Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2e7aabcfe80dd6deb24dd9eae1e048a756cca791.roa
File:                     2e7aabcfe80dd6deb24dd9eae1e048a756cca791.roa (raw, json)
Hash identifier:          R79t/xUqXTzgUTahqaMWPu8gWnWJ5+umCjhqAUyAPbU=
Subject key identifier:   44:C7:26:CA:7B:E9:AF:AC:13:CB:42:AD:60:B2:29:75:BE:B8:6B:7D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       101857
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2e7aabcfe80dd6deb24dd9eae1e048a756cca791.roa
Signing time:             Wed 24 Mar 2021 14:44:12 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054807 (0x101857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=2e7aabcfe80dd6deb24dd9eae1e048a756cca791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8a:0a:4c:40:cf:e9:ec:61:c8:4b:86:45:f0:
                    90:26:88:89:96:04:5c:3f:94:88:19:1c:e1:11:47:
                    40:a4:af:5e:18:8c:da:fe:cf:0a:49:af:43:c2:42:
                    df:79:8f:03:f8:a5:4d:6a:3e:0e:fb:75:bf:ef:6a:
                    76:54:a2:76:ee:96:7c:eb:7b:67:41:9e:5e:2b:6e:
                    6d:e4:74:ab:20:6b:7d:54:75:e9:ed:c4:6f:79:75:
                    f9:04:3b:86:ea:4c:15:15:22:c1:ad:0a:fe:9c:b5:
                    91:74:14:37:78:79:37:91:bc:f6:76:9b:fa:5f:96:
                    98:11:3a:1a:af:ff:21:13:79:1b:67:83:d4:8d:80:
                    84:9c:35:35:68:31:4a:7a:66:88:52:7f:98:c2:1b:
                    bc:48:12:93:9b:3c:26:49:e1:b0:aa:13:a1:f2:78:
                    e6:5e:93:36:09:18:a3:68:50:fe:94:91:cc:b6:86:
                    13:49:ec:9c:50:40:8b:0e:00:7c:45:59:b8:ef:56:
                    60:53:cd:8c:58:2a:8d:c1:bc:54:4c:d3:38:6f:85:
                    dc:fd:3b:7f:7b:0b:d7:79:c5:9c:69:a1:bd:32:c3:
                    8d:c1:f6:66:c6:c1:58:eb:de:ed:25:66:54:0c:b2:
                    e3:0c:1e:af:d6:6d:c2:76:1f:25:4e:a5:cf:98:36:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:26:CA:7B:E9:AF:AC:13:CB:42:AD:60:B2:29:75:BE:B8:6B:7D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2e7aabcfe80dd6deb24dd9eae1e048a756cca791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:cb:65:02:81:09:63:87:35:80:90:d4:20:f4:58:17:f2:
         d4:fd:4b:7f:8c:3c:79:26:89:2c:bc:47:f2:27:b3:39:77:80:
         99:70:9b:ef:69:99:f2:60:c9:2e:ad:13:a9:45:7b:5d:cd:35:
         80:54:2d:9e:ee:23:f1:d5:e1:88:ce:7f:61:b5:b6:aa:56:ab:
         a3:b6:24:c5:58:c1:ec:be:a6:85:0b:08:81:f2:eb:e4:d7:66:
         eb:04:d4:ae:20:b6:98:38:a1:58:48:2c:3d:55:ac:34:d0:cf:
         57:75:c3:75:08:18:a2:4c:9a:99:fa:5b:f4:59:75:7a:93:e1:
         29:36:3c:ca:50:e6:7f:26:8b:fd:14:8c:fb:00:c9:2f:3a:b7:
         f0:9a:35:02:18:1e:aa:d4:ca:50:b5:8a:43:26:b0:a8:99:91:
         83:9b:47:a7:6e:98:50:bf:32:8c:96:26:14:ee:bb:0b:85:a3:
         8d:11:89:dd:61:58:6e:85:ce:46:88:54:17:76:9f:f0:7c:6d:
         4b:a6:6f:bb:7a:31:5f:2c:f8:db:d2:62:ba:b1:db:6f:8a:08:
         f8:2b:9f:03:3f:be:03:d1:54:1d:47:80:6f:9c:b2:bd:93:dc:
         dc:56:7d:88:06:5e:bb:da:f1:b9:d5:eb:a9:22:0b:a3:1c:0d:
         bb:d5:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org