Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8501278-77ef-48dc-a207-e655d406a0a2/fb30ed39af5c207b66467bcd6560200983e09f92.roa
File:                     fb30ed39af5c207b66467bcd6560200983e09f92.roa (raw, json)
Hash identifier:          Wlf57qRJaaarBrwDIKrOEmEr+jmRHsnJWPCUpAFg1so=
Subject key identifier:   2A:CB:6A:45:F9:83:E3:78:20:A8:4E:3D:FF:C5:1C:0A:F6:FC:A6:1A
Certificate issuer:       /CN=55cee09ac499332945551b37537a6b6c4d728403
Certificate serial:       0C83BE
Authority key identifier: 42:0F:0F:5B:BF:B7:D3:4D:44:D5:34:47:3B:37:D9:CC:80:B0:D4:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55cee09ac499332945551b37537a6b6c4d728403.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8501278-77ef-48dc-a207-e655d406a0a2/fb30ed39af5c207b66467bcd6560200983e09f92.roa
Signing time:             Wed 24 Mar 2021 14:31:26 +0000
ROA not before:           Wed 24 Mar 2021 14:31:26 +0000
ROA not after:            Tue 24 Mar 2026 14:31:26 +0000
asID:                     27926
IP address blocks:        200.107.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820158 (0xc83be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55cee09ac499332945551b37537a6b6c4d728403
        Validity
            Not Before: Mar 24 14:31:26 2021 GMT
            Not After : Mar 24 14:31:26 2026 GMT
        Subject: CN=fb30ed39af5c207b66467bcd6560200983e09f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:64:b6:dc:08:b2:e3:6e:88:2e:f7:5e:d2:
                    80:ff:d4:b6:4d:37:8d:3e:ec:81:24:81:87:ae:f2:
                    82:b0:28:bd:62:9d:ba:1a:ef:68:43:b9:d5:57:06:
                    2c:aa:d9:4b:a2:a6:f7:18:08:64:29:57:10:40:a8:
                    92:90:7e:e2:b4:86:9d:8b:4c:05:fb:d4:e9:7b:78:
                    36:5d:c6:55:7e:b2:94:b8:4d:1c:f0:82:f4:db:57:
                    f2:12:24:2e:63:f4:40:af:a4:c4:67:c8:41:52:b1:
                    90:0b:32:cc:9a:9f:42:df:a2:b2:a8:a7:c2:d7:4f:
                    2f:37:a5:6b:8e:40:74:d9:4d:d3:e7:80:02:fe:d3:
                    7e:4a:d5:22:b7:ce:50:96:c2:3e:48:6a:6d:16:91:
                    77:52:f9:2d:2d:32:5c:c3:9a:d5:72:10:81:fe:fc:
                    cc:fa:70:01:cb:eb:09:38:f1:22:0f:ea:d1:7a:81:
                    2c:3a:54:00:81:1b:19:71:7a:40:9a:95:24:8c:d6:
                    d1:b8:83:86:38:b0:75:7d:4c:12:98:52:2a:1e:3a:
                    fc:81:9f:74:64:42:b2:f7:9c:c5:a0:5a:ac:d7:be:
                    65:a8:d6:10:33:38:90:73:cc:e2:0a:f1:a5:9f:e7:
                    6e:b2:05:c3:42:be:59:01:6d:73:06:5b:75:8d:3a:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CB:6A:45:F9:83:E3:78:20:A8:4E:3D:FF:C5:1C:0A:F6:FC:A6:1A
            X509v3 Authority Key Identifier:
                keyid:42:0F:0F:5B:BF:B7:D3:4D:44:D5:34:47:3B:37:D9:CC:80:B0:D4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55cee09ac499332945551b37537a6b6c4d728403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8501278-77ef-48dc-a207-e655d406a0a2/fb30ed39af5c207b66467bcd6560200983e09f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8501278-77ef-48dc-a207-e655d406a0a2/55cee09ac499332945551b37537a6b6c4d728403.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:59:76:c2:b5:fb:65:9e:f9:76:24:fb:c5:2e:18:34:f3:6d:
         36:cf:51:18:96:db:2c:d0:8d:77:bc:a4:06:05:b2:69:ba:65:
         1a:fa:84:79:da:75:ac:9b:69:ee:20:0f:8f:86:f6:42:c3:a2:
         ff:01:14:cf:c1:11:0f:3b:25:4f:16:53:74:cb:e4:0a:c6:97:
         41:7d:8c:38:b0:d4:5a:79:08:df:6f:e1:32:79:25:03:37:7e:
         cb:ff:20:ef:fb:81:df:0d:d0:53:9b:57:28:4a:6f:02:0b:b9:
         17:9b:c7:f1:f7:1f:1d:01:b5:9c:31:86:b4:f6:cf:af:76:f2:
         d8:02:c2:b9:ac:82:11:d6:e0:95:9f:3c:eb:83:f4:51:82:92:
         55:80:d6:f8:10:9e:94:d4:33:7a:22:21:e9:36:7f:a9:d2:4b:
         7b:d7:de:f6:01:00:cb:6c:7b:ce:e7:9b:dc:d6:47:83:9e:8d:
         a8:9c:b2:74:05:bd:90:d3:7d:e0:43:46:88:a5:5c:6c:4f:09:
         98:a8:78:a3:17:c6:85:16:c3:98:6d:54:c1:8d:53:75:30:4e:
         de:7e:e5:1d:2a:92:f9:c8:f8:80:f3:7f:5d:44:68:af:9c:0e:
         fe:96:59:36:83:e2:34:83:08:26:98:77:2b:d1:4f:8c:fc:5d:
         f9:d3:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org