Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/e30327082a043fcd1d7e6da6e7e7b06d03f6e6c9.roa
File:                     e30327082a043fcd1d7e6da6e7e7b06d03f6e6c9.roa (raw, json)
Hash identifier:          gHNrdKHu08oU/7jKR6JOtrVEfVNh+IOAEjmeb9BfeHc=
Subject key identifier:   4C:4A:12:B6:44:04:CD:4A:37:01:EF:42:56:C8:A6:48:72:D4:60:E8
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DAD6B
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/e30327082a043fcd1d7e6da6e7e7b06d03f6e6c9.roa
Signing time:             Wed 24 Mar 2021 14:35:26 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     18747
IP address blocks:        200.73.0.0/18 maxlen: 24
                          200.73.64.0/19 maxlen: 24
                          216.241.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896363 (0xdad6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=e30327082a043fcd1d7e6da6e7e7b06d03f6e6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:b6:60:89:c7:27:21:5c:36:68:bc:6c:9a:
                    72:79:fd:cf:f5:41:36:ff:19:16:8c:dd:ab:be:62:
                    91:b8:06:14:d6:f4:46:f0:8b:d7:c6:d1:67:ae:db:
                    c5:eb:bb:5b:4c:d6:82:3f:21:ad:43:97:31:01:e4:
                    32:4b:c2:48:81:bb:9a:dd:0c:8f:d0:d0:16:3f:3e:
                    0f:58:10:ee:d6:91:36:61:ec:2e:94:52:0a:17:fc:
                    2e:10:93:37:c9:9f:25:6b:58:0c:04:3d:4d:5f:b9:
                    aa:c5:08:d2:df:34:81:14:13:1e:93:4f:10:65:cf:
                    1a:2c:e5:23:67:8c:b3:83:c6:7c:9c:49:13:9a:e8:
                    19:2f:ed:9f:ef:39:0f:be:40:b8:0e:19:43:33:f8:
                    93:0c:79:18:cf:f5:29:ef:b4:ab:c8:dc:de:91:a2:
                    57:bd:48:61:39:e0:a3:86:9a:94:a4:bd:c3:59:67:
                    ed:bc:3c:dc:ba:66:64:ff:85:b0:dc:57:a4:51:eb:
                    76:1a:9c:d1:a9:68:39:2c:13:9c:8b:82:ea:95:8b:
                    99:dd:75:8a:1b:8d:92:d0:5b:2b:22:04:46:70:a6:
                    4f:55:0e:de:a9:46:3f:2b:42:a9:7d:3f:66:27:cc:
                    d6:31:ec:db:be:d7:1c:ed:cd:fa:ac:6f:0a:1f:c2:
                    68:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4A:12:B6:44:04:CD:4A:37:01:EF:42:56:C8:A6:48:72:D4:60:E8
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/e30327082a043fcd1d7e6da6e7e7b06d03f6e6c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.0.0-200.73.95.255
                  216.241.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:91:52:2c:41:e7:79:03:b2:e7:ed:d9:c9:76:49:6b:f8:
         1a:a8:c5:58:f5:64:e3:35:de:8a:27:f8:9e:3e:2b:3a:a9:be:
         31:80:1f:c0:36:bb:a1:64:ea:41:1b:c7:19:73:6b:0d:80:03:
         e5:25:39:87:52:9f:38:ab:ec:68:86:6e:44:f1:69:11:dc:fa:
         38:4f:94:23:41:da:75:43:89:c3:e8:34:6c:e0:86:d3:30:45:
         8d:4e:ca:e3:e2:f7:fd:e3:2d:62:5f:bc:e0:c4:ff:2e:ac:96:
         47:23:fe:bb:e7:a2:71:5f:33:80:98:a3:be:cb:30:21:5d:00:
         d0:e1:a7:b0:36:2a:ec:6c:db:92:21:ee:3a:36:f9:28:b6:eb:
         a6:ac:8f:7f:ab:c0:41:6e:17:3e:bc:e6:44:d7:1f:49:a0:81:
         6b:d1:5a:5d:11:ed:ca:9f:b4:10:d7:b0:4a:9d:12:32:e2:71:
         06:14:fd:c2:2c:83:0e:7d:41:7d:00:21:40:e8:df:ce:aa:64:
         9a:5c:87:76:f0:93:44:84:a3:89:eb:b7:d8:62:15:4c:4a:a3:
         9e:2d:5a:90:af:ae:c5:49:1e:0d:2b:da:d3:9e:49:bb:24:aa:
         1a:9a:c8:1e:70:c4:10:ad:a8:26:e8:bd:11:6b:65:40:ae:29:
         5c:c0:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org