Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/0ee1a93058824f653c09124d0da0b3b19d04a216.roa
File:                     0ee1a93058824f653c09124d0da0b3b19d04a216.roa (raw, json)
Hash identifier:          3BUe0UCrbZ+qzNuOsFPb6zQEwDafD2Z1FYWxpiC345M=
Subject key identifier:   07:1B:67:9C:F0:1B:EA:19:43:F1:26:0D:AD:A4:0D:D7:2B:C0:5A:42
Certificate issuer:       /CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Certificate serial:       0DB179
Authority key identifier: 41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/0ee1a93058824f653c09124d0da0b3b19d04a216.roa
Signing time:             Wed 24 Mar 2021 14:46:16 +0000
ROA not before:           Wed 24 Mar 2021 14:46:16 +0000
ROA not after:            Tue 24 Mar 2026 14:46:16 +0000
asID:                     27669
IP address blocks:        200.108.129.0/24 maxlen: 24
                          200.108.132.0/24 maxlen: 24
                          200.108.142.0/24 maxlen: 24
                          200.108.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897401 (0xdb179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
        Validity
            Not Before: Mar 24 14:46:16 2021 GMT
            Not After : Mar 24 14:46:16 2026 GMT
        Subject: CN=0ee1a93058824f653c09124d0da0b3b19d04a216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:e9:2a:2d:c9:29:d5:b3:02:c8:ad:13:6b:
                    21:a4:2c:4d:0e:92:7f:0d:3b:94:ad:90:51:73:9d:
                    c2:43:41:a0:7e:0a:d5:30:51:c9:27:f9:9c:03:a6:
                    8d:c2:6e:1c:7d:16:cc:77:4f:30:50:29:14:31:46:
                    47:1a:04:b2:23:a0:27:a4:ee:30:96:b4:3f:22:b7:
                    9a:e3:38:c5:57:95:f7:8f:31:48:78:db:a5:d3:bc:
                    da:e8:e7:1d:fd:59:15:5a:d6:b9:7a:b3:5a:3e:4a:
                    8b:c1:18:e0:ce:13:05:6b:78:04:a7:76:d5:0d:51:
                    f5:23:4d:d8:a4:54:6d:02:b2:df:c2:28:2b:b6:3e:
                    cd:10:38:ac:d2:63:61:76:48:16:44:b2:a2:44:b2:
                    71:36:1e:87:9e:4a:66:a7:2c:d8:10:22:72:7a:f0:
                    09:9d:ac:3b:78:8e:aa:bb:62:cb:30:77:89:33:07:
                    e9:67:38:20:af:1e:39:97:61:12:8a:14:5b:5d:2d:
                    eb:8f:80:ce:f6:a0:00:64:ca:d4:f9:5a:24:a9:d0:
                    34:a9:d1:b2:cb:05:2b:ff:48:f3:c3:37:b1:9e:50:
                    f4:ee:a9:9e:e2:f1:7f:c8:35:f9:dd:a5:f1:2b:d5:
                    49:d0:85:ae:37:e4:2c:01:d8:95:dd:59:89:71:36:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1B:67:9C:F0:1B:EA:19:43:F1:26:0D:AD:A4:0D:D7:2B:C0:5A:42
            X509v3 Authority Key Identifier:
                keyid:41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/0ee1a93058824f653c09124d0da0b3b19d04a216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.129.0/24
                  200.108.132.0/24
                  200.108.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:15:2f:f5:16:db:93:09:db:8f:12:08:1c:d3:9b:e4:b4:51:
         a3:f7:a7:6a:13:ad:f6:08:d3:60:ca:60:d9:b8:59:6f:b6:c1:
         e2:07:07:2d:56:63:2f:66:28:53:a8:44:25:f1:8f:de:3e:9e:
         55:a7:65:16:58:f7:e0:81:b6:04:3c:9b:4b:b0:dc:91:b9:90:
         94:67:e3:22:a9:11:88:f5:5b:d2:b2:3b:57:c0:a1:a9:f4:4b:
         5b:da:0c:06:6e:0b:07:5b:c7:fa:d8:de:f5:27:40:78:32:09:
         0d:b5:81:dd:4a:64:04:c1:a4:60:7c:e3:6b:33:ee:74:8f:de:
         76:af:2d:ff:1a:af:31:e3:7c:16:a0:63:92:c9:60:0f:06:f5:
         b6:c3:78:7f:41:d7:76:2e:cb:f1:70:cd:e0:ea:7d:3f:b2:5b:
         bb:9a:5e:22:14:65:1a:b3:ea:53:37:5b:fb:0e:c5:5a:66:96:
         c5:ce:4b:39:79:9f:11:fe:bc:f9:60:ed:11:1e:3a:b7:e4:dc:
         d4:2b:73:9c:ae:82:64:22:a8:71:ec:66:64:69:4c:97:02:31:
         79:90:7f:e7:c7:bd:1b:91:33:c7:66:6c:a9:61:66:ba:ca:df:
         6e:4c:37:53:c7:9b:b9:35:84:8e:bb:01:35:1b:2b:34:89:f4:
         e4:69:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org