Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/827f4551-af9c-4662-8b80-2faf240c7791/891b04cbc6a72875f77d26c9dc13299b16730cb8.roa
File:                     891b04cbc6a72875f77d26c9dc13299b16730cb8.roa (raw, json)
Hash identifier:          td8kbZoQlsZ2sR6BOlDmkEJRzeI6TvGBKHXZ3rJWPEo=
Subject key identifier:   75:48:59:51:09:C9:9A:F3:9A:18:96:1C:82:EC:55:FD:88:E6:57:52
Certificate issuer:       /CN=d08b995d743e2e05e2a00f98775012bb7b5926b3
Certificate serial:       0C3177
Authority key identifier: 02:17:A5:35:1D:A0:72:47:CE:F3:2A:56:63:B7:38:B6:D1:48:53:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d08b995d743e2e05e2a00f98775012bb7b5926b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/827f4551-af9c-4662-8b80-2faf240c7791/891b04cbc6a72875f77d26c9dc13299b16730cb8.roa
Signing time:             Wed 24 Mar 2021 14:44:44 +0000
ROA not before:           Wed 24 Mar 2021 14:44:43 +0000
ROA not after:            Tue 24 Mar 2026 14:44:43 +0000
asID:                     61513
IP address blocks:        201.131.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799095 (0xc3177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08b995d743e2e05e2a00f98775012bb7b5926b3
        Validity
            Not Before: Mar 24 14:44:43 2021 GMT
            Not After : Mar 24 14:44:43 2026 GMT
        Subject: CN=891b04cbc6a72875f77d26c9dc13299b16730cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:36:fa:f5:1e:f1:20:dc:8b:81:92:80:a8:
                    5c:1b:1a:43:e0:02:b9:e5:75:b4:43:95:71:ff:78:
                    29:03:f4:62:a8:20:07:ab:62:a1:94:9f:bd:48:23:
                    db:f2:22:44:06:c3:d1:63:14:7e:21:8a:59:be:53:
                    f3:92:ca:5c:44:d0:68:61:14:14:c1:61:d0:63:8d:
                    4a:15:83:2f:55:75:c1:38:5c:59:18:c9:ce:9e:3c:
                    28:20:f2:f8:77:7c:55:a0:1a:64:0c:66:a9:0e:0f:
                    a0:6c:5d:cf:7e:89:47:26:e9:9c:34:ff:f9:cf:bb:
                    5b:6c:e6:5c:50:a8:87:b7:d8:ed:f8:ae:f1:fb:aa:
                    c3:b0:df:ca:4b:47:19:84:28:2a:e6:54:e7:a7:1d:
                    81:78:a9:9f:e1:22:83:fe:29:ce:88:3d:89:20:0f:
                    e0:2a:71:d4:0b:41:76:7b:3d:f2:6f:69:ed:8f:4a:
                    29:28:03:75:d4:74:83:d7:bb:b7:2b:87:6c:96:c8:
                    88:f8:7e:ac:38:69:e1:b6:13:e3:46:ca:b2:cb:a0:
                    7c:2c:4c:10:c1:4a:07:4b:42:50:07:0e:f8:66:25:
                    38:13:62:9c:35:3e:37:27:88:e4:ee:02:19:05:6d:
                    4e:a3:41:8f:ca:fd:15:af:22:e9:9f:ac:5b:e2:39:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:48:59:51:09:C9:9A:F3:9A:18:96:1C:82:EC:55:FD:88:E6:57:52
            X509v3 Authority Key Identifier:
                keyid:02:17:A5:35:1D:A0:72:47:CE:F3:2A:56:63:B7:38:B6:D1:48:53:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d08b995d743e2e05e2a00f98775012bb7b5926b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/827f4551-af9c-4662-8b80-2faf240c7791/891b04cbc6a72875f77d26c9dc13299b16730cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/827f4551-af9c-4662-8b80-2faf240c7791/d08b995d743e2e05e2a00f98775012bb7b5926b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:64:03:7c:4b:ad:7e:c3:69:5b:4b:84:e2:11:34:9d:ff:78:
         d6:2e:a7:f3:65:e2:cc:5e:f6:bc:fe:61:73:3f:7e:9f:0e:d5:
         3b:f4:33:ff:a8:5a:2a:d0:1a:c3:bf:14:8c:5b:40:d1:df:8a:
         3f:eb:2e:4e:93:3b:46:17:4a:5e:33:84:23:27:cc:ab:7d:bf:
         a7:a3:33:f8:9d:cd:0b:e6:c7:5a:1d:90:fb:f1:d0:9d:9e:3a:
         8f:a9:21:21:be:9b:c7:ea:a3:49:c5:22:bf:41:e7:d0:36:a6:
         2d:10:78:79:3a:31:d2:11:54:2f:d7:6e:18:26:1d:14:a6:74:
         53:38:57:75:78:4f:d5:bc:a2:72:6b:28:97:6a:7f:d0:4d:ba:
         09:6e:f5:3c:87:cb:fb:3a:3a:36:89:62:03:69:dc:fe:9e:77:
         1e:a8:46:8f:33:9a:8e:e0:ce:76:69:8a:42:77:3e:e6:ea:26:
         0d:da:1d:93:69:8b:09:66:70:f8:be:8d:04:f4:1b:0e:b9:49:
         73:59:13:bc:c4:8b:b2:61:29:0c:ed:91:23:59:97:16:64:44:
         1b:c5:c1:7a:6e:41:74:81:28:29:5c:64:94:95:a7:97:99:62:
         94:c2:2a:67:4b:77:b4:7d:83:06:63:3a:f3:89:93:f0:39:3b:
         cc:ff:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org