Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9ed530f-ab59-4c7a-a9e0-05a5cefc7d12/fa8c935fddfddbc551b899586a890e19c6c46a65.roa
File:                     fa8c935fddfddbc551b899586a890e19c6c46a65.roa (raw, json)
Hash identifier:          U+PgAhQEaH6Er4L1oMvi18JrU9C8pLgNdNaN6aGNMPk=
Subject key identifier:   81:71:99:21:FE:EE:4A:42:2A:61:E2:08:8F:FF:5F:B9:0B:F3:6B:2B
Certificate issuer:       /CN=31480d682bda17ab78ca3f47aea189a61a30fa3c
Certificate serial:       0DA046
Authority key identifier: AC:90:25:4D:45:33:61:D6:E7:C8:BE:7A:86:1E:AD:80:B8:65:6C:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31480d682bda17ab78ca3f47aea189a61a30fa3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9ed530f-ab59-4c7a-a9e0-05a5cefc7d12/fa8c935fddfddbc551b899586a890e19c6c46a65.roa
Signing time:             Wed 24 Mar 2021 14:31:05 +0000
ROA not before:           Wed 24 Mar 2021 14:31:05 +0000
ROA not after:            Tue 24 Mar 2026 14:31:05 +0000
asID:                     264618
IP address blocks:        143.0.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892998 (0xda046)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31480d682bda17ab78ca3f47aea189a61a30fa3c
        Validity
            Not Before: Mar 24 14:31:05 2021 GMT
            Not After : Mar 24 14:31:05 2026 GMT
        Subject: CN=fa8c935fddfddbc551b899586a890e19c6c46a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:c8:3c:81:72:37:ad:97:de:aa:a3:8a:9b:
                    c1:ec:72:c4:af:39:e2:48:4a:db:56:86:0d:07:b1:
                    81:20:ef:66:70:1a:11:cf:6e:14:3b:1d:91:8b:c9:
                    72:64:07:25:cd:7b:38:33:4f:18:4a:97:41:f0:f6:
                    4e:85:5f:22:81:bc:9a:1c:a6:80:70:89:5d:89:35:
                    63:ed:33:31:21:3d:f3:cf:1e:74:37:ea:91:00:e3:
                    0f:58:0a:85:7b:d8:65:46:c9:dc:f2:6e:56:3e:5d:
                    24:4b:19:e8:8c:62:aa:a8:f4:91:31:e3:90:1b:93:
                    c6:11:95:28:df:b7:d1:fd:85:df:f7:d3:a5:c1:1d:
                    f3:dc:b4:2e:06:b9:9f:5c:29:77:c5:b4:ae:7d:1b:
                    55:06:7b:28:dc:bc:77:8a:cf:af:30:1f:18:2e:35:
                    89:4b:41:5d:6e:09:ec:58:dd:72:24:18:a8:93:ff:
                    be:08:06:7a:7c:3f:17:83:71:72:16:50:9c:38:e9:
                    e9:db:a9:a6:e8:6b:e0:71:96:ed:eb:c9:ee:74:f1:
                    7d:45:35:08:8f:d0:15:7f:0f:98:22:dd:9d:4d:f3:
                    45:a0:76:d8:46:bb:db:1d:a5:e3:1a:cf:28:58:9c:
                    ad:ec:c4:56:f7:68:80:1a:33:a7:e0:55:e3:72:f0:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:71:99:21:FE:EE:4A:42:2A:61:E2:08:8F:FF:5F:B9:0B:F3:6B:2B
            X509v3 Authority Key Identifier:
                keyid:AC:90:25:4D:45:33:61:D6:E7:C8:BE:7A:86:1E:AD:80:B8:65:6C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31480d682bda17ab78ca3f47aea189a61a30fa3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9ed530f-ab59-4c7a-a9e0-05a5cefc7d12/fa8c935fddfddbc551b899586a890e19c6c46a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9ed530f-ab59-4c7a-a9e0-05a5cefc7d12/31480d682bda17ab78ca3f47aea189a61a30fa3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:83:c5:2a:9b:a7:ee:29:1b:f3:ec:2e:fb:40:b1:b4:db:3b:
         f8:df:f3:de:a3:cb:ce:90:10:6a:e9:d8:1c:32:6b:48:15:92:
         a0:17:3e:04:45:b5:ee:5f:70:de:c1:8c:80:80:55:ca:70:fa:
         77:36:2c:b9:8b:18:fa:96:20:7e:b3:8f:7e:e2:8d:5c:a5:f4:
         39:af:60:a6:86:0b:d6:be:5a:71:cb:03:97:c1:73:4a:24:e7:
         ca:d3:af:05:af:59:8e:de:9e:cc:79:ec:72:c4:0a:b6:bd:4f:
         8d:2b:cb:e7:6f:48:40:cd:17:c2:43:b2:ec:16:2f:03:fa:a7:
         1a:13:86:89:a9:23:92:e8:08:50:ce:b6:80:1e:f6:f1:41:ff:
         ac:8b:8e:74:73:ec:73:f8:37:21:84:75:05:9e:b3:58:f9:a3:
         88:65:fe:78:ce:40:94:df:b5:6f:ae:8c:cd:d3:a4:9a:34:1e:
         c3:a2:03:74:ab:68:68:49:fb:6c:29:e4:f0:fd:cf:2f:a1:cf:
         86:a1:e1:65:7b:88:53:53:fa:a5:73:e6:12:2c:42:c9:51:72:
         6c:8e:7d:f1:1a:6f:71:6b:8f:37:72:4f:01:de:27:62:0e:7a:
         0c:1f:22:9a:57:5f:c0:c6:a8:9f:84:4b:86:a4:4d:96:d5:bc:
         f0:74:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org