:4e:82:d5:6c:76:
         f9:97:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org