Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/833bba84a6e392da2210915754bffb7a7dd50467.roa
File:                     833bba84a6e392da2210915754bffb7a7dd50467.roa (raw, json)
Hash identifier:          XELaoADFPxxdySPkWp9cSDaGHlAw8hggvcGN3X2IMYM=
Subject key identifier:   81:D9:71:67:73:FA:2F:28:CC:90:5A:C4:22:EA:53:17:05:3F:9C:C7
Certificate issuer:       /CN=8009f9ca0e90186684c967a6b8c12708f8ab41b2
Certificate serial:       0E3AC3
Authority key identifier: DD:8D:9C:37:DC:EE:DF:16:0F:72:B9:5A:01:B3:E3:96:2F:B5:CD:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8009f9ca0e90186684c967a6b8c12708f8ab41b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/833bba84a6e392da2210915754bffb7a7dd50467.roa
Signing time:             Wed 24 Mar 2021 14:47:34 +0000
ROA not before:           Wed 24 Mar 2021 14:47:34 +0000
ROA not after:            Tue 24 Mar 2026 14:47:34 +0000
asID:                     263767
IP address blocks:        167.250.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932547 (0xe3ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8009f9ca0e90186684c967a6b8c12708f8ab41b2
        Validity
            Not Before: Mar 24 14:47:34 2021 GMT
            Not After : Mar 24 14:47:34 2026 GMT
        Subject: CN=833bba84a6e392da2210915754bffb7a7dd50467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:48:d1:f8:16:be:a7:8a:c1:1e:a4:53:a2:
                    18:10:64:20:4f:58:98:df:85:10:6e:6b:1f:bb:25:
                    d3:b6:a1:60:88:93:2f:79:ad:2d:f6:f1:97:d0:9f:
                    75:a5:aa:16:6a:bc:b0:09:51:ce:a4:63:0c:93:fe:
                    1e:71:c9:1e:40:67:b2:9d:34:16:07:d7:4e:30:4b:
                    8f:bd:0b:34:01:a0:8f:bf:f4:f5:5e:79:bf:09:70:
                    83:c4:f7:4d:c6:8d:81:dc:ff:9b:99:9b:9f:55:c9:
                    1c:56:1d:0d:b6:63:65:0b:92:72:61:32:81:42:30:
                    7a:49:dc:59:83:f7:13:e3:2d:09:1d:dc:02:35:59:
                    cb:70:84:39:05:11:e4:b1:21:f7:66:c7:19:91:28:
                    f8:a5:84:3c:67:13:cd:5e:95:e9:b3:18:95:4f:8b:
                    35:96:b6:0b:f6:83:4b:65:99:16:ac:dd:17:a9:5c:
                    9b:95:a9:af:37:04:32:57:7b:fe:99:e7:ab:ff:6f:
                    fd:ad:cb:c9:95:99:0c:82:3c:63:31:3a:0e:9c:00:
                    b9:8b:a4:dc:da:2c:2a:8a:42:00:ea:4a:9c:6e:19:
                    c7:82:d3:73:6e:0d:83:90:84:ab:17:13:a7:b8:5b:
                    7e:51:be:3b:57:2f:c7:b8:5e:5a:01:09:da:ac:f5:
                    8b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D9:71:67:73:FA:2F:28:CC:90:5A:C4:22:EA:53:17:05:3F:9C:C7
            X509v3 Authority Key Identifier:
                keyid:DD:8D:9C:37:DC:EE:DF:16:0F:72:B9:5A:01:B3:E3:96:2F:B5:CD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8009f9ca0e90186684c967a6b8c12708f8ab41b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/833bba84a6e392da2210915754bffb7a7dd50467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/8009f9ca0e90186684c967a6b8c12708f8ab41b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:40:ed:c7:26:42:de:08:4d:8f:be:9e:de:d7:49:8f:6b:77:
         b9:0b:09:fc:b7:e2:5c:8f:d2:06:2e:9e:81:d5:53:0d:83:c0:
         d7:fa:b3:71:65:49:91:e1:fd:a7:72:21:0b:d4:2d:7f:47:31:
         dd:3d:46:cb:28:7a:b9:cb:a3:1c:06:ed:1f:a1:26:a3:9f:e0:
         5b:b2:a7:79:e3:85:d8:4b:5b:67:68:75:ad:40:eb:6d:b0:72:
         0c:1e:56:31:05:01:ba:75:41:9e:2e:7a:23:e1:45:c8:12:38:
         ec:60:a1:fc:80:93:6c:c2:74:d8:df:71:6a:14:08:b0:f4:15:
         88:63:ac:a1:54:be:34:1a:6b:a8:7c:59:f9:78:c3:f4:3c:86:
         db:18:60:74:57:30:da:8f:ec:2a:44:07:b6:38:b8:8e:60:be:
         8e:3b:7f:32:1c:10:ee:c9:b3:9f:b6:dc:1d:d3:71:00:6d:0e:
         cc:33:b0:0b:cd:38:59:db:ed:50:1b:be:af:49:f5:d9:cd:2b:
         e7:7b:72:a4:58:11:16:c6:87:81:6b:24:80:fc:51:06:e5:83:
         a4:c9:57:0f:24:5e:f2:c4:dd:dd:95:81:0f:89:8b:86:9f:3f:
         a2:ce:21:80:77:af:8e:65:4d:c5:aa:9c:1c:99:80:36:6c:e1:
         3e:55:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org