Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/14bbd5658350ad4d95707c4846c0034737eef2e3.roa
File:                     14bbd5658350ad4d95707c4846c0034737eef2e3.roa (raw, json)
Hash identifier:          c082VXedtDqdfLuf01CsBBw9p8Ee8QzO3pdBqhbcfh8=
Subject key identifier:   E0:10:CD:AA:C8:2B:96:2E:42:D4:42:8A:E1:48:AA:2A:E0:7D:8F:DA
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E7AE0
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/14bbd5658350ad4d95707c4846c0034737eef2e3.roa
Signing time:             Wed 24 Mar 2021 14:38:32 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     26613
IP address blocks:        200.107.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948960 (0xe7ae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=14bbd5658350ad4d95707c4846c0034737eef2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:06:2e:fd:d5:4d:50:fe:4d:f9:cc:04:eb:
                    f9:89:ae:65:0c:32:06:51:6d:1a:72:56:52:af:aa:
                    8d:e1:73:b9:c4:83:c5:c8:d9:81:6c:bf:a1:fb:3e:
                    79:df:f1:93:ae:c7:6b:37:39:d4:63:d9:73:cd:db:
                    bd:39:f3:44:40:e7:30:50:b2:2e:fa:09:a3:61:82:
                    a5:87:de:25:c8:40:92:e3:83:b6:7e:0f:7f:14:01:
                    e6:0c:25:8b:5d:bc:c1:5e:2b:4d:9a:48:8c:a9:17:
                    94:a4:a2:4c:e5:70:e5:7f:78:3c:26:29:be:9a:28:
                    bc:c3:31:11:4e:79:39:9d:43:71:82:8f:48:8c:f3:
                    45:2e:d5:a8:0d:d4:e2:6f:a8:36:ad:88:6c:39:2a:
                    00:e5:cd:60:cd:42:ee:22:1f:b7:48:56:17:e4:85:
                    e3:b3:94:ba:61:af:e4:ff:4e:1d:ad:11:9a:37:57:
                    90:8a:d2:71:aa:e6:e3:d1:9e:c4:46:e9:cd:cb:8e:
                    8f:25:79:16:23:ed:52:42:bb:77:db:15:7f:2c:c8:
                    59:09:21:19:a1:0e:ff:69:4c:3d:29:0f:ef:54:57:
                    3a:76:f4:65:3d:6a:07:79:40:6a:44:11:4e:cd:a9:
                    2f:f4:d4:54:67:53:28:b7:ef:93:ba:3d:98:32:df:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:10:CD:AA:C8:2B:96:2E:42:D4:42:8A:E1:48:AA:2A:E0:7D:8F:DA
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/14bbd5658350ad4d95707c4846c0034737eef2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:0a:ab:ab:12:a4:f8:a9:51:a3:2d:45:77:e7:b0:0d:db:
         7d:d1:f8:06:e8:b1:7b:c1:5c:92:f9:97:7d:51:8f:c6:49:cf:
         70:24:2b:d8:08:a8:2f:29:db:fb:84:80:22:ab:3a:60:ef:40:
         57:42:88:8e:b1:6c:3d:af:4d:14:b5:78:b5:d7:a3:75:0c:69:
         d7:43:c6:a4:cb:43:a4:d6:6a:dd:49:e1:ab:4b:9e:c7:c5:a8:
         87:43:a6:2f:d3:eb:05:94:92:9d:be:8d:ad:e5:8b:8b:68:b1:
         9d:fb:42:1a:7f:fd:97:b9:4f:0e:9d:a5:5d:95:34:1b:65:c9:
         ea:c3:7c:8a:a5:50:18:aa:0d:65:5e:20:f9:ad:11:74:fc:75:
         be:e0:bf:f5:b9:3a:09:81:e9:10:1e:fb:df:55:84:95:51:7a:
         2f:8e:51:b8:6e:85:e5:ed:6c:77:f2:ed:7d:cb:f8:04:7c:a9:
         5e:74:8c:36:9d:98:cb:14:11:d7:cb:2a:04:29:59:07:49:0a:
         e9:82:ea:1e:7b:1d:b4:5c:93:5b:41:e7:e4:b9:20:8b:27:e0:
         ca:7f:f1:e5:5c:e1:28:21:ea:71:04:cc:48:ec:73:5c:97:12:
         80:b8:22:f2:40:75:77:b9:58:ae:a4:1f:b5:be:98:c2:82:af:
         1c:d5:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org