Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/ed703cd39220866627cdaa2066242ffc8d762d1e.roa
File:                     ed703cd39220866627cdaa2066242ffc8d762d1e.roa (raw, json)
Hash identifier:          97t+yet0mVTrimzFwnjJ4iNT9ehasGLXS/7wSuTH3vg=
Subject key identifier:   4D:B1:CD:98:FF:1A:9E:08:BB:D0:E8:2E:4D:4E:E2:9C:1D:7A:DA:3D
Certificate issuer:       /CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
Certificate serial:       0BF436
Authority key identifier: 0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/ed703cd39220866627cdaa2066242ffc8d762d1e.roa
Signing time:             Wed 24 Mar 2021 14:33:11 +0000
ROA not before:           Wed 24 Mar 2021 14:33:11 +0000
ROA not after:            Tue 24 Mar 2026 14:33:11 +0000
asID:                     28319
IP address blocks:        160.19.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783414 (0xbf436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
        Validity
            Not Before: Mar 24 14:33:11 2021 GMT
            Not After : Mar 24 14:33:11 2026 GMT
        Subject: CN=ed703cd39220866627cdaa2066242ffc8d762d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:58:28:d4:9b:fb:ed:a5:e4:f8:81:ae:35:
                    2f:e4:7c:9b:88:5c:c4:63:55:bc:74:78:e8:26:d8:
                    e6:f1:90:9d:75:ce:5d:07:fd:18:f4:e5:aa:b8:e0:
                    2e:a4:c1:f8:36:cc:fa:14:d4:b5:37:4b:39:a9:46:
                    15:b7:04:cf:1e:e2:76:72:62:4e:3c:74:ab:1f:0d:
                    a0:46:5c:0e:6d:79:26:e5:dc:8e:f9:76:da:cc:aa:
                    b3:f0:c1:7b:64:2a:d4:9d:fd:ce:f0:2d:25:72:92:
                    5e:59:67:4f:e2:8f:77:81:98:30:ce:59:7f:09:cd:
                    fb:dc:11:12:3c:1e:48:9f:ef:b2:53:e7:02:b4:50:
                    9e:8b:22:c7:f5:4e:e8:74:22:3c:00:3e:44:96:0e:
                    82:d7:2d:41:32:60:22:3c:9e:ff:9e:ae:b0:bf:fa:
                    bf:ac:4a:ce:6a:41:1f:d8:f1:a3:51:04:d0:46:3d:
                    8e:b9:57:8a:3a:9b:21:90:9b:17:36:23:21:92:91:
                    65:38:15:21:70:48:01:ed:35:af:7c:82:22:fb:36:
                    bb:ba:21:17:96:41:11:df:c2:c2:72:2c:21:41:c9:
                    0e:11:0a:a9:6b:e7:29:a5:6d:d2:60:ec:26:1b:ca:
                    85:e6:98:15:da:09:36:bf:f9:f3:e9:07:b2:03:eb:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B1:CD:98:FF:1A:9E:08:BB:D0:E8:2E:4D:4E:E2:9C:1D:7A:DA:3D
            X509v3 Authority Key Identifier:
                keyid:0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/ed703cd39220866627cdaa2066242ffc8d762d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/73c0dcfd4c271be5c9e543e84783482d9b25ef39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:3e:f8:16:9a:02:a1:06:52:2a:17:c2:da:74:0c:89:6e:5d:
         6b:8d:7a:2e:24:4c:29:f7:29:5c:c2:0a:f9:83:fc:39:30:25:
         14:48:17:20:75:19:48:f0:d1:13:1c:ba:4a:3b:70:b9:b6:d8:
         0c:f8:42:d7:99:d0:ae:93:7c:6b:e9:de:a7:7d:56:03:2c:c4:
         bb:97:c7:d7:4b:29:7c:1c:0f:d9:4a:b8:c5:c1:31:95:65:e3:
         46:50:15:01:66:c4:bb:5a:49:65:f8:1f:1d:f5:cd:fa:47:0c:
         7b:86:07:df:e6:25:74:41:dd:87:ba:c0:a2:56:5d:07:41:a6:
         23:ef:15:12:f8:9b:98:22:d5:d0:d6:08:41:b2:b3:9d:ea:b1:
         5e:ba:10:a6:5b:58:39:fe:cd:6a:39:df:c4:cb:7e:97:81:db:
         67:3e:ff:a9:88:3e:77:db:4b:8b:6e:b9:76:59:44:48:32:82:
         a5:57:dc:16:19:c4:c5:21:8c:e7:28:1b:81:fe:1f:b4:00:61:
         f0:d3:1c:46:a3:13:f3:e6:43:95:1e:83:98:f0:cf:76:0d:13:
         bd:0d:69:13:18:1e:c0:ca:df:bd:84:a4:ff:c6:e6:07:8d:88:
         c7:19:55:56:6c:a9:40:c8:ab:94:13:b5:6e:ed:ca:f1:96:a5:
         cf:84:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org