Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/fa53e95e999d408374b898694411175c2da4cf7f.roa
File:                     fa53e95e999d408374b898694411175c2da4cf7f.roa (raw, json)
Hash identifier:          0SbeS5RoFOliSJQ0xsp2RLFfUAckiJ2mByyJShR4hTk=
Subject key identifier:   B3:1F:57:FA:2A:CB:1D:67:AD:4D:62:E4:8F:DE:1A:08:14:13:11:02
Certificate issuer:       /CN=b1e681b3a50e20044b7b83f7f72b1363596eba66
Certificate serial:       0DEA02
Authority key identifier: 8E:02:F7:B4:C4:46:AC:9B:CF:3E:74:6A:7C:CA:9B:91:B7:91:38:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1e681b3a50e20044b7b83f7f72b1363596eba66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/fa53e95e999d408374b898694411175c2da4cf7f.roa
Signing time:             Wed 24 Mar 2021 14:33:09 +0000
ROA not before:           Wed 24 Mar 2021 14:33:09 +0000
ROA not after:            Tue 24 Mar 2026 14:33:09 +0000
asID:                     265769
IP address blocks:        164.163.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911874 (0xdea02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e681b3a50e20044b7b83f7f72b1363596eba66
        Validity
            Not Before: Mar 24 14:33:09 2021 GMT
            Not After : Mar 24 14:33:09 2026 GMT
        Subject: CN=fa53e95e999d408374b898694411175c2da4cf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7c:8b:ea:a2:5d:b9:4a:3b:88:f6:db:43:0f:
                    3e:82:ab:c3:71:a0:83:2a:f7:4c:bc:3a:c0:d1:18:
                    30:2f:77:89:bd:ed:c4:40:77:db:ac:04:73:c3:94:
                    90:9b:61:f0:2b:a6:61:80:9e:4e:05:2f:57:3b:ca:
                    a1:38:98:d4:04:79:1e:2f:a2:c6:5f:80:26:84:77:
                    1e:64:bb:11:af:b0:20:45:f4:13:35:6a:b6:0f:48:
                    49:06:2c:aa:c6:10:1f:da:4e:16:5b:f5:79:8e:2d:
                    09:97:2a:ba:7f:92:f0:10:e3:2f:9b:39:c8:3f:a8:
                    08:ac:70:ed:b1:92:67:b9:f0:6b:69:56:63:48:36:
                    b7:e7:77:3c:b0:ec:32:0b:d0:d3:f9:38:86:d5:ff:
                    82:12:63:78:94:10:93:37:eb:d1:23:1a:54:cf:a1:
                    fa:86:66:6a:cc:c0:ef:3d:89:d0:b6:45:0d:00:7d:
                    7f:8b:72:28:56:12:94:4c:41:06:17:fc:ce:56:1f:
                    26:96:49:59:60:0a:06:de:8e:b4:db:f0:a6:77:e0:
                    82:10:5d:bb:5b:e1:a7:fd:b3:d7:91:e9:f0:ce:7e:
                    6c:35:b8:bd:65:97:59:33:fc:f3:09:32:97:54:d9:
                    b9:ae:5e:58:36:ac:1c:1b:0e:2d:a3:f7:ca:68:a6:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1F:57:FA:2A:CB:1D:67:AD:4D:62:E4:8F:DE:1A:08:14:13:11:02
            X509v3 Authority Key Identifier:
                keyid:8E:02:F7:B4:C4:46:AC:9B:CF:3E:74:6A:7C:CA:9B:91:B7:91:38:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1e681b3a50e20044b7b83f7f72b1363596eba66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/fa53e95e999d408374b898694411175c2da4cf7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/b1e681b3a50e20044b7b83f7f72b1363596eba66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:4d:59:98:a6:53:6e:39:62:f0:4c:f2:54:25:0e:89:e3:d2:
         2c:02:ae:90:e7:de:46:42:21:61:43:7b:5a:93:8a:5b:55:31:
         92:52:da:50:d6:4e:48:de:99:2d:d0:e4:b9:94:24:25:14:17:
         dd:44:e7:b9:a5:f6:17:f6:b2:f7:a5:70:46:ac:34:63:46:e7:
         04:8b:61:11:2f:81:3e:74:86:dc:1e:25:db:c5:cd:11:d4:7e:
         08:2d:db:f4:9a:21:ce:53:1f:22:73:ef:b5:c6:1e:06:c1:fb:
         e5:f8:4e:e8:74:3e:73:e7:5b:12:6d:6b:b8:90:38:29:bc:80:
         ed:53:3a:8a:97:94:be:d5:80:b8:f0:80:ae:ff:48:e2:69:a6:
         0a:1b:c6:7e:02:a8:fe:42:4b:8e:ce:a4:f2:fd:e0:e2:ab:66:
         77:3d:f9:db:ca:6d:17:01:a7:cb:61:d1:54:df:c8:b2:8e:4b:
         c9:d4:4d:f7:18:69:59:11:9d:46:12:57:e3:42:8d:44:fd:c6:
         85:03:29:f1:e4:d7:ef:2e:26:0e:44:77:6b:93:c4:d5:2a:f7:
         be:5c:4d:3d:54:e1:4f:3d:87:7c:20:20:87:a0:59:b1:20:23:
         d5:02:7e:d5:ed:d7:4b:ca:10:2b:42:2a:22:47:93:44:69:c0:
         e5:12:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org