Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/eb6b87ebcfd72f38ef3f9ac8dfaf38fd0cc8b8bc.roa
File:                     eb6b87ebcfd72f38ef3f9ac8dfaf38fd0cc8b8bc.roa (raw, json)
Hash identifier:          CFE4NHRvWWpmbAz+mcBMV+lgdTcn11haeMe07c3aazY=
Subject key identifier:   28:44:0E:C0:79:48:FC:27:5E:74:A9:12:A5:F6:AF:29:48:8A:59:AF
Certificate issuer:       /CN=ad1db2aa734e6dcb93a8797a98a422a7f542f512
Certificate serial:       0809B9
Authority key identifier: C8:A9:2F:5E:C3:22:F7:EB:49:1E:AA:0B:B8:6B:31:A8:A3:2C:EE:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1db2aa734e6dcb93a8797a98a422a7f542f512.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/eb6b87ebcfd72f38ef3f9ac8dfaf38fd0cc8b8bc.roa
Signing time:             Wed 24 Mar 2021 14:29:41 +0000
ROA not before:           Wed 24 Mar 2021 14:29:40 +0000
ROA not after:            Tue 24 Mar 2026 14:29:40 +0000
asID:                     28093
IP address blocks:        200.114.104.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526777 (0x809b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad1db2aa734e6dcb93a8797a98a422a7f542f512
        Validity
            Not Before: Mar 24 14:29:40 2021 GMT
            Not After : Mar 24 14:29:40 2026 GMT
        Subject: CN=eb6b87ebcfd72f38ef3f9ac8dfaf38fd0cc8b8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:7d:fb:81:b0:a0:ab:4c:64:5a:b2:4c:a0:
                    12:e1:6a:9f:7a:84:d4:cb:ce:9b:7e:8c:74:b0:dc:
                    f6:33:49:dd:15:10:b5:83:19:85:75:e4:0d:4e:63:
                    c0:a3:4b:c8:66:85:7b:a4:f2:9b:54:e2:4e:19:e1:
                    38:56:ad:49:a6:c0:f0:75:05:ba:df:2a:b3:c5:c9:
                    7c:38:7f:3e:b6:d4:7a:07:78:b5:fd:5f:9f:5d:ca:
                    63:da:20:a1:b2:31:71:d0:a5:89:56:76:fe:a5:61:
                    49:37:1a:87:af:d6:65:f8:f1:12:06:d2:05:c8:26:
                    12:8c:25:df:7a:e7:19:c8:a8:7e:81:8e:45:b9:fb:
                    95:22:2d:d8:8e:6d:a6:27:55:3c:5f:4f:c3:a2:7d:
                    a4:97:4a:1d:d5:97:34:b4:ed:91:b4:64:c9:9f:65:
                    cc:f3:03:ca:c4:fb:ae:6d:2c:ec:2a:60:b7:b1:38:
                    4a:1d:e0:40:34:b9:d4:2b:3c:08:50:4a:8b:fe:a9:
                    2d:56:23:36:5a:6a:ec:08:77:87:9b:9b:81:be:b4:
                    51:3e:78:d9:d9:22:32:31:4d:86:20:ba:18:5a:1e:
                    c6:f5:45:ca:63:4c:cd:c7:98:74:08:e3:43:da:66:
                    03:fa:10:d5:dd:01:38:68:54:b0:18:54:6d:c1:46:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:44:0E:C0:79:48:FC:27:5E:74:A9:12:A5:F6:AF:29:48:8A:59:AF
            X509v3 Authority Key Identifier:
                keyid:C8:A9:2F:5E:C3:22:F7:EB:49:1E:AA:0B:B8:6B:31:A8:A3:2C:EE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1db2aa734e6dcb93a8797a98a422a7f542f512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/eb6b87ebcfd72f38ef3f9ac8dfaf38fd0cc8b8bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/ad1db2aa734e6dcb93a8797a98a422a7f542f512.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:7f:c6:81:28:39:8d:02:7b:0c:ad:c7:19:57:88:20:43:
         b9:81:c9:94:1a:79:e8:57:e0:f4:07:d7:6d:0f:d0:c4:7f:0a:
         82:a2:cf:7d:6f:53:4c:b3:52:84:2e:68:10:ca:dc:3a:63:94:
         48:fb:35:2f:c5:a9:f8:9d:f3:39:ef:09:8c:a8:18:0e:15:93:
         b0:90:92:e6:c4:0e:bb:68:1f:3c:38:5c:2e:b9:cb:4e:75:10:
         7c:f3:df:0f:64:6c:db:b9:ab:eb:f1:f3:d8:2d:01:c3:52:35:
         e8:e7:06:c5:49:f1:5b:3d:7e:9f:c3:ef:b2:fd:f9:ee:23:c3:
         41:c8:cf:28:ad:5c:9d:e5:b3:b0:40:da:aa:ac:f3:a6:10:c9:
         5a:1b:55:56:25:65:d6:f0:77:7e:7b:a2:fc:89:5d:58:2f:a9:
         17:de:0d:c7:b0:67:0a:f6:a1:66:46:bc:41:4d:ec:77:29:dc:
         d1:4e:da:d4:91:e9:06:cc:d3:15:a5:19:c7:6d:7d:00:c1:9c:
         cd:7f:87:a0:41:6e:fa:9b:f1:9e:a8:f7:d9:6a:f1:f7:32:4a:
         09:fc:e3:5c:3e:80:c0:58:92:82:31:40:b7:f8:b7:4e:33:3d:
         66:d7:a1:ce:4c:6e:b5:ee:d5:b2:1e:42:71:d2:c1:79:79:ad:
         e6:ce:31:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org