Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/584c7f414472c24692b2d29730986ab4592bd87b.roa
File:                     584c7f414472c24692b2d29730986ab4592bd87b.roa (raw, json)
Hash identifier:          qswl+twiI/+0O3IytzZ14X07sTWt+Q/vmu5TzUcHPDI=
Subject key identifier:   0A:A9:C2:82:E7:BD:B6:E3:4A:9C:D5:C5:91:CD:7A:EF:04:F0:5F:7C
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       120998
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/584c7f414472c24692b2d29730986ab4592bd87b.roa
Signing time:             Fri 16 Apr 2021 02:02:58 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27976
IP address blocks:        190.136.52.0/24 maxlen: 24
                          200.43.12.0/24 maxlen: 24
                          200.45.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182104 (0x120998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=584c7f414472c24692b2d29730986ab4592bd87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:f3:45:d7:31:59:08:0b:58:5a:fe:6d:b9:
                    d5:0f:ef:c2:13:92:f3:fb:04:4e:59:86:25:74:f8:
                    79:0b:e7:a8:23:a5:bc:e4:03:52:63:d2:11:d8:6e:
                    ea:d5:a2:86:0a:28:78:6a:9c:30:7d:4d:a9:d1:db:
                    13:6e:59:e7:e3:9f:7b:ba:38:45:6a:51:1a:3b:cd:
                    ab:3f:33:ce:1b:67:58:4b:4f:d3:d7:11:d3:ac:99:
                    95:67:60:5f:c5:af:a8:e8:66:55:61:e1:72:dd:00:
                    ff:13:35:10:f9:1c:25:f3:18:84:c9:a7:76:cb:c1:
                    87:a6:2d:5a:5c:36:ac:fd:85:dd:38:cc:48:fc:c2:
                    56:f8:72:0c:ed:db:2e:31:e0:3c:d6:2b:c0:26:b9:
                    0c:8e:96:e0:d5:5c:15:2e:13:60:36:0e:65:b2:5a:
                    8e:fc:51:3e:d2:73:38:e5:01:b2:de:6b:a9:c4:d1:
                    cf:dc:d6:da:26:c6:e0:bb:ef:8e:50:b4:70:de:6f:
                    37:e0:fe:16:6c:73:18:5f:ab:9b:8b:2c:df:1f:b6:
                    63:3c:7f:64:ec:98:75:3c:aa:d2:1e:87:92:0d:58:
                    0b:5c:9d:96:c4:09:84:c3:3d:03:ab:e1:25:a1:52:
                    d5:c7:de:18:b5:19:86:7b:36:a5:71:57:4f:3b:e5:
                    14:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A9:C2:82:E7:BD:B6:E3:4A:9C:D5:C5:91:CD:7A:EF:04:F0:5F:7C
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/584c7f414472c24692b2d29730986ab4592bd87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.52.0/24
                  200.43.12.0/24
                  200.45.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4a:87:29:73:d5:d9:1f:b4:44:b1:5c:9f:9f:d8:d4:92:b7:
         2e:c2:b3:f0:e1:b0:77:78:fe:32:9e:26:b7:14:80:4c:84:29:
         1e:38:25:df:72:0e:6c:e7:18:1f:2e:fa:92:82:2b:51:c8:25:
         38:b9:5e:be:f8:da:c1:42:99:92:30:e9:f5:a1:9a:27:9a:64:
         44:35:30:54:1f:31:a9:5e:91:67:6f:f2:a1:b6:09:d6:06:71:
         06:00:3d:bd:f2:cd:69:dc:a0:ae:48:25:d2:49:a4:cd:cb:7c:
         b1:93:a4:a5:f8:7b:fe:5c:12:f9:cd:ce:e8:f0:17:db:23:e5:
         0e:b3:3e:bf:89:bc:82:b5:b6:d8:68:e9:e9:ad:60:a7:ac:42:
         9e:bb:4a:93:24:bf:c5:d2:cb:b1:82:5c:5d:62:67:55:cd:d2:
         51:5c:4e:50:81:5f:72:99:f9:8b:71:06:4e:c1:58:85:4f:a3:
         da:56:3a:09:2e:05:a4:fe:5d:a3:a3:69:c8:fb:db:e9:12:40:
         ed:28:f6:4b:c9:01:90:d1:ae:30:1b:d3:70:c2:a0:ac:75:8d:
         e4:03:bd:b0:b0:ae:da:19:61:42:2f:25:72:c6:b1:18:ca:08:
         33:67:1c:eb:d2:75:df:74:c7:b2:89:f0:18:9b:f3:b0:af:f9:
         7d:84:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org