Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8bb5ab6a-b91f-439b-bdfb-eb3c43470d36/0145b8eb5d960b66c2cc4eb67df6ec394e073c88.roa
File:                     0145b8eb5d960b66c2cc4eb67df6ec394e073c88.roa (raw, json)
Hash identifier:          O4PGltDXMZe+KXaN+tfkBERlbHLL8iYsmnEes5CcSFQ=
Subject key identifier:   06:8B:E5:79:E0:5E:52:D6:83:08:E9:C1:9E:72:84:18:9D:05:32:9A
Certificate issuer:       /CN=381efa69921156a0e39916e9ee427edc5b434527
Certificate serial:       156EB4
Authority key identifier: 02:C7:27:8B:3A:9B:83:5F:D1:02:8B:29:03:F9:9D:7C:06:7F:8A:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/381efa69921156a0e39916e9ee427edc5b434527.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8bb5ab6a-b91f-439b-bdfb-eb3c43470d36/0145b8eb5d960b66c2cc4eb67df6ec394e073c88.roa
Signing time:             Mon 07 Mar 2022 22:30:44 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28045
IP address blocks:        200.1.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404596 (0x156eb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381efa69921156a0e39916e9ee427edc5b434527
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=0145b8eb5d960b66c2cc4eb67df6ec394e073c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d1:7a:33:57:96:29:36:6a:ee:bd:77:c5:90:
                    cc:a8:3d:ae:33:ea:9a:1d:35:4d:d8:64:4d:a5:da:
                    4c:fb:42:d1:a0:6e:9c:65:fd:da:2e:da:e8:48:20:
                    02:6e:b7:19:fe:38:c4:62:a6:a4:20:b3:ea:63:4f:
                    53:66:5f:f5:9b:17:7f:25:8f:f7:fe:c1:7a:a9:b0:
                    e8:3e:85:9a:c4:aa:38:6d:0d:65:be:cc:7b:2a:b2:
                    f9:a0:b0:59:58:77:97:d7:fc:34:44:70:de:5b:f6:
                    24:07:f0:fe:a6:14:c2:98:91:bb:1a:f7:bf:e1:4d:
                    cd:c9:00:c9:fd:3f:a9:35:45:a4:68:15:46:a6:42:
                    71:86:a9:af:5d:1a:36:11:7b:e2:23:57:91:e5:93:
                    2e:cd:08:7e:3f:bb:8a:f7:dd:df:42:cb:e5:87:96:
                    23:ac:f9:52:5c:61:fd:1d:92:4c:88:a0:7e:bf:55:
                    f9:37:af:ca:40:56:97:fe:b3:67:ed:44:db:cc:f8:
                    a6:05:e9:00:33:52:1d:54:9c:65:83:f3:6e:ad:df:
                    57:79:78:94:3c:a5:63:21:6e:e7:a8:3b:8b:d5:5d:
                    2f:fb:85:50:2f:e1:8d:99:9b:66:cb:8d:6c:68:93:
                    2e:ea:6a:bd:8e:1d:f7:34:4e:85:ad:96:1a:76:7f:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8B:E5:79:E0:5E:52:D6:83:08:E9:C1:9E:72:84:18:9D:05:32:9A
            X509v3 Authority Key Identifier:
                keyid:02:C7:27:8B:3A:9B:83:5F:D1:02:8B:29:03:F9:9D:7C:06:7F:8A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/381efa69921156a0e39916e9ee427edc5b434527.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8bb5ab6a-b91f-439b-bdfb-eb3c43470d36/0145b8eb5d960b66c2cc4eb67df6ec394e073c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8bb5ab6a-b91f-439b-bdfb-eb3c43470d36/381efa69921156a0e39916e9ee427edc5b434527.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:18:06:32:61:19:0c:06:68:c7:ca:9b:fb:12:8c:fe:76:9c:
         1a:0b:b7:c9:09:d5:e3:3c:d4:b1:79:54:1a:84:87:39:d2:10:
         a7:ad:be:d1:fb:93:0f:98:8f:ba:cc:eb:bb:de:41:1b:7c:8d:
         03:6e:14:73:b9:e9:bf:00:25:c6:3e:7f:fb:85:e6:db:bd:f7:
         99:4b:6b:34:7c:0f:f9:8e:8d:9d:70:e4:05:5a:78:d0:0d:46:
         1d:29:3c:9c:d6:5d:4c:c9:72:c7:b5:2d:3e:cf:09:ff:92:21:
         4e:50:68:94:12:65:01:c2:76:d3:88:ed:2e:a8:96:7e:d2:59:
         0f:05:cd:2f:81:83:ac:51:c7:a0:30:25:da:28:f9:89:1c:22:
         8e:35:48:1a:3c:7b:69:8b:b7:e7:f1:8f:10:40:f7:8b:98:99:
         ab:e6:75:1a:74:0d:d9:3b:b1:ae:12:34:ab:78:51:5f:5b:e9:
         bc:dd:34:05:51:7f:80:f5:cb:0e:79:8e:2a:b8:72:6a:6e:7b:
         af:d1:64:78:3c:d4:a0:57:44:5c:19:e6:d5:96:48:27:2b:2c:
         93:40:a0:fb:2e:92:3d:a9:c7:ac:07:d6:2b:ad:56:eb:d1:27:
         33:0a:56:a2:c8:08:ca:37:ac:3e:a9:4f:19:71:5a:18:21:73:
         68:05:8e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org