Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/b30fa854bde787a377caf1abca15f6bd6b751338.roa
File:                     b30fa854bde787a377caf1abca15f6bd6b751338.roa (raw, json)
Hash identifier:          e0pLLD2bHBokubnX5R4m+GFAPOvyF9vbBrC5zbszjI4=
Subject key identifier:   20:19:C6:FE:7A:44:33:AF:64:41:F1:64:29:14:6D:47:34:5D:B0:62
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DA5FE
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/b30fa854bde787a377caf1abca15f6bd6b751338.roa
Signing time:             Wed 24 Mar 2021 14:35:26 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     6507
IP address blocks:        200.73.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894462 (0xda5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=b30fa854bde787a377caf1abca15f6bd6b751338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:12:f4:c7:31:3c:83:2e:6b:57:12:7f:03:d2:
                    da:82:35:14:5d:56:17:9d:25:29:a3:9f:82:ac:db:
                    eb:48:2e:9a:0d:54:ed:69:27:9c:ba:78:f2:af:9d:
                    a5:4b:e9:fa:88:93:78:b1:44:54:37:a4:5f:76:ad:
                    d6:6f:f5:c1:67:48:79:ae:13:c6:51:59:43:01:27:
                    f8:5f:43:29:44:3c:65:58:38:75:4c:25:c3:eb:f9:
                    ad:c6:db:aa:76:ad:9f:fe:50:9a:33:d7:ea:ce:4b:
                    18:2d:18:c7:9a:88:bf:54:2f:1d:72:2d:34:8d:09:
                    58:d2:37:8d:52:00:71:4f:22:28:6f:40:e6:90:c0:
                    cc:7c:82:bc:ed:34:29:31:37:82:d6:2c:78:55:56:
                    3e:3a:b6:93:1a:b5:a5:10:de:5f:20:79:ab:e1:04:
                    05:b8:44:c7:5d:95:80:59:c4:e9:e6:74:54:e6:6d:
                    98:23:0c:41:b4:b5:70:27:2c:2d:ed:d9:7c:0c:d6:
                    d6:a4:a4:d2:aa:46:22:c3:b8:72:91:46:5d:53:83:
                    66:fc:de:a3:51:c7:11:81:ec:ed:ae:41:40:26:1a:
                    6b:66:0a:84:2e:a2:47:19:92:96:a7:93:db:16:f0:
                    37:e1:63:b8:35:82:33:59:02:14:6e:34:72:57:e6:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:19:C6:FE:7A:44:33:AF:64:41:F1:64:29:14:6D:47:34:5D:B0:62
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/b30fa854bde787a377caf1abca15f6bd6b751338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:31:f9:e6:65:17:bd:2a:29:b7:f3:e0:32:7c:df:aa:78:
         c3:02:2d:bf:3c:27:bb:80:96:56:64:41:d4:73:97:82:73:8d:
         fd:97:bc:a9:0a:0c:7a:ca:9e:18:95:0f:e7:7f:e7:5f:54:3d:
         7f:04:12:8d:98:d5:af:a4:f8:3e:f4:ff:8c:50:a9:e2:7a:c3:
         6d:15:8d:02:c3:41:d0:46:0c:21:b1:6f:ba:4e:96:d0:52:1b:
         56:b1:f9:51:bc:c1:5a:02:57:95:0f:e7:72:3f:50:2e:73:3d:
         af:0a:44:9a:ba:d5:90:33:aa:c1:30:3b:06:f7:16:60:76:cf:
         d9:3a:92:1b:09:45:da:7c:c6:50:d7:44:6b:83:c9:76:52:c2:
         9f:07:a4:fc:5c:74:b3:fd:2e:af:90:2a:04:3f:ff:70:5b:32:
         5e:c1:2e:bd:d3:bb:81:3c:2e:dc:2b:91:dd:4f:59:7e:eb:9b:
         08:cd:a6:52:75:19:39:da:1e:bd:f5:b7:cd:2c:44:5b:a2:93:
         77:8d:b7:fd:e5:ab:02:0a:72:e3:25:5a:0c:d8:ca:5a:a1:e8:
         32:1f:a8:78:c3:87:5c:da:a3:05:24:72:7c:20:80:9b:85:32:
         6c:d4:d9:03:b2:0a:85:f1:cb:0c:2e:d5:c4:86:91:83:84:e5:
         5a:93:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org