Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/146e21e6eddc4b7d6d85334bdb0221fd83da9f9c.roa
File:                     146e21e6eddc4b7d6d85334bdb0221fd83da9f9c.roa (raw, json)
Hash identifier:          ldu/4kEqPxP6W1HbU/2I1dQuXBDBoD5tJz0USfvHnS4=
Subject key identifier:   0E:8D:1C:BB:17:F6:E4:94:BD:A3:F5:AC:95:86:7B:8D:CF:6A:06:38
Certificate issuer:       /CN=3a61a7a9840080a44173f942095ac78ead239107
Certificate serial:       053B5B
Authority key identifier: 33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/146e21e6eddc4b7d6d85334bdb0221fd83da9f9c.roa
Signing time:             Wed 29 Dec 2021 03:14:36 +0000
ROA not before:           Sun 08 Aug 2021 03:00:00 +0000
ROA not after:            Thu 08 Aug 2030 03:00:00 +0000
asID:                     64120
IP address blocks:        200.49.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342875 (0x53b5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a61a7a9840080a44173f942095ac78ead239107
        Validity
            Not Before: Aug  8 03:00:00 2021 GMT
            Not After : Aug  8 03:00:00 2030 GMT
        Subject: CN=146e21e6eddc4b7d6d85334bdb0221fd83da9f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:c2:f5:c0:68:04:e1:90:0c:60:aa:36:56:
                    57:da:e8:eb:d2:3e:9b:70:0a:1d:a2:8a:fc:29:32:
                    d3:c1:cb:24:7f:af:fd:e3:cb:08:f8:ec:5d:a0:75:
                    ed:29:73:f7:e5:53:21:d6:38:73:d3:03:fa:f3:54:
                    01:10:4f:67:74:d3:cf:bc:2b:1d:c5:a2:8f:31:5c:
                    94:14:8d:14:36:fd:14:3c:b1:66:f6:80:a1:39:7a:
                    14:f2:ad:d1:98:75:c6:af:b4:07:9f:2a:ec:b8:09:
                    58:28:7a:97:ce:37:10:40:97:5f:2b:27:f3:5d:e9:
                    0f:bd:5c:42:dd:83:8c:98:ee:22:cb:b6:2e:3a:e7:
                    d2:f0:a1:fe:50:5f:0d:b8:a0:9e:e5:64:9f:d4:c6:
                    b4:a0:c3:71:ea:59:1f:96:bf:74:07:fe:47:05:f6:
                    09:19:73:b3:f4:80:57:03:51:9c:79:fa:81:71:ea:
                    4d:4c:e5:09:fc:d1:8e:59:33:09:d2:c5:97:c8:9b:
                    86:fa:d5:30:e6:03:81:1f:74:06:59:9d:58:86:7c:
                    76:41:05:b4:e9:11:69:c0:cb:65:2e:26:c7:19:06:
                    36:02:7c:a1:3e:8d:ca:6f:f1:10:90:e1:24:ad:9a:
                    9a:0f:1b:93:e5:ff:cf:5e:ae:b9:20:da:42:4e:c6:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8D:1C:BB:17:F6:E4:94:BD:A3:F5:AC:95:86:7B:8D:CF:6A:06:38
            X509v3 Authority Key Identifier:
                keyid:33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/146e21e6eddc4b7d6d85334bdb0221fd83da9f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:fb:4c:f0:a3:d8:23:77:02:ea:53:65:91:15:73:44:11:
         ad:3a:03:43:de:d2:bb:3e:5b:ec:47:b4:40:cb:9c:7f:f9:7c:
         9b:6a:e2:5f:0f:bf:37:65:24:4b:a1:dd:00:dd:bb:02:f6:a5:
         92:a3:53:57:67:a7:3a:8a:e5:36:7d:80:5e:72:e1:b3:15:0d:
         f5:8a:00:9f:89:36:fb:9e:47:b2:17:b7:57:69:54:17:d0:8c:
         99:20:bf:1c:12:e2:a1:85:de:f4:cc:0c:8f:a6:ee:cd:06:47:
         ee:75:4d:28:5b:b1:55:26:71:08:55:fe:5c:28:b6:dd:c4:71:
         58:e6:16:16:1a:dd:d3:dc:a8:e6:41:91:43:84:a6:d1:d4:a7:
         85:f4:ed:bd:0a:bb:0a:9b:62:d2:e3:85:0e:73:25:42:ac:3c:
         63:df:84:94:04:f9:1a:c0:11:0d:1a:fa:c3:cf:5b:af:27:85:
         60:b5:12:86:ec:39:e8:eb:53:c9:68:93:00:c7:fc:c3:2d:92:
         aa:f0:3e:28:20:d4:5e:2b:57:ad:7f:1c:be:75:e9:a8:09:a4:
         37:84:a8:40:cc:ca:43:76:49:0d:bb:70:63:e7:48:2c:79:3f:
         33:e0:0c:54:97:34:ea:18:2b:d5:ad:1c:f2:58:d3:d3:60:f9:
         3b:12:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org