Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/54ef7c03502171b314cd1151013aa7bda769137f.roa
File:                     54ef7c03502171b314cd1151013aa7bda769137f.roa (raw, json)
Hash identifier:          paeNep5GR6oE0wroCiGTDR+zC8nAgFJuirUoSIwW5eI=
Subject key identifier:   B5:7C:7C:BB:AC:79:49:9E:F1:8A:F1:65:96:C2:3B:C5:DF:A4:6D:4F
Certificate issuer:       /CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
Certificate serial:       0D402A
Authority key identifier: 7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/54ef7c03502171b314cd1151013aa7bda769137f.roa
Signing time:             Wed 24 Mar 2021 14:37:10 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     28050
IP address blocks:        200.74.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868394 (0xd402a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=54ef7c03502171b314cd1151013aa7bda769137f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:ab:c8:b0:56:1f:a9:59:bb:67:31:13:6a:
                    3a:9e:39:22:05:55:77:88:ed:3e:ce:8f:2a:54:69:
                    62:8c:6c:3e:76:6d:a0:b5:0b:65:ca:be:bf:0d:69:
                    da:b3:42:8e:b8:f0:f6:8d:2e:c0:e2:d1:53:d6:b6:
                    31:ce:19:0b:8f:6e:34:c5:86:9b:33:6f:ca:08:41:
                    17:de:d1:7a:22:6e:c3:08:c9:b9:9a:9f:b3:6b:1b:
                    69:00:6c:08:de:06:f2:14:d2:4b:53:6e:33:eb:96:
                    8a:bd:e5:73:b4:3f:6d:f9:76:21:13:a8:44:81:88:
                    40:34:54:a0:23:50:ba:88:61:a4:69:b2:df:a3:bd:
                    6f:57:fc:75:9d:9b:e0:4d:9e:9d:a3:25:20:ff:31:
                    02:b5:fd:e7:7d:1f:43:73:1a:86:f1:1e:77:b7:f0:
                    23:cc:0d:47:35:c1:1c:15:b9:c0:7b:9b:a4:9e:e8:
                    e9:ed:17:bb:0d:ec:78:69:78:c4:e0:61:55:5d:01:
                    c2:89:a2:8e:e2:b8:a8:93:90:ee:6d:75:64:dd:e3:
                    fc:76:d3:6a:aa:d6:43:f1:3f:19:6a:87:bf:ce:cd:
                    bb:14:61:59:e8:85:28:e4:b7:52:fd:91:4c:0b:ba:
                    3b:73:bb:7e:70:0f:82:2b:d9:4e:69:6d:4f:2e:32:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:7C:BB:AC:79:49:9E:F1:8A:F1:65:96:C2:3B:C5:DF:A4:6D:4F
            X509v3 Authority Key Identifier:
                keyid:7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/54ef7c03502171b314cd1151013aa7bda769137f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:d0:c1:c2:6f:b6:54:41:85:62:36:70:9b:38:b2:bf:58:30:
         28:4c:9b:ff:d3:e9:98:07:4f:1c:46:2c:6c:9e:72:57:5b:13:
         02:9b:a0:55:d5:1f:4b:81:62:38:38:6c:e6:1f:d9:e9:37:64:
         3c:8a:9e:11:ca:32:9f:be:35:83:71:56:17:85:4b:01:27:6f:
         b0:fb:2b:49:f6:9b:05:b8:13:97:d6:44:df:de:7f:99:97:e1:
         a5:06:da:ce:2f:4e:3b:91:9b:6c:f1:98:06:02:8a:6f:f9:8c:
         b1:0d:93:aa:8f:26:a5:3f:01:ae:c7:47:36:ab:a4:67:4e:03:
         0d:bd:0d:41:bd:4c:2d:3d:1d:e1:ea:05:e2:c7:51:9d:07:de:
         22:7c:3f:c2:d9:db:41:9d:8b:91:da:3f:64:24:3f:bf:b0:03:
         91:44:5e:cf:53:08:b4:c7:5b:3b:42:fd:76:d4:fa:a6:95:6f:
         7b:69:6e:3c:52:f5:d3:b7:1e:09:da:73:f5:87:30:3e:ca:43:
         cc:f0:f2:2d:03:8c:20:60:af:79:e3:56:78:1f:ce:30:09:d2:
         85:30:3c:4e:3b:a7:19:75:df:6b:a7:1f:d2:48:7c:07:00:1d:
         a2:68:96:8d:06:92:7a:98:e8:87:72:3b:66:6d:57:0c:d6:7f:
         e5:95:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org