Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/de69dbb8e3c4f803a31bfbe3cff454f81f5b62de.roa
File:                     de69dbb8e3c4f803a31bfbe3cff454f81f5b62de.roa (raw, json)
Hash identifier:          AHSQ5soAHzGWJAi+wEE4FsA8Zea4NWqyX6B9mcfuldI=
Subject key identifier:   3D:BF:5D:8D:B2:09:BF:41:98:65:5E:D9:2F:0A:9B:4C:AA:00:0A:00
Certificate issuer:       /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial:       0257BE
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/de69dbb8e3c4f803a31bfbe3cff454f81f5b62de.roa
Signing time:             Mon 07 Aug 2023 16:05:57 +0000
ROA not before:           Sun 06 Aug 2023 16:05:57 +0000
ROA not after:            Thu 07 Aug 2025 16:05:57 +0000
asID:                     7004
IP address blocks:        200.91.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153534 (0x257be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
        Validity
            Not Before: Aug  6 16:05:57 2023 GMT
            Not After : Aug  7 16:05:57 2025 GMT
        Subject: CN=de69dbb8e3c4f803a31bfbe3cff454f81f5b62de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c2:2e:75:30:bd:06:81:2b:ad:54:87:a7:44:
                    b3:8c:2d:93:5f:7d:5a:d4:a1:0f:6f:2f:ca:e3:f3:
                    b0:86:5f:d8:86:03:4a:3f:ed:eb:f0:b1:12:f8:e8:
                    fa:60:f2:d2:5f:9a:da:60:59:bd:13:1b:a0:7f:8e:
                    63:1d:f2:ee:a8:80:35:0e:f5:20:c2:dc:54:30:3c:
                    fd:05:8b:f3:d2:05:61:64:fb:14:90:06:02:b5:0d:
                    dd:5c:1b:30:21:0a:e9:a7:58:12:9b:8c:37:52:14:
                    87:30:0b:a2:9e:a2:22:42:15:a7:9e:c0:64:e3:08:
                    77:db:36:87:ce:d4:dc:37:57:3b:42:95:ea:ed:79:
                    14:63:39:33:54:bf:55:19:a6:75:8e:cd:44:eb:04:
                    f5:e5:23:d3:38:4c:e3:66:80:79:19:1f:b2:fe:73:
                    94:2c:a2:3e:9b:e2:ee:e2:82:d6:37:b0:37:1d:a5:
                    e3:43:f3:ea:35:88:6f:d7:97:8d:47:e2:01:ef:32:
                    49:d4:0f:81:c8:27:6e:f6:f1:d7:30:f1:ac:90:45:
                    fa:77:3e:27:98:55:4d:27:93:3d:b7:63:0e:e5:c9:
                    e0:74:a9:86:fd:9c:d7:f1:de:72:95:00:b1:bd:80:
                    02:1c:4a:4a:6a:c5:31:38:9b:0a:26:8c:63:de:2f:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BF:5D:8D:B2:09:BF:41:98:65:5E:D9:2F:0A:9B:4C:AA:00:0A:00
            X509v3 Authority Key Identifier:
                keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/de69dbb8e3c4f803a31bfbe3cff454f81f5b62de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:7d:5b:47:61:78:bd:fc:5a:5a:b2:a8:ab:d6:60:40:60:a9:
         a7:f4:fa:99:df:f7:e4:56:6b:9c:2b:4a:d5:3d:09:3e:2a:28:
         0d:55:de:a3:36:47:da:f9:c1:3c:34:b9:0c:25:07:62:c5:6f:
         52:01:b3:ae:39:79:6c:21:5b:ff:3c:3b:74:1c:54:82:48:55:
         ad:19:1a:67:62:50:e6:b4:23:af:1d:18:5e:80:dd:5f:96:3e:
         a4:16:f4:32:be:e2:a8:29:61:ba:d1:a9:52:8d:71:54:91:2d:
         ab:1a:18:88:10:58:4f:cb:72:b5:a7:2e:35:24:90:d9:21:d4:
         5b:bc:61:a2:d2:63:b1:0e:6f:64:30:97:28:2c:94:1d:00:a4:
         9c:b0:aa:98:08:71:54:cb:6e:ff:e4:be:b4:23:6c:a4:1e:e5:
         41:a1:07:c3:62:55:f1:a7:2e:c1:93:0c:92:51:38:e9:b8:cc:
         25:b6:d5:e4:a2:f8:02:29:df:8a:ab:3d:85:7d:1b:e2:9e:7e:
         cd:a9:07:53:6d:5c:ab:dc:cf:99:d6:d8:66:ce:29:9e:a1:35:
         51:55:af:8f:96:c5:75:62:ae:cf:90:9a:6a:fd:5b:37:d1:4d:
         0c:55:3e:c3:0b:77:64:6b:c1:21:b3:73:27:61:04:d4:1b:23:
         2e:79:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org