Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/280af7e0586d59fd225a18c9855ae680cece0500.roa
File:                     280af7e0586d59fd225a18c9855ae680cece0500.roa (raw, json)
Hash identifier:          esewEKlZXkdpHkW3Cwc40fcJO5ygcU7bmCXL4ZhLfuo=
Subject key identifier:   17:60:AE:C7:7E:EF:5F:D5:18:10:A9:49:E2:0B:2C:6B:B6:2B:1E:2B
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DA6FD
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/280af7e0586d59fd225a18c9855ae680cece0500.roa
Signing time:             Wed 24 Mar 2021 14:35:26 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     27965
IP address blocks:        200.73.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894717 (0xda6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=280af7e0586d59fd225a18c9855ae680cece0500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1d:8a:1c:0a:d5:2b:18:13:92:0a:49:6a:8d:
                    5e:c0:f1:35:bc:40:1c:87:25:16:14:a6:de:29:69:
                    9a:c2:55:81:e7:0b:00:51:a7:48:86:b8:65:6a:c0:
                    bb:b9:8a:de:be:7f:99:f5:91:41:db:b9:19:64:9a:
                    2e:66:51:ff:16:dc:d8:52:a1:2c:e8:ab:b5:c4:81:
                    06:19:5f:e8:e1:07:4f:56:19:e1:80:37:87:01:72:
                    d3:84:82:0a:64:4d:59:c5:97:fd:89:e1:f3:4d:d7:
                    95:6b:de:4a:31:45:04:66:96:c8:e7:b4:04:f2:fc:
                    3c:7a:6d:f6:37:75:e2:c6:03:32:aa:90:2a:38:0f:
                    da:c6:ef:28:89:09:6c:8e:cb:68:dd:ec:ac:11:32:
                    96:39:b7:9e:5a:af:5e:56:5e:9b:61:bf:29:9e:42:
                    08:d7:a4:6b:dc:9e:aa:78:18:09:89:5f:84:17:7a:
                    2f:82:3f:e0:20:26:13:a4:da:d5:2a:65:01:97:39:
                    f6:28:f4:af:1c:59:a8:ff:9e:76:26:c7:71:4f:1f:
                    2c:71:61:7d:70:89:4f:10:86:82:d9:eb:e9:0f:54:
                    67:a2:df:6d:04:98:c4:2c:48:84:7d:f0:09:c4:f2:
                    76:4d:3a:d7:27:02:06:88:46:5e:01:36:c1:d0:5e:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:60:AE:C7:7E:EF:5F:D5:18:10:A9:49:E2:0B:2C:6B:B6:2B:1E:2B
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/280af7e0586d59fd225a18c9855ae680cece0500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:bf:ed:42:16:4d:25:5c:35:2b:33:1f:7e:d2:3e:ae:4e:
         1a:97:ee:c9:91:3e:48:93:fa:97:4f:5a:69:9f:43:13:91:07:
         4a:0f:99:b9:2e:88:cf:3d:ce:5e:69:82:50:da:72:fc:d6:f7:
         34:48:77:ae:6b:58:46:bc:28:9b:bd:65:19:7b:88:23:ac:f4:
         40:b9:c6:77:a4:9b:1f:78:70:5c:6f:73:4f:26:0c:17:60:fa:
         f4:20:72:46:e1:58:4c:2f:c6:2d:ab:cb:d5:d6:16:16:9c:5a:
         28:1f:3b:22:c1:be:2e:da:05:b7:7d:a3:a9:ed:4e:cb:2f:ee:
         3b:db:2d:6f:e2:d6:b5:70:db:a5:8d:68:b3:53:22:4c:c2:05:
         57:d8:97:11:62:6c:91:e0:85:ee:e8:4a:c5:4f:f4:f1:5f:95:
         44:eb:ef:55:2b:b9:57:63:f5:43:17:c0:2f:22:3a:49:b8:0e:
         42:39:15:83:63:5f:29:91:59:e6:47:cd:b4:69:1f:b0:3a:71:
         51:ab:1b:a0:70:42:a3:17:6d:96:e6:c6:a2:e9:79:97:9c:e5:
         2a:72:3d:b4:33:d7:4d:b4:d3:3c:02:14:11:f1:18:4c:68:b4:
         64:65:53:d4:41:36:42:08:12:c5:d8:40:f9:8a:33:66:ce:e7:
         02:0f:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org