Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514.roa
File:                     f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514.roa (raw, json)
Hash identifier:          xiKHaxHfj7k+YtkjtiQUGYhE7DzTSsx1fMDKwqN4us0=
Subject key identifier:   C3:16:0D:78:B7:9A:3E:B8:AE:C8:A7:2B:6B:90:74:D5:0F:83:BF:05
Certificate issuer:       /CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
Certificate serial:       03FC5D
Authority key identifier: 3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514.roa
Signing time:             Wed 24 Mar 2021 14:32:10 +0000
ROA not before:           Wed 24 Mar 2021 14:32:10 +0000
ROA not after:            Tue 24 Mar 2026 14:32:10 +0000
asID:                     265740
IP address blocks:        128.201.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261213 (0x3fc5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
        Validity
            Not Before: Mar 24 14:32:10 2021 GMT
            Not After : Mar 24 14:32:10 2026 GMT
        Subject: CN=f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:c1:2c:98:9c:8b:fb:98:8c:25:df:65:ab:
                    c5:f5:c8:a8:ce:d0:60:62:8f:03:d8:2a:5b:a7:31:
                    02:63:7a:79:e1:3e:1b:fd:31:b4:41:ea:2f:94:2c:
                    4f:f1:7b:30:82:1b:37:3d:72:fe:db:83:0b:dd:7c:
                    c5:99:5e:e0:d4:d6:cd:08:b0:b5:12:cc:2c:99:e9:
                    61:09:2e:e5:29:df:61:fe:bc:7d:79:1b:8e:0d:06:
                    bd:bf:60:02:e4:c7:3b:7e:78:3d:00:5c:63:b7:ee:
                    21:ad:4f:e3:76:a3:a7:b2:04:a0:22:e7:fd:cf:ce:
                    6e:cf:ae:93:88:40:a5:10:26:d5:7b:d3:59:35:ad:
                    f7:f7:52:71:c6:87:c0:80:46:52:4f:ee:c0:5b:ee:
                    ca:ee:94:43:e9:63:30:dd:1e:1d:90:56:f7:20:b6:
                    4f:4a:f9:a4:45:4a:12:7b:3f:4d:f8:54:59:eb:2f:
                    62:d9:c2:94:9f:ab:83:28:0e:d8:96:19:f4:54:1a:
                    c4:a8:f2:fb:c9:75:f2:9b:33:a9:51:a8:f6:bd:59:
                    f7:ae:95:14:7e:62:28:b2:ac:f8:9a:82:f4:6e:b7:
                    fa:12:58:63:02:f8:8d:88:39:21:48:eb:1c:03:aa:
                    63:9b:13:79:b4:95:5e:7c:fb:06:4a:a9:4a:fb:e3:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:16:0D:78:B7:9A:3E:B8:AE:C8:A7:2B:6B:90:74:D5:0F:83:BF:05
            X509v3 Authority Key Identifier:
                keyid:3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/f0a44db9eba07c94f17c1c0d9ee13b45bf6d3514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f3:80:eb:2a:6e:4c:62:85:e0:ed:fa:c2:29:cc:d6:9e:eb:
         b6:d0:40:0a:30:f3:cc:5a:4f:56:5e:c9:d5:cd:77:c6:5b:5a:
         b0:99:f8:24:93:8f:8b:ac:c5:e1:bf:e3:24:65:9b:9f:40:5d:
         0e:83:a7:40:0e:a1:d3:04:36:f6:96:4b:f5:2c:ca:98:42:88:
         33:55:78:04:a9:84:0e:f1:fb:64:98:82:a2:87:51:44:71:1a:
         3c:06:32:5f:b9:6f:0c:25:e6:85:9b:bd:01:8e:a7:17:73:89:
         a2:f6:eb:a8:13:4a:85:b0:b2:d7:e9:c7:0d:69:27:1f:08:c5:
         60:e2:4c:46:82:82:23:12:38:6c:e6:a0:65:8c:e8:13:ab:e7:
         75:73:8b:d0:a4:e2:5d:a5:40:6d:01:a2:50:79:05:db:ba:bc:
         eb:1f:c6:e3:e3:65:e9:1d:48:86:9d:c8:96:1a:94:82:43:77:
         e2:f9:c0:46:46:fb:6d:ea:bc:02:b4:68:98:9e:a3:03:7a:1e:
         20:e8:5f:6c:e8:2d:68:fd:f7:e0:4d:8c:e8:4a:ba:0d:28:4f:
         9a:cc:ff:c1:d1:17:a9:3f:fe:90:a9:09:ff:77:d7:8f:68:29:
         c3:87:e8:3a:17:d0:74:93:15:06:2a:40:0c:0d:96:40:d0:2e:
         44:29:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org