Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a2e1dac-965b-479d-a095-2106c6f3906b/bc16693253e6b38ffa466b3eece8ad3c654ac1df.roa
File:                     bc16693253e6b38ffa466b3eece8ad3c654ac1df.roa (raw, json)
Hash identifier:          qu/LXbliUQljUXkGd1sUVYoCg5NQ3mNCyeqNdIpTqv0=
Subject key identifier:   EA:05:44:02:E2:60:EC:F1:9E:67:54:BE:39:94:49:4C:82:D9:72:2B
Certificate issuer:       /CN=345451bfa422dfc8d528e48ded86bbc870415636
Certificate serial:       0D42DE
Authority key identifier: 18:D8:8B:BB:AD:F9:A2:59:E7:E2:A7:E1:1D:1C:6E:C5:E1:91:67:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/345451bfa422dfc8d528e48ded86bbc870415636.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a2e1dac-965b-479d-a095-2106c6f3906b/bc16693253e6b38ffa466b3eece8ad3c654ac1df.roa
Signing time:             Wed 24 Mar 2021 14:43:03 +0000
ROA not before:           Wed 24 Mar 2021 14:43:02 +0000
ROA not after:            Tue 24 Mar 2026 14:43:02 +0000
asID:                     14178
IP address blocks:        200.33.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869086 (0xd42de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345451bfa422dfc8d528e48ded86bbc870415636
        Validity
            Not Before: Mar 24 14:43:02 2021 GMT
            Not After : Mar 24 14:43:02 2026 GMT
        Subject: CN=bc16693253e6b38ffa466b3eece8ad3c654ac1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:d0:59:7c:5a:80:ed:76:9c:f2:26:e5:cd:
                    0e:22:cb:a2:e5:0a:1c:3d:75:1a:ce:62:9c:9e:cc:
                    dc:44:4b:ae:03:5a:ed:6b:d6:d1:2b:bf:a3:4a:41:
                    e8:b7:72:93:f2:54:0a:64:0a:9e:12:4b:9e:28:4c:
                    60:ad:03:48:ef:19:24:b4:69:9d:44:16:93:bb:e1:
                    b2:61:34:a0:17:09:97:55:96:b9:59:96:23:02:50:
                    28:83:2e:3f:b4:67:50:7b:cb:4c:2a:1b:f0:b8:cb:
                    88:01:81:47:89:ed:cb:b7:57:68:f8:a8:2b:c7:16:
                    b4:e0:fc:58:45:30:58:bc:b0:a6:28:81:97:3b:6b:
                    b5:8b:87:5f:e4:a5:0a:95:9f:83:ac:76:a9:58:2a:
                    8c:ec:72:48:eb:61:e3:60:ed:1c:71:16:df:34:93:
                    33:9b:f2:2a:c2:6a:f2:1f:ab:63:ba:a8:cb:7b:2e:
                    0f:03:b6:49:53:37:34:5f:e7:33:f7:a6:cd:85:1d:
                    17:0a:6a:d9:1b:22:1d:2e:fc:cd:ab:79:f6:71:de:
                    7e:93:f8:08:ba:4b:8a:52:df:0d:ad:82:9b:bf:5c:
                    04:d6:68:5c:4d:39:61:d9:bc:e8:e1:51:fa:6a:ef:
                    fc:3b:27:f2:53:3c:ab:8e:c7:60:02:47:4f:ac:74:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:05:44:02:E2:60:EC:F1:9E:67:54:BE:39:94:49:4C:82:D9:72:2B
            X509v3 Authority Key Identifier:
                keyid:18:D8:8B:BB:AD:F9:A2:59:E7:E2:A7:E1:1D:1C:6E:C5:E1:91:67:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/345451bfa422dfc8d528e48ded86bbc870415636.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a2e1dac-965b-479d-a095-2106c6f3906b/bc16693253e6b38ffa466b3eece8ad3c654ac1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a2e1dac-965b-479d-a095-2106c6f3906b/345451bfa422dfc8d528e48ded86bbc870415636.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:52:5e:0b:46:bb:cf:a7:5d:3b:fa:a3:7c:57:59:ca:8b:
         13:55:ac:fc:5a:7b:09:db:91:9b:2c:97:9b:c2:89:96:96:fb:
         b0:3f:c9:8c:58:e1:26:38:ec:b0:a6:8e:bf:4c:c6:5f:47:1c:
         74:e5:1d:05:08:1c:eb:f5:a8:10:92:ac:03:ee:96:1a:5b:2a:
         59:3f:8d:d9:a0:fb:6f:98:db:5e:0e:33:e1:a9:74:a6:28:5f:
         e4:46:c1:c4:fc:4a:19:03:4c:71:38:a2:2e:98:e0:23:f7:05:
         6f:ad:09:2f:64:00:be:d7:ff:56:29:48:f5:8c:43:62:21:24:
         f4:08:43:48:40:60:97:d7:ed:da:c0:16:c6:0d:21:63:ab:fb:
         64:76:bd:8d:f8:44:10:61:5a:68:a0:46:a9:ff:c8:77:4d:78:
         de:aa:7e:49:a8:b7:07:65:b9:e2:11:d2:96:90:e5:5f:fe:1d:
         11:57:38:87:a9:39:3e:db:98:e8:9e:29:0a:17:fd:52:c5:ed:
         42:d7:aa:e1:dc:8c:09:bd:d0:c7:72:97:03:1a:8a:c3:4f:d3:
         b4:df:35:96:8b:eb:84:cf:e5:86:20:1a:e5:ba:59:b1:d1:87:
         c6:47:85:8b:d3:97:c6:0d:c6:eb:06:b1:07:36:7b:87:f2:ca:
         6d:5e:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org