Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/21b0c8dccf0e1b8473526dac45e16904b6ac7b75.roa
File:                     21b0c8dccf0e1b8473526dac45e16904b6ac7b75.roa (raw, json)
Hash identifier:          AS0D7G3L5l1BCOQei832HXy9PpxFNbek77VUcWQ1e4E=
Subject key identifier:   03:9D:7E:04:9E:BC:01:D2:4D:61:95:80:E7:90:3D:C9:54:B1:FD:CB
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       1FCFDC
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/21b0c8dccf0e1b8473526dac45e16904b6ac7b75.roa
Signing time:             Mon 03 Apr 2023 15:27:18 +0000
ROA not before:           Sun 02 Apr 2023 15:26:19 +0000
ROA not after:            Thu 03 Apr 2025 15:26:19 +0000
asID:                     27735
IP address blocks:        200.73.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084828 (0x1fcfdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Apr  2 15:26:19 2023 GMT
            Not After : Apr  3 15:26:19 2025 GMT
        Subject: CN=21b0c8dccf0e1b8473526dac45e16904b6ac7b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:32:57:93:22:64:bf:49:e4:66:2b:1c:7f:
                    b3:43:45:a5:38:d7:d1:47:8b:c1:e3:31:1a:00:dc:
                    4e:80:00:6e:82:59:62:f2:da:40:9c:8c:fe:1c:e9:
                    ae:73:49:53:12:bd:f1:3e:58:71:0a:80:9f:e9:e0:
                    ff:a1:34:37:9c:b1:c5:5c:35:60:41:a7:ad:56:7f:
                    d9:ad:0c:3b:8a:d6:64:6a:4d:1e:39:85:f3:d6:ad:
                    ba:4d:dd:dd:e2:c3:80:59:53:9b:a9:74:21:d1:90:
                    e7:3d:7f:18:71:b1:0e:55:07:5c:ac:49:2d:04:1d:
                    ee:2f:c2:3e:96:b8:05:38:7e:4f:9a:79:c8:9a:9a:
                    94:e8:9b:19:17:de:d4:d0:4f:a8:69:69:cb:09:e0:
                    96:9d:2e:36:34:ec:10:ba:96:da:cc:07:8d:68:c1:
                    59:ca:dd:e8:88:d0:05:22:37:76:7b:b2:1c:3d:06:
                    22:7f:12:66:49:0c:2b:ce:10:67:2a:58:ed:bc:bf:
                    06:32:36:4a:66:7f:12:42:74:a9:40:4e:0d:03:f5:
                    d2:cd:0d:e8:3b:55:7d:a1:22:92:8d:84:d1:a9:53:
                    02:5d:5f:06:e6:c2:63:ed:6a:f0:bc:9f:75:b0:de:
                    51:4b:0f:6e:4a:5d:b7:e4:a9:76:6f:ff:b6:90:bb:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9D:7E:04:9E:BC:01:D2:4D:61:95:80:E7:90:3D:C9:54:B1:FD:CB
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/21b0c8dccf0e1b8473526dac45e16904b6ac7b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:a9:5f:4f:9e:3f:23:69:f2:f9:4b:d9:c7:e9:9f:a2:33:
         a0:df:28:11:20:f8:39:ea:a6:81:71:fc:46:be:e2:de:1a:ff:
         15:b3:90:da:34:fe:71:a6:b0:5c:a4:38:eb:b2:33:dd:42:6b:
         75:0d:a0:12:26:70:a6:f0:8b:3e:0c:27:57:d6:7b:e2:d6:e0:
         8a:92:06:bc:a8:70:d5:e3:fa:24:58:e1:49:d7:c8:70:44:17:
         98:9c:3a:73:b8:f9:ca:91:22:d0:65:8a:17:49:9c:9e:95:ff:
         de:9d:66:84:ea:4a:e0:7b:99:c3:78:2a:df:30:26:b1:c1:01:
         41:55:89:34:11:cb:71:02:4d:a6:67:a1:82:d5:95:d9:a2:cf:
         8a:d3:69:92:70:9d:4c:e0:62:f3:fe:a2:06:bc:c1:8e:34:da:
         38:ef:f4:a3:cc:5c:b7:e5:f4:e5:ef:68:0d:a5:cf:5c:2b:f5:
         21:33:18:1d:5b:89:7f:47:73:8f:fa:26:f8:ec:d8:bb:37:a9:
         48:5c:f5:53:6a:30:23:c4:83:4e:4f:9e:bc:25:a0:54:54:01:
         b6:54:37:06:72:85:c9:ab:27:b9:89:ac:ea:5e:c5:4c:01:8c:
         4e:21:0d:54:55:cf:1f:5f:3c:6b:32:37:99:c4:63:0c:ab:be:
         7a:d3:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org