Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/19f410bb5113d3b210808ef22a03e8a3d21bd5c5.roa
File:                     19f410bb5113d3b210808ef22a03e8a3d21bd5c5.roa (raw, json)
Hash identifier:          aLhL4sGrvdP12H5yl/jQYjN1GaxbCHwlHx9nVy541dU=
Subject key identifier:   BF:D8:57:93:CC:6C:BA:6C:85:77:12:86:04:69:6C:F0:E3:1B:EC:83
Certificate issuer:       /CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Certificate serial:       0D8CED
Authority key identifier: 8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/19f410bb5113d3b210808ef22a03e8a3d21bd5c5.roa
Signing time:             Wed 24 Mar 2021 17:08:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52499
IP address blocks:        200.75.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888045 (0xd8ced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=19f410bb5113d3b210808ef22a03e8a3d21bd5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:db:b4:28:8e:1d:80:53:d8:be:29:5f:f9:
                    96:31:33:41:c4:a4:08:bb:11:fb:7a:e8:23:73:8f:
                    a5:f9:4b:cd:41:b7:a2:6c:fe:3a:ae:16:3a:a0:88:
                    64:fe:bf:0e:9c:d1:58:1d:e3:03:d3:f7:85:38:5c:
                    83:d0:d8:6c:00:78:8c:b2:ef:0c:4e:1c:f5:06:6d:
                    b4:1b:9b:6f:18:9c:f3:82:43:07:26:97:42:f0:3a:
                    ca:ba:cf:06:8f:e2:1f:cd:05:9e:3f:20:b9:66:2e:
                    cf:f4:25:1a:9d:7e:a7:72:fd:c8:91:3a:46:e0:96:
                    0c:44:9e:1b:f5:7a:52:a3:e9:af:c3:21:24:ac:b9:
                    13:c5:5e:2e:fc:98:37:1d:64:f7:3c:d7:05:eb:8d:
                    d1:82:9a:cf:6e:ae:bb:8e:f2:33:e7:61:e7:5e:b1:
                    70:17:b5:fe:45:0a:a4:95:da:ec:0f:91:ae:f1:3b:
                    87:bc:86:cf:3b:93:2e:30:4a:75:fb:1d:5f:0f:f2:
                    85:cb:38:cf:2b:b6:10:9a:d3:88:9f:a8:e2:f4:e3:
                    63:83:d4:b0:0d:95:33:eb:b8:6c:f7:d7:49:4a:b2:
                    b4:95:ec:1c:55:9a:88:01:30:38:b0:59:15:c5:38:
                    f7:ad:61:95:93:bc:43:a8:54:9d:91:b1:81:23:82:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D8:57:93:CC:6C:BA:6C:85:77:12:86:04:69:6C:F0:E3:1B:EC:83
            X509v3 Authority Key Identifier:
                keyid:8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/19f410bb5113d3b210808ef22a03e8a3d21bd5c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:78:56:bb:da:5d:b2:f4:92:70:5a:d1:b0:4f:6d:bd:74:
         05:ef:4a:ac:02:c9:cb:0d:f4:07:87:80:0c:44:0c:d4:33:29:
         0d:44:45:de:ac:de:b7:f7:1e:2d:c4:5c:65:e8:31:40:8e:f3:
         a4:c2:2c:03:de:27:29:fa:86:6b:5e:c0:1d:38:0c:e0:b9:3d:
         b9:b4:c8:17:87:b6:ba:ba:56:01:77:2a:db:c9:6f:a8:95:bd:
         7f:43:cc:ef:55:a5:e6:d8:f4:c5:8d:a6:c4:f2:57:e5:c6:69:
         f0:bf:4f:77:a5:13:b6:74:aa:be:60:ae:99:9f:c5:65:47:a2:
         0c:0f:d0:c9:fb:79:c6:a5:87:d6:41:09:35:ab:f9:11:7f:5b:
         93:46:b9:8a:aa:c9:3d:97:d3:f3:c8:70:9c:54:04:1b:da:ea:
         d8:06:8f:5d:bc:4d:01:dc:ae:40:52:4f:73:dd:b2:8c:a0:46:
         4a:f0:48:b0:0f:d1:b1:3a:22:e5:67:16:1a:7c:c8:77:11:c4:
         ac:92:86:39:dd:ce:88:53:77:3d:ec:6e:0f:b4:4f:95:29:e5:
         95:ec:89:0e:3c:67:d3:a0:2d:4d:37:1e:1b:70:f0:4b:8d:5d:
         d2:8d:c5:f4:02:b4:43:e8:95:f9:85:6d:f3:11:5a:d6:96:b7:
         af:2a:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org