Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/96276ef5aa8f8f8aa3449113ec64618c30162af2.roa
File:                     96276ef5aa8f8f8aa3449113ec64618c30162af2.roa (raw, json)
Hash identifier:          sPoWN4qGkNbRBTZ3fZFrBlf9i9O87rnTtY1R21hbbR4=
Subject key identifier:   F0:9F:90:43:93:87:40:40:1E:33:14:06:60:69:42:45:3D:63:A8:90
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DA30B
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/96276ef5aa8f8f8aa3449113ec64618c30162af2.roa
Signing time:             Wed 24 Mar 2021 14:35:26 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     52270
IP address blocks:        200.61.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893707 (0xda30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=96276ef5aa8f8f8aa3449113ec64618c30162af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:b2:76:92:dd:a5:ff:29:b5:17:6e:3c:5e:
                    c2:72:00:72:74:56:c1:6f:c7:13:65:f6:ec:64:33:
                    ce:8a:ef:0f:1f:93:88:42:93:f5:59:2d:44:62:a9:
                    e1:68:3c:2c:b7:27:60:bb:ea:ec:d0:22:c9:10:18:
                    15:b5:ca:15:0c:d1:e8:b6:76:a6:d7:7e:e9:b3:d3:
                    a2:86:00:5e:48:f3:e9:f0:a4:35:54:e9:cd:a0:44:
                    f5:31:e6:48:98:8e:29:fd:5e:ab:c2:d0:41:a2:ae:
                    74:0a:25:d4:2d:3d:2e:03:b1:77:da:7f:69:65:09:
                    4e:58:c8:9f:a4:61:d2:f0:aa:b6:b7:fb:0a:fa:52:
                    e5:70:d8:5f:c3:ed:00:25:be:37:1e:94:cb:73:bd:
                    56:8d:34:17:d1:ad:95:73:54:30:71:32:e4:2f:be:
                    84:af:dc:af:c0:25:75:cb:5d:65:06:2f:a9:e8:2e:
                    d3:42:88:1d:b4:57:46:14:3f:7a:9b:ee:56:03:a1:
                    fa:fe:63:b0:43:d8:0c:dc:63:cc:18:32:25:d0:17:
                    a1:c8:c1:52:39:2b:fd:ba:13:50:4a:a6:98:43:67:
                    ca:0f:30:c3:fc:45:9b:f1:0e:5c:a0:b9:68:a8:76:
                    2c:e7:81:55:22:1a:d5:ee:4f:b8:06:3e:93:ee:d1:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9F:90:43:93:87:40:40:1E:33:14:06:60:69:42:45:3D:63:A8:90
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/96276ef5aa8f8f8aa3449113ec64618c30162af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:89:c0:df:3f:50:f5:97:70:f3:f9:98:a1:2e:77:0f:4c:a9:
         39:7e:e2:67:b3:ae:5a:8c:af:af:55:47:39:ff:2b:e3:4c:3e:
         9d:67:d1:a1:c0:54:cd:d7:16:fd:6d:61:13:6f:1b:10:f9:33:
         c0:76:31:f4:94:2a:79:7e:7e:7a:8c:a7:eb:71:e3:a6:28:93:
         cc:96:61:89:19:dc:1b:92:3a:87:10:2a:6f:71:a3:73:73:5e:
         9f:47:cb:f3:c2:b9:6c:ed:c9:62:3d:34:65:43:12:00:bb:21:
         ef:ac:96:06:20:8e:fb:39:40:26:e8:4c:71:d8:04:5a:42:b5:
         5b:80:ab:6e:67:cb:4a:ba:7c:12:66:2b:6f:f3:f7:62:54:ed:
         1f:04:d6:43:b8:b5:e6:d9:76:fd:05:04:31:08:94:2b:0f:e8:
         3d:7d:a1:8f:fa:67:89:62:e4:d7:9f:a6:83:58:50:3d:a2:a6:
         e7:a6:d1:9a:64:78:4b:dd:2c:1c:2f:8c:6f:1a:41:10:d9:30:
         44:02:ba:b8:3c:9c:6e:e1:28:23:0c:df:39:3d:a8:5b:70:3e:
         e5:7b:8b:2c:77:f2:80:85:ce:c9:f4:42:77:34:fd:b1:4f:6c:
         fc:9e:80:73:ec:68:01:93:3f:3f:b5:f6:ec:41:25:c8:8d:99:
         ef:80:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org