Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/efe97fe20bdb2754352f56980dda62cf4cfc88f1.roa
File:                     efe97fe20bdb2754352f56980dda62cf4cfc88f1.roa (raw, json)
Hash identifier:          Uelo8u8RRypYQolooWaB1jbWlHkYUeYVaIlKJlqa3rs=
Subject key identifier:   20:81:C2:69:CC:71:23:E8:B3:04:72:6D:91:17:40:05:12:93:ED:CF
Certificate issuer:       /CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
Certificate serial:       03817E
Authority key identifier: E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/efe97fe20bdb2754352f56980dda62cf4cfc88f1.roa
Signing time:             Wed 24 Mar 2021 14:43:12 +0000
ROA not before:           Wed 24 Mar 2021 14:43:12 +0000
ROA not after:            Tue 24 Mar 2026 14:43:12 +0000
asID:                     28504
IP address blocks:        200.33.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229758 (0x3817e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
        Validity
            Not Before: Mar 24 14:43:12 2021 GMT
            Not After : Mar 24 14:43:12 2026 GMT
        Subject: CN=efe97fe20bdb2754352f56980dda62cf4cfc88f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:96:2f:74:0a:40:14:a4:e4:d1:3c:ef:59:
                    7a:f3:da:3e:ab:df:50:16:7f:62:bd:5b:01:85:e6:
                    d0:27:50:9e:a2:31:8d:dd:01:41:c4:0e:2b:f1:72:
                    f1:eb:3d:83:56:42:0e:55:6a:8d:91:dd:eb:7c:be:
                    24:3d:43:ec:da:52:f1:78:92:3b:a2:7f:2c:a1:3a:
                    78:33:37:1e:5b:76:b2:b9:c2:7e:09:7b:2a:84:da:
                    24:f6:ab:0f:41:c3:a3:e0:1f:42:fd:cb:b5:a1:68:
                    be:c8:44:80:72:63:ab:4e:93:78:1d:88:23:e3:44:
                    e8:eb:48:e9:4e:60:fe:ac:0a:b3:39:ee:16:8e:ff:
                    ab:96:ba:61:96:25:f8:3c:31:4e:6f:59:12:26:bf:
                    e1:ff:d5:a9:7d:25:b2:36:45:f3:ac:15:10:28:9e:
                    88:cf:80:0e:f8:67:37:61:33:ae:3a:95:bd:16:c9:
                    d5:6e:1a:1d:60:9b:cc:ee:ee:a9:16:04:fe:79:27:
                    af:3d:a7:cc:ae:a3:82:f4:3a:84:88:d3:4c:bc:a1:
                    97:7f:2a:01:ba:62:24:d7:d5:81:4f:10:84:ef:9f:
                    3d:0d:ab:5c:81:44:fc:2c:51:73:45:10:34:aa:3c:
                    a4:74:8d:8b:95:4a:bc:39:34:d9:9c:a9:7f:38:49:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:C2:69:CC:71:23:E8:B3:04:72:6D:91:17:40:05:12:93:ED:CF
            X509v3 Authority Key Identifier:
                keyid:E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/efe97fe20bdb2754352f56980dda62cf4cfc88f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/b1eadf44e23f1448be60c0468eb9f4738d5692ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:37:55:26:5d:65:f3:7f:62:3a:93:02:7e:d7:ab:92:69:
         4d:43:30:43:62:6f:7c:f2:72:97:83:12:04:cf:c1:bc:86:53:
         b3:7c:95:55:ab:ad:2b:ce:21:9d:ff:68:ce:e1:66:e7:d5:8e:
         0e:bc:77:28:3f:17:18:5b:a0:8d:0e:84:ec:f7:6f:eb:eb:a5:
         52:92:03:fc:ca:64:ad:db:c7:2a:42:04:2f:2e:10:18:95:14:
         c8:15:b9:4a:d7:3d:ba:ca:e1:0b:fe:cb:3e:5f:3b:74:54:e0:
         97:41:8a:5b:4b:f6:1e:35:6c:a4:a8:40:57:26:f5:12:99:6a:
         24:3b:ea:0c:88:d6:ba:3c:8b:6d:8f:7f:d0:6c:6d:9b:ef:ae:
         2c:c8:70:ee:eb:8b:1f:1b:80:67:ff:8f:d6:9f:b0:d7:e1:8d:
         48:89:ec:28:e5:e9:11:ce:0d:03:d0:d6:19:88:54:5f:17:6b:
         aa:81:bd:2c:78:f7:c7:1d:f6:a2:78:82:e1:04:8e:40:dd:69:
         71:5d:ee:9c:6e:b6:8f:bb:c0:df:d6:5b:63:cc:45:61:cc:f5:
         aa:d1:d6:0c:29:5e:2f:b1:96:60:a6:9c:22:0e:7d:36:3f:1e:
         ed:db:aa:91:b4:2d:24:bb:87:61:4f:dc:6d:eb:ce:da:7a:99:
         6b:49:fa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org