Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/0fcda413bea8c8869dd74b7cf509a85758a0f46d.roa
File:                     0fcda413bea8c8869dd74b7cf509a85758a0f46d.roa (raw, json)
Hash identifier:          5Bo3uboSIhECGYJBcVXZ9T4AONn9lfLfEcSXbeWuW6E=
Subject key identifier:   09:B5:BE:74:BC:5B:13:57:49:B1:A4:79:5F:68:4D:50:77:B7:DF:7F
Certificate issuer:       /CN=4cba7f8bd719e527c075d1975618d1234b50de72
Certificate serial:       0DB410
Authority key identifier: CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/0fcda413bea8c8869dd74b7cf509a85758a0f46d.roa
Signing time:             Wed 24 Mar 2021 14:31:38 +0000
ROA not before:           Wed 24 Mar 2021 14:31:38 +0000
ROA not after:            Tue 24 Mar 2026 14:31:38 +0000
asID:                     27826
IP address blocks:        200.16.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898064 (0xdb410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cba7f8bd719e527c075d1975618d1234b50de72
        Validity
            Not Before: Mar 24 14:31:38 2021 GMT
            Not After : Mar 24 14:31:38 2026 GMT
        Subject: CN=0fcda413bea8c8869dd74b7cf509a85758a0f46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:50:22:69:d5:8e:94:77:92:3b:70:72:18:
                    e3:6a:69:57:8c:51:0d:fa:00:42:54:4e:e6:2d:89:
                    92:15:9b:71:b3:60:0c:de:4e:65:da:c0:ae:69:d9:
                    c4:58:e7:b1:f7:9b:da:3e:f2:90:16:a9:2b:5f:77:
                    a9:7f:eb:da:b9:b6:fe:23:b6:68:ca:78:3f:4e:53:
                    c7:a0:a0:49:76:d1:12:44:05:0a:c8:62:f1:51:76:
                    e3:cb:16:88:cd:4c:66:ce:2e:cb:0c:ff:fa:b0:b1:
                    d7:3f:fd:24:dd:56:da:94:51:de:38:7c:71:8f:70:
                    37:45:1a:c5:24:f4:ce:16:b0:ec:2e:b0:c7:c4:c7:
                    4b:38:15:75:ba:b7:aa:dd:ae:e8:ed:49:fa:eb:a1:
                    67:3c:7d:28:b2:28:fc:2f:66:bf:9c:6e:c8:06:bc:
                    1b:c1:01:3d:cb:23:e5:b2:5d:ca:88:90:b7:6a:ea:
                    78:03:5e:91:8f:8f:06:fd:17:7d:4a:de:6f:cf:07:
                    06:36:58:69:9a:d8:a8:c8:c0:47:54:90:77:0c:fb:
                    bf:de:3b:d8:d3:8c:7d:83:f2:8a:f6:93:b8:58:51:
                    0a:0b:bc:11:c2:9f:36:01:68:61:b2:33:54:30:8c:
                    39:9e:90:97:1d:ff:aa:94:3a:7d:08:ec:95:64:67:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B5:BE:74:BC:5B:13:57:49:B1:A4:79:5F:68:4D:50:77:B7:DF:7F
            X509v3 Authority Key Identifier:
                keyid:CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/0fcda413bea8c8869dd74b7cf509a85758a0f46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/4cba7f8bd719e527c075d1975618d1234b50de72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:f7:00:3a:bb:aa:92:00:46:46:dd:f2:49:18:40:06:c5:
         31:df:8d:83:f3:57:65:0d:71:ee:84:50:78:21:d8:d7:47:4a:
         9a:b7:2b:ad:e3:77:b2:bd:0c:9c:3d:43:1d:c6:70:d8:8a:b9:
         db:a9:8b:48:b1:ad:e4:22:5e:58:31:98:cc:63:cf:ca:79:1a:
         1e:ee:36:7e:85:0d:10:18:3c:d5:50:1e:0c:97:09:d5:b2:4f:
         73:32:83:e9:d9:35:8a:47:99:8a:6e:9d:87:e8:60:ce:d3:99:
         61:df:0b:d6:85:fc:71:00:54:3d:21:9e:11:92:d6:d7:52:15:
         8d:c7:56:55:0c:2a:ee:2c:52:e8:b0:ae:52:8b:73:51:8a:b7:
         06:cf:e7:6b:06:6d:09:87:b4:c5:f4:5e:cb:48:f5:28:41:e5:
         92:97:f7:77:5a:d2:f6:11:94:29:9a:ef:ce:bc:31:23:2f:05:
         c9:0e:46:c8:23:30:71:2a:f1:28:6c:0b:b2:5a:55:d2:ef:51:
         20:ed:8b:0d:2b:0c:26:c6:9a:3f:00:66:61:a3:bf:4b:3c:ca:
         0b:34:f4:c9:1f:15:cf:fb:d1:2c:29:6b:8d:45:fe:1d:47:7d:
         39:9c:9d:51:15:b9:fd:0a:99:2b:d3:21:9e:62:9a:ec:ba:85:
         ae:a5:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org