Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/c3cfd746591c57d166264e061484cadca26d21e6.roa
File:                     c3cfd746591c57d166264e061484cadca26d21e6.roa (raw, json)
Hash identifier:          05lKyDz8w0Xqnv6LK3PkR5/OI3mAbyx7zhZ4YEfXY5w=
Subject key identifier:   24:A4:92:F2:B7:56:02:D5:FC:A2:A6:C8:FA:F0:25:B8:EE:73:58:45
Certificate issuer:       /CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
Certificate serial:       0D3D6E
Authority key identifier: 7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/c3cfd746591c57d166264e061484cadca26d21e6.roa
Signing time:             Wed 24 Mar 2021 14:37:10 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     28050
IP address blocks:        200.74.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867694 (0xd3d6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=c3cfd746591c57d166264e061484cadca26d21e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:50:e5:28:63:f8:93:9b:13:c9:24:8b:f2:
                    66:03:b6:62:8b:23:03:61:7e:9e:bb:15:f3:c4:c1:
                    d7:1d:ee:7e:f7:43:c5:15:aa:d3:6f:80:be:ad:65:
                    b5:75:bf:ad:3d:7d:22:b7:95:20:f4:ea:85:10:58:
                    a7:56:cd:4c:93:a2:cc:2d:f2:e0:75:87:77:17:35:
                    8b:85:eb:79:39:d1:19:91:5c:c2:6b:19:f2:f1:0a:
                    0a:71:ff:f5:b7:64:e8:03:c4:b9:61:a3:d6:22:2e:
                    f1:9c:0b:9f:a4:d0:5f:e4:db:6b:96:d2:96:f4:cc:
                    9c:69:c2:ab:10:ca:54:77:47:b8:f5:69:e9:fc:e4:
                    af:f9:72:9a:99:00:1d:a5:40:97:ee:76:71:d1:08:
                    cf:5c:c6:86:f5:3d:f8:f9:d1:40:f0:c8:bb:bc:80:
                    9f:f0:e5:64:4a:21:0e:42:54:05:43:50:8f:90:41:
                    6b:53:20:95:1a:0b:7a:5a:b4:15:13:18:52:a4:d4:
                    ae:c4:af:6b:7a:d4:c3:02:dc:fe:17:c0:17:8e:f6:
                    95:05:6d:45:7d:fe:88:86:35:ae:db:97:98:40:cb:
                    f5:d5:e7:87:f5:bb:2b:78:1c:15:9c:50:57:fc:ea:
                    a6:3c:11:e5:1a:10:12:72:97:ac:5e:fe:3d:bc:9d:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:92:F2:B7:56:02:D5:FC:A2:A6:C8:FA:F0:25:B8:EE:73:58:45
            X509v3 Authority Key Identifier:
                keyid:7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/c3cfd746591c57d166264e061484cadca26d21e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:9c:95:1f:ba:36:cf:a5:42:73:c1:cf:df:6e:cd:51:2a:
         32:8c:a7:6c:8f:17:f3:dc:ef:dd:08:ce:1c:a8:69:18:3b:58:
         d8:9c:ef:d8:ae:d8:01:fd:54:76:19:3c:84:79:45:85:e7:71:
         a2:74:df:9a:c8:73:a6:43:da:68:5a:de:cf:f5:93:7d:0e:85:
         c5:cb:34:7f:c0:a3:f2:ad:58:62:1b:db:27:3c:68:51:76:c0:
         70:89:a7:9f:f1:81:7d:6d:5f:d1:ac:9e:34:e1:16:9a:ec:bb:
         7f:6f:6b:cc:4a:e2:ab:b5:4c:cc:ad:ea:e6:f7:34:a6:f1:d9:
         db:3f:94:69:0c:7d:cc:3d:7c:cb:90:14:5c:26:6c:cf:41:d7:
         d3:c4:0f:f7:71:d5:da:d6:1d:6e:a7:39:e5:79:15:88:70:a7:
         78:39:aa:95:00:b6:cd:e1:02:32:3f:b3:af:57:6d:0e:24:ab:
         9a:a8:71:22:62:aa:c3:96:d0:50:13:c9:31:0c:7c:a2:0c:73:
         87:0d:cc:2e:34:c4:2d:ce:bd:dd:e5:ae:66:13:5b:e2:34:3f:
         da:a6:42:ea:d8:82:da:98:a0:21:55:c1:11:1a:7f:1e:90:5f:
         a0:be:4e:0d:d0:e9:02:fa:b6:09:6c:34:b7:1c:9d:50:c5:a5:
         df:00:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org