Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/35c774e217c9486969aeb27b311c562af431249c.roa
File:                     35c774e217c9486969aeb27b311c562af431249c.roa (raw, json)
Hash identifier:          xEAKFGbfC1WYZeXjZSUOerrYVjBwB6dY+AiW5hOXW1w=
Subject key identifier:   59:8D:E0:29:CB:C5:E7:2F:7B:1E:7D:BE:5C:D5:56:34:F3:9F:D4:5C
Certificate issuer:       /CN=4cba7f8bd719e527c075d1975618d1234b50de72
Certificate serial:       0DA7B2
Authority key identifier: CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/35c774e217c9486969aeb27b311c562af431249c.roa
Signing time:             Wed 24 Mar 2021 14:31:38 +0000
ROA not before:           Wed 24 Mar 2021 14:31:38 +0000
ROA not after:            Tue 24 Mar 2026 14:31:38 +0000
asID:                     27826
IP address blocks:        200.16.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894898 (0xda7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cba7f8bd719e527c075d1975618d1234b50de72
        Validity
            Not Before: Mar 24 14:31:38 2021 GMT
            Not After : Mar 24 14:31:38 2026 GMT
        Subject: CN=35c774e217c9486969aeb27b311c562af431249c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:65:b3:fd:10:a1:58:f2:34:30:89:c7:eb:
                    27:ec:38:de:1c:72:91:ed:38:43:3a:47:cf:55:ac:
                    74:ad:e1:40:8c:4f:bf:ef:b1:84:18:2e:b1:de:3c:
                    cb:5b:1a:8f:1e:42:64:73:b4:be:3a:fd:ea:75:2b:
                    49:91:f5:c2:6c:79:4c:79:e1:41:20:b5:1f:b0:9a:
                    39:f8:1b:18:ee:45:7d:81:b9:17:2d:74:a6:18:4b:
                    a6:57:df:c9:b8:b8:2f:f1:3a:0e:46:8d:6c:ba:d6:
                    3d:a7:84:14:03:6b:8c:db:82:8f:45:a0:a1:f0:d5:
                    99:98:9b:af:3c:15:70:10:0f:bf:ca:aa:ce:52:10:
                    a2:aa:aa:cb:0b:19:d6:52:e6:fc:93:1e:78:da:b1:
                    a2:da:ea:ab:41:ab:2d:ca:e8:67:2d:4e:e0:7b:ed:
                    e6:2e:1d:4f:53:39:e0:eb:f0:d6:43:dc:ba:3e:a8:
                    ff:52:d7:ce:36:b7:fa:d3:c1:a3:31:04:75:ba:0c:
                    06:58:be:13:7c:d1:56:70:05:c1:d9:e4:92:33:85:
                    70:3d:db:f5:72:ec:fb:12:c6:fb:b0:64:bf:15:e7:
                    eb:03:f0:82:fe:77:aa:8a:41:05:2b:b6:3c:3b:f4:
                    b1:8f:c7:7a:18:fb:95:ad:70:a7:d0:9e:5a:e1:ef:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:E0:29:CB:C5:E7:2F:7B:1E:7D:BE:5C:D5:56:34:F3:9F:D4:5C
            X509v3 Authority Key Identifier:
                keyid:CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/35c774e217c9486969aeb27b311c562af431249c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/4cba7f8bd719e527c075d1975618d1234b50de72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c6:4c:27:c2:1b:82:f0:26:fb:22:58:6d:3d:9f:56:19:71:
         38:93:a0:ff:44:a7:83:d2:9c:64:6d:f6:31:89:90:d1:99:8f:
         0a:93:36:fb:0a:2d:ec:26:92:21:3c:0a:c4:04:36:a7:98:b2:
         96:5a:43:23:51:1d:63:a3:9d:de:7d:4d:ae:10:3f:4b:cb:dd:
         b4:25:4e:9d:9d:30:5b:95:54:66:97:67:dc:70:1c:76:2a:e5:
         af:19:31:22:4a:75:19:a6:4f:12:4d:03:39:e6:10:fb:37:f5:
         f6:76:9b:33:59:6f:7b:96:8e:bd:47:30:a6:c6:6f:5e:9b:0f:
         57:55:8e:d9:5b:f6:36:01:c9:af:5d:d9:f2:97:cb:06:c4:bd:
         f3:95:47:ed:20:f9:57:8f:71:08:40:29:35:c5:42:49:c1:9d:
         b1:d5:da:3a:bc:ee:7b:ca:cf:d3:6e:ce:a5:92:21:6a:84:3c:
         6d:b0:9e:1c:6d:8c:f5:fb:12:91:4c:5e:65:3d:82:43:f5:cc:
         09:05:2b:db:4f:e7:f1:4a:68:3d:83:c7:cd:28:73:c4:16:7b:
         70:6a:7e:d7:aa:f4:a7:45:de:b4:98:7d:cb:2c:41:52:1d:7c:
         14:44:ef:4c:db:e0:2c:a3:cc:6e:1c:a7:2a:0d:07:eb:1a:ae:
         f5:47:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org