Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/da4ad7e6f73726fd318e4ccd15028e6a8fbbd3b4.roa
File:                     da4ad7e6f73726fd318e4ccd15028e6a8fbbd3b4.roa (raw, json)
Hash identifier:          iGLWiBDwpkh18o+3rWZbBGHIz1qMZ3Cj3U+ywLM/wlM=
Subject key identifier:   6B:E2:21:DC:A4:94:54:C7:D7:C1:25:F8:71:A5:9C:09:37:6B:47:00
Certificate issuer:       /CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
Certificate serial:       1E3371
Authority key identifier: 0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/da4ad7e6f73726fd318e4ccd15028e6a8fbbd3b4.roa
Signing time:             Thu 30 Mar 2023 13:40:50 +0000
ROA not before:           Tue 23 Mar 2021 14:33:11 +0000
ROA not after:            Tue 24 Mar 2026 14:33:11 +0000
asID:                     28319
IP address blocks:        160.19.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979249 (0x1e3371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
        Validity
            Not Before: Mar 23 14:33:11 2021 GMT
            Not After : Mar 24 14:33:11 2026 GMT
        Subject: CN=da4ad7e6f73726fd318e4ccd15028e6a8fbbd3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4b:65:ea:59:88:f2:cc:6a:bd:5b:38:25:cd:
                    38:17:c1:d0:76:43:da:8b:c9:cc:6e:b9:ca:e3:57:
                    fc:67:e4:f1:bd:4c:8c:03:ce:0b:63:58:fe:46:c9:
                    7f:ac:fd:49:bb:27:a6:c1:4b:7d:7d:e4:d9:1a:2a:
                    63:67:0a:fe:e3:59:d5:01:80:e5:c5:63:f6:d8:03:
                    3a:45:16:2a:85:ac:31:c5:5b:b3:3b:7b:2f:e5:85:
                    5b:30:78:8b:92:07:3c:29:cb:5c:f7:bd:c7:a7:25:
                    32:f8:4d:9c:90:71:ff:48:60:da:87:a2:7e:61:2e:
                    e5:b9:24:58:db:18:bd:e3:48:dd:ba:a9:8c:4e:80:
                    0f:1a:46:cd:dc:07:4f:a1:32:32:93:5d:76:18:9e:
                    1b:87:d7:04:e9:3e:8f:17:e7:f6:be:95:17:ed:86:
                    44:1a:d6:26:b4:dc:72:c1:52:07:64:51:17:05:c3:
                    07:4e:fc:e3:e6:56:01:55:62:bd:68:22:76:df:16:
                    83:09:d6:a5:6c:93:51:24:32:a9:c6:59:05:55:25:
                    3a:fb:16:7e:0e:71:62:9a:47:2d:30:31:db:f0:97:
                    20:6a:80:ee:00:4e:46:e7:83:c6:95:ac:0c:af:92:
                    00:47:31:78:04:ee:c3:f1:67:d3:31:d7:86:1f:a7:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:21:DC:A4:94:54:C7:D7:C1:25:F8:71:A5:9C:09:37:6B:47:00
            X509v3 Authority Key Identifier:
                keyid:0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/da4ad7e6f73726fd318e4ccd15028e6a8fbbd3b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/73c0dcfd4c271be5c9e543e84783482d9b25ef39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:a3:4b:3d:d4:40:b2:d4:ad:8b:e8:3d:64:b8:cf:91:6b:
         c7:df:8f:38:61:d5:4d:82:cf:c5:3c:f2:6b:e0:45:a4:2f:af:
         1b:65:f4:b3:4b:ef:55:39:93:08:66:8a:74:4b:e7:5d:cc:95:
         72:1f:ee:42:d3:d7:ea:8c:fc:a7:30:7a:c3:4c:45:b8:fc:44:
         02:cd:a9:0d:a3:b0:42:29:f7:d0:94:0c:9e:e4:61:96:b3:37:
         72:ce:3c:fd:27:88:5e:70:c2:df:dd:83:97:d4:7f:7f:7a:2c:
         6f:ee:89:c9:93:cd:ee:0d:78:df:92:bc:9f:97:a9:83:34:e8:
         36:52:fa:ed:e2:e2:fe:87:08:24:31:d6:63:53:c6:b1:5b:b0:
         23:35:53:b6:48:21:03:b4:86:41:5f:0c:22:7d:02:63:02:ab:
         eb:14:c1:c6:a8:e3:31:be:33:7a:76:28:c8:7a:63:11:2e:86:
         bf:8f:82:41:c7:92:0a:ed:4a:8d:da:72:d0:48:39:b8:55:1f:
         15:27:68:cb:b9:c4:a5:7d:eb:64:cc:22:cb:c1:a3:1d:1f:08:
         2b:1a:05:ca:ed:a4:e5:d8:d0:b2:01:93:02:4b:0e:76:48:82:
         c6:ea:6b:48:cf:76:a3:e5:69:05:e8:85:9b:03:65:a1:e1:0a:
         3e:a7:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org