Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/1075cef9a32c6359f2c4b4e75712733dbd14f727.roa
File:                     1075cef9a32c6359f2c4b4e75712733dbd14f727.roa (raw, json)
Hash identifier:          2u64sy+8CdwMPoqzgLitoXSWauPQiSttF88SXpwCDG8=
Subject key identifier:   E1:EB:8B:51:ED:8D:B6:05:77:F3:81:B7:F1:3A:F3:AB:40:40:9A:CA
Certificate issuer:       /CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
Certificate serial:       0DD748
Authority key identifier: DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/1075cef9a32c6359f2c4b4e75712733dbd14f727.roa
Signing time:             Wed 24 Mar 2021 14:39:00 +0000
ROA not before:           Wed 24 Mar 2021 14:39:00 +0000
ROA not after:            Tue 24 Mar 2026 14:39:00 +0000
asID:                     27784
IP address blocks:        179.0.204.0/24 maxlen: 24
                          200.0.63.0/24 maxlen: 24
                          200.10.209.0/24 maxlen: 24
                          2801:0:4d0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907080 (0xdd748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
        Validity
            Not Before: Mar 24 14:39:00 2021 GMT
            Not After : Mar 24 14:39:00 2026 GMT
        Subject: CN=1075cef9a32c6359f2c4b4e75712733dbd14f727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:8a:73:72:33:a6:4a:2a:52:ba:90:7c:60:
                    7c:7d:9e:9b:13:f1:44:77:fe:60:60:68:52:17:c3:
                    f0:51:c0:51:70:8a:86:69:2e:c2:25:28:c3:d1:fd:
                    8d:f2:88:8f:27:96:96:bb:1e:91:8b:b1:71:13:46:
                    4d:2d:b3:81:5f:47:a2:cf:38:e9:ce:fa:9d:d1:54:
                    3b:75:e2:54:ba:b1:1b:cd:ff:e1:4d:75:03:79:86:
                    7e:30:a8:09:43:74:52:39:e5:14:c8:99:10:73:40:
                    8e:ab:d5:71:50:a1:bf:a5:41:ee:87:d7:bf:67:c8:
                    fa:fa:cc:a4:d3:18:e2:10:14:94:22:98:01:86:a4:
                    ab:f5:ff:43:38:57:bf:89:7c:54:98:85:12:18:f8:
                    2c:91:9f:24:07:2c:aa:31:19:a5:9e:5d:4e:6f:25:
                    a9:5c:89:7b:b6:33:e9:56:32:93:d9:ab:68:22:ea:
                    75:35:e1:56:8a:3e:8b:d9:43:75:f5:68:2f:30:46:
                    00:00:e2:da:09:a8:2a:28:21:bf:34:bd:b8:f2:76:
                    11:46:7e:84:64:4d:36:82:21:87:74:d0:97:25:a9:
                    2f:2d:17:8f:c2:30:49:98:58:25:8a:91:bb:8f:4e:
                    2a:80:fe:44:d8:f8:7a:bf:74:f4:64:4e:e2:32:37:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EB:8B:51:ED:8D:B6:05:77:F3:81:B7:F1:3A:F3:AB:40:40:9A:CA
            X509v3 Authority Key Identifier:
                keyid:DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/1075cef9a32c6359f2c4b4e75712733dbd14f727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c1b10fed8d73bc6fca227c206b112f9a09361b3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.204.0/24
                  200.0.63.0/24
                  200.10.209.0/24
                IPv6:
                  2801:0:4d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:d4:20:9e:6c:63:3d:b3:2d:7e:f6:0c:b1:f8:c8:18:8f:a8:
         c3:f9:1f:68:39:ec:75:02:2e:20:66:1d:f5:85:db:c9:fd:cc:
         79:d5:9e:5f:d1:ca:9c:0d:cc:0a:15:3c:43:c1:85:10:3e:e5:
         d4:20:8a:26:39:81:57:19:a9:e0:61:f1:65:38:0a:0a:8b:8f:
         f4:db:5d:d6:84:64:fd:98:7c:92:e0:30:2f:c8:42:42:c0:bd:
         e5:ed:28:87:e7:30:05:8f:e2:b9:25:f8:79:46:6c:12:11:8e:
         8e:52:94:23:62:4a:25:47:d1:da:b6:56:b2:23:d5:63:0c:63:
         2e:c9:5d:b9:34:64:9a:60:20:e6:e2:01:65:79:35:a6:41:85:
         22:36:a8:8a:bd:0a:f5:8f:9a:98:7e:22:99:2b:04:6c:e1:33:
         db:88:f7:66:77:52:a3:50:2d:66:92:9f:37:1f:fe:d2:7a:89:
         3d:57:b4:82:38:1e:db:2a:2d:44:1b:9e:8b:28:5a:67:00:ec:
         0a:26:3e:26:4f:0a:09:9c:b1:da:a3:21:c1:c7:df:6d:b6:7a:
         fe:78:9c:24:ab:b3:21:2d:db:fd:cb:c5:b6:26:63:c6:0f:36:
         5a:17:b5:9b:4f:0f:c6:d2:4b:81:5c:d7:09:5f:08:0e:bd:d8:
         47:0f:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org