Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73d79546-280c-4d92-851a-aa9be3c0cf91/6efac651c349ca5e4157290bcdd2ed515b3c2d35.roa
File:                     6efac651c349ca5e4157290bcdd2ed515b3c2d35.roa (raw, json)
Hash identifier:          PPYW3ThNf+rZQw4DqEB7507DYfOo92zCeJFrHlS66E4=
Subject key identifier:   82:97:41:07:EB:5C:F0:BD:FF:02:02:01:7F:29:2E:98:D6:3F:8D:3D
Certificate issuer:       /CN=9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81
Certificate serial:       0B9040
Authority key identifier: 39:D3:25:EB:38:A7:F7:9D:89:B6:12:C6:5E:33:F1:D1:45:B2:5F:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73d79546-280c-4d92-851a-aa9be3c0cf91/6efac651c349ca5e4157290bcdd2ed515b3c2d35.roa
Signing time:             Wed 24 Mar 2021 14:42:45 +0000
ROA not before:           Wed 24 Mar 2021 14:42:44 +0000
ROA not after:            Tue 24 Mar 2026 14:42:44 +0000
asID:                     52422
IP address blocks:        200.115.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757824 (0xb9040)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81
        Validity
            Not Before: Mar 24 14:42:44 2021 GMT
            Not After : Mar 24 14:42:44 2026 GMT
        Subject: CN=6efac651c349ca5e4157290bcdd2ed515b3c2d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:8b:b8:72:d7:45:6e:94:4f:c7:5d:1d:fb:
                    1a:8c:2b:35:58:47:fa:df:88:87:63:81:3d:6e:3d:
                    d1:cc:33:84:55:55:bb:41:8c:ad:16:e0:0a:89:60:
                    69:b3:ad:03:34:95:b9:62:39:c5:62:35:8f:05:86:
                    1e:cf:aa:95:8b:8a:90:b2:54:ad:b1:48:f5:12:09:
                    0d:da:1d:c7:31:7e:3f:b6:85:ca:76:7f:2d:f9:99:
                    88:17:98:d5:21:01:ce:49:02:33:77:35:44:73:40:
                    0d:d0:01:87:88:00:45:5b:26:3b:eb:cc:b6:39:8c:
                    d8:9b:41:3d:17:6b:bb:33:93:d1:58:43:40:fd:f6:
                    cd:84:c6:0f:64:63:55:36:3f:c3:2d:03:2e:95:f6:
                    1d:f1:bd:5e:ea:27:4a:9d:f3:6b:29:a1:f9:89:9c:
                    3a:92:2d:13:75:87:5d:ad:11:df:22:eb:4e:30:36:
                    f8:c2:e5:2a:72:49:66:7f:7e:14:11:ff:ec:c7:14:
                    72:39:5b:31:c1:0d:2d:bd:b6:d9:8e:65:87:fc:f3:
                    9d:1f:04:e7:d4:b3:62:6c:06:e9:1c:b6:6f:d8:b7:
                    71:bb:63:a5:83:a1:ce:c4:2a:c4:03:8a:a4:87:69:
                    d7:33:f1:40:4a:4f:35:63:e2:04:ab:03:4f:2a:f2:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:41:07:EB:5C:F0:BD:FF:02:02:01:7F:29:2E:98:D6:3F:8D:3D
            X509v3 Authority Key Identifier:
                keyid:39:D3:25:EB:38:A7:F7:9D:89:B6:12:C6:5E:33:F1:D1:45:B2:5F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73d79546-280c-4d92-851a-aa9be3c0cf91/6efac651c349ca5e4157290bcdd2ed515b3c2d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73d79546-280c-4d92-851a-aa9be3c0cf91/9e95d3d8e30cd9a2136865f5fa5c9a4c3ae8ac81.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:69:c6:ee:a7:4a:98:eb:21:00:97:10:a0:be:8f:e2:ee:df:
         34:26:d6:66:f3:8b:6c:2e:0e:83:d6:61:c8:ed:44:8a:e4:6f:
         3d:45:b0:c3:11:72:2b:0b:e7:53:57:13:f2:b6:f7:dc:8b:7c:
         42:64:10:32:3e:1f:60:e8:28:0c:dd:bf:6c:7b:88:3b:5c:a6:
         6e:89:8c:b6:9a:88:5a:fc:ce:55:4e:c2:69:2e:71:3f:6a:96:
         4b:da:ef:cf:a6:1c:39:f8:2e:94:33:ab:1f:50:92:65:87:2d:
         d3:97:a8:a2:9f:6e:85:64:38:14:55:d5:ee:a1:dd:5f:f3:cc:
         ed:bd:d2:73:78:ff:dd:89:8b:7a:2e:f4:10:c2:a1:5c:ce:3d:
         71:d3:3a:eb:cd:f0:61:d2:dc:42:28:ea:96:d6:2b:98:fa:c2:
         fa:38:01:2a:47:64:f4:99:32:3c:19:39:77:31:49:dc:a0:47:
         bf:a1:64:05:b7:af:b7:93:a4:de:24:70:bd:d9:5e:85:38:4d:
         e0:c5:90:23:d9:00:7d:c3:2b:b7:ca:a0:ef:e3:32:3f:26:88:
         fc:6d:7b:fb:45:2e:c8:6b:dc:aa:1c:0c:a9:67:bc:2c:1b:d0:
         22:48:3f:85:28:44:33:14:f2:a4:ba:65:0f:6b:da:4e:d2:32:
         b6:63:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org