Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/04f59929d145fabb714c33ad4c7bb094e9de84cf.roa
File:                     04f59929d145fabb714c33ad4c7bb094e9de84cf.roa (raw, json)
Hash identifier:          mE0ckLJv4O+Tkui/XqjAM+4BEL7kK3vOYz4N8PswMjE=
Subject key identifier:   59:97:F2:E5:D0:49:A0:35:44:EE:B0:82:73:DA:C7:65:BB:EC:D4:78
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DBB16
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/04f59929d145fabb714c33ad4c7bb094e9de84cf.roa
Signing time:             Wed 24 Mar 2021 14:35:27 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     269954
IP address blocks:        200.91.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899862 (0xdbb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=04f59929d145fabb714c33ad4c7bb094e9de84cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:e6:c7:1b:b2:84:7f:c7:9f:ad:d4:b6:c1:
                    bf:6e:d3:71:86:a1:60:84:e8:85:22:3e:23:06:be:
                    da:bb:86:14:be:0f:07:d9:b8:54:d6:a7:0b:96:fe:
                    7b:1d:0c:c8:4b:53:67:a5:4c:c6:4a:66:d3:ad:32:
                    8f:27:30:06:ea:f0:f6:07:31:f9:f0:18:3f:e0:3b:
                    f6:66:9e:42:2f:56:31:e0:44:7e:19:44:39:98:c8:
                    30:ae:b2:df:76:96:e7:2a:9f:0a:aa:c6:53:d9:9c:
                    09:20:a7:cd:54:59:d5:d3:8f:79:ea:5b:06:17:c7:
                    a2:a2:13:88:e1:45:83:17:d8:ee:68:48:d5:c0:b1:
                    51:37:9e:24:89:17:af:4b:3b:2e:91:8d:46:9f:b0:
                    20:aa:23:3f:85:d9:78:66:01:da:4c:75:24:36:28:
                    4a:7c:2a:e2:c9:45:bd:a1:ef:0e:43:76:24:cf:a3:
                    8a:66:cd:74:1f:38:de:60:0d:3c:ed:39:57:17:24:
                    28:0c:46:02:74:c4:7c:15:ea:85:40:d7:d8:6e:8b:
                    04:94:34:2e:8e:35:c1:fb:3f:11:3d:f1:4e:3c:69:
                    42:b0:8f:29:91:b0:78:de:d1:31:7e:13:1a:48:d5:
                    07:87:92:ba:32:f1:18:4a:38:94:c0:f0:77:ad:87:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:F2:E5:D0:49:A0:35:44:EE:B0:82:73:DA:C7:65:BB:EC:D4:78
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/04f59929d145fabb714c33ad4c7bb094e9de84cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:49:c0:c3:9c:ae:a3:dd:96:41:3f:23:04:ec:d5:b5:71:cd:
         82:22:d9:50:25:11:4a:f5:e5:f5:dd:90:e8:f2:ff:10:24:fb:
         d8:26:fa:ae:1f:bf:c4:5a:6d:39:6c:ff:c6:da:bd:6c:dd:1c:
         7c:98:24:f9:bd:d5:07:0c:34:89:5c:4a:02:b4:d1:a1:3f:5d:
         a8:8e:c1:37:c2:50:81:62:f1:35:d9:f2:38:11:f0:54:c9:60:
         7b:a9:33:38:9c:d2:f4:92:b6:45:59:04:ba:a3:02:bf:40:e2:
         cb:f2:0e:d2:f7:23:f5:f2:ec:e9:ba:c3:c7:52:f6:43:a7:8f:
         a4:a3:84:ea:84:aa:e1:6d:f2:5b:8c:c3:06:75:9f:bd:79:4f:
         ad:46:d9:d6:20:b0:b7:da:fa:78:de:98:22:5e:d2:1b:45:87:
         82:c3:ea:43:92:56:b1:7e:1c:7e:0b:eb:a6:75:55:c3:00:f0:
         bf:f9:13:b6:c1:89:06:96:b3:5f:d1:ae:ae:48:a7:4e:73:c7:
         b3:6d:2a:91:45:fc:55:50:94:58:4a:2a:fe:99:28:82:f1:9b:
         c0:a1:15:ba:45:1d:cd:e0:da:a2:e5:1d:50:04:40:b3:33:36:
         73:30:33:08:6e:c2:94:53:ab:23:de:d8:56:2d:b2:f8:df:9b:
         5b:52:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org