Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/43da8b68b575cf23bfaa3de64c3e8e2055c1d6d7.roa
File:                     43da8b68b575cf23bfaa3de64c3e8e2055c1d6d7.roa (raw, json)
Hash identifier:          eYeBkk6AB9SMjPbNBrkoMWrvLSlh5OY1JT+0KyDXhQA=
Subject key identifier:   F1:55:90:89:A8:BA:9B:FC:1C:75:2D:BC:E3:2C:D5:98:13:09:92:31
Certificate issuer:       /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial:       0D548B
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/43da8b68b575cf23bfaa3de64c3e8e2055c1d6d7.roa
Signing time:             Wed 24 Mar 2021 14:41:26 +0000
ROA not before:           Wed 24 Mar 2021 14:41:26 +0000
ROA not after:            Tue 24 Mar 2026 14:41:26 +0000
asID:                     27820
IP address blocks:        200.0.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873611 (0xd548b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138405134343f63286b605fe9165839fd04a4252
        Validity
            Not Before: Mar 24 14:41:26 2021 GMT
            Not After : Mar 24 14:41:26 2026 GMT
        Subject: CN=43da8b68b575cf23bfaa3de64c3e8e2055c1d6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6c:12:e1:f8:39:ce:d6:cd:76:6c:3a:a2:90:
                    9e:dd:07:84:07:3c:7a:be:aa:5e:45:1e:e4:71:25:
                    f6:6c:0c:fd:90:bd:2a:6a:80:5c:61:f7:59:e0:4a:
                    1b:ae:05:23:e0:51:9b:1f:78:83:02:4a:86:7d:56:
                    b2:d2:94:22:e7:1f:b1:f7:55:d7:ca:90:68:a4:e6:
                    4c:67:86:54:ff:7f:55:79:ba:36:15:f9:a0:2e:ea:
                    67:61:02:0a:1c:7b:eb:a8:f8:99:72:a5:1d:51:35:
                    c7:9f:dc:b3:13:2c:d7:4a:7e:2b:69:57:33:e4:74:
                    a2:be:be:e6:c9:61:09:7f:61:8b:f6:91:37:d0:3d:
                    4c:c4:39:29:a0:0c:f6:ad:0e:82:11:f6:b9:b2:cf:
                    3d:ff:6f:a0:79:1c:6f:1a:55:a4:ff:9d:6e:b1:44:
                    32:e1:76:e7:c5:6e:c9:25:37:13:51:cc:7f:67:e4:
                    b4:e8:cd:58:82:cf:b1:b8:6c:bc:ba:fd:65:bd:48:
                    83:53:aa:b5:f4:02:6d:87:68:2c:d6:a3:e5:0a:6c:
                    25:5e:3e:11:84:d2:1f:cb:15:e5:0a:5b:92:a3:cc:
                    4c:7e:15:3f:b9:5f:44:ef:f7:15:ad:e3:74:80:fe:
                    e0:24:1d:f7:18:14:e4:20:85:5d:12:56:93:d8:a7:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:55:90:89:A8:BA:9B:FC:1C:75:2D:BC:E3:2C:D5:98:13:09:92:31
            X509v3 Authority Key Identifier:
                keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/43da8b68b575cf23bfaa3de64c3e8e2055c1d6d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:d8:57:01:47:19:b2:40:0c:26:93:da:f7:15:47:f4:45:
         54:b7:ea:7e:f4:74:c8:ad:c0:2b:2e:42:9c:06:00:c3:4a:bc:
         52:18:54:4a:6a:2b:88:0b:3a:7f:0a:6d:34:13:44:b5:d2:12:
         06:05:b8:76:1b:cb:5d:e4:e9:58:25:76:19:ad:8e:a8:aa:8e:
         0d:6b:f2:27:5b:9e:c9:79:8b:84:ce:44:35:99:c8:5b:10:f2:
         00:7e:7f:70:97:c5:28:ae:64:d6:04:4f:a2:ff:c7:09:99:43:
         c2:59:e7:42:68:a4:33:ae:6b:b3:e2:a3:cc:a3:ee:f6:b1:47:
         14:1a:f3:44:9c:75:98:1e:73:fc:df:5e:1f:33:2e:7e:d0:90:
         0b:fb:f9:41:46:bf:42:84:89:a1:a2:38:2f:06:f1:fb:54:4c:
         70:34:63:23:af:ec:e4:ae:41:ee:83:30:e8:9f:a3:d1:3b:c2:
         8b:1d:83:81:ad:57:41:4c:23:e9:17:40:38:50:6d:da:99:06:
         26:67:f7:80:f1:42:fe:6f:06:24:6b:b8:d2:bc:fa:83:a5:39:
         f2:de:60:e7:c5:22:a4:e9:93:f2:6b:86:81:7b:c5:67:c7:59:
         6b:ce:79:af:35:1b:bc:a4:a5:1a:fd:f3:60:63:d0:fa:c9:5f:
         69:42:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org