Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/c000caee4b3d79ee4999e8584f7a924d847d222e.roa
File:                     c000caee4b3d79ee4999e8584f7a924d847d222e.roa (raw, json)
Hash identifier:          4DxDzbTc7sGnAV34Df2wIZ53kiKOczNP7iTSD2U8gZI=
Subject key identifier:   F6:42:E4:3C:15:6F:06:14:62:74:35:36:85:B1:37:CC:65:1E:93:8B
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       0D33E8
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/c000caee4b3d79ee4999e8584f7a924d847d222e.roa
Signing time:             Wed 24 Mar 2021 14:43:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:08 +0000
ROA not after:            Tue 24 Mar 2026 14:43:08 +0000
asID:                     32098
IP address blocks:        170.150.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865256 (0xd33e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Mar 24 14:43:08 2021 GMT
            Not After : Mar 24 14:43:08 2026 GMT
        Subject: CN=c000caee4b3d79ee4999e8584f7a924d847d222e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f2:3c:3e:eb:fe:4d:4a:a8:d3:af:f8:93:de:
                    40:5a:dc:ad:94:90:bb:03:bf:11:e5:da:f1:8c:6b:
                    59:74:f4:be:b3:70:6a:e4:1d:0f:7c:7c:d5:fa:4b:
                    06:b9:2a:6f:be:5e:03:f4:16:78:bf:92:ab:ad:ed:
                    01:75:dc:10:d0:57:4d:80:09:fe:6e:65:02:72:99:
                    f6:7f:cb:72:21:76:c4:f2:ba:7e:c3:47:40:03:45:
                    f7:32:f1:47:7e:f1:bc:68:aa:22:b5:cf:e7:4c:ce:
                    b4:b2:41:5d:ec:9b:6c:36:53:55:64:ba:d5:1a:80:
                    87:69:2d:a2:17:b2:64:02:4f:39:6f:6c:fe:6a:1a:
                    2f:ef:ac:b6:be:37:e4:20:c6:a2:3e:d1:15:a5:d9:
                    d7:9c:78:c7:84:b5:8b:15:33:3a:26:1f:ad:74:8a:
                    97:66:b0:34:ae:67:ec:2b:8a:af:4b:0f:cc:b6:67:
                    7a:b0:cb:a6:b9:df:b7:0c:e7:8c:d9:bd:63:74:d3:
                    5e:98:84:f0:df:ae:34:a7:91:3b:32:49:83:4a:42:
                    f6:80:0a:0a:aa:74:af:78:c9:36:2d:d0:bc:ea:a4:
                    1e:30:c9:5c:f4:06:06:a1:b9:36:f3:5c:55:0a:43:
                    1e:93:45:65:f6:ba:a4:f3:eb:ba:ce:22:75:6f:7a:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:42:E4:3C:15:6F:06:14:62:74:35:36:85:B1:37:CC:65:1E:93:8B
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/c000caee4b3d79ee4999e8584f7a924d847d222e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:bc:17:5a:10:c4:b6:c5:12:7c:8b:b2:da:6c:2f:25:91:
         1d:ad:33:cd:e9:d7:9c:55:49:db:e3:64:95:32:6a:a0:9c:af:
         5d:25:1b:eb:d4:47:1a:b9:b0:17:30:f7:0d:56:4c:6a:10:43:
         44:1c:82:58:6f:93:0d:0b:33:a0:64:da:55:bd:5e:ae:e2:40:
         c5:c8:f6:93:20:64:fa:32:7f:6a:a3:08:1e:1a:e6:3d:30:cb:
         60:e9:2c:ff:e8:61:05:a2:05:eb:de:39:68:2f:90:23:50:fa:
         01:93:bc:ed:19:22:88:8e:e5:fd:70:19:bd:81:2c:f4:0e:7c:
         e8:87:5c:43:60:84:65:d9:17:f2:f0:80:36:73:21:40:0a:ad:
         d4:0d:64:20:4d:4d:51:86:f7:7a:92:aa:2f:6d:76:3b:b2:b2:
         8f:d5:d0:6f:99:5d:4a:ca:5a:62:67:08:53:88:4b:28:91:bb:
         9a:b4:82:82:11:24:5c:12:12:b9:c3:eb:68:bf:c1:ed:1d:c0:
         f3:01:e5:37:d6:6a:45:f2:33:d5:75:15:51:45:8b:44:7b:be:
         68:12:85:55:64:54:17:e9:3d:65:75:cb:97:2f:b7:b2:1c:37:
         0e:eb:4a:20:ce:90:60:34:53:be:03:37:1d:f0:27:28:e9:37:
         50:85:6e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org