Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/6848c5309d15f5e8ef8f58a1ad7575cf2d3f640d.roa
File:                     6848c5309d15f5e8ef8f58a1ad7575cf2d3f640d.roa (raw, json)
Hash identifier:          hfDWpLUjpxM6Ry28qcqNp9GSeeqbEVWkUFhORhoVKz0=
Subject key identifier:   E9:AE:99:67:68:A9:97:7D:F2:EE:96:23:A0:A7:3B:41:BA:75:4E:8A
Certificate issuer:       /CN=4cba7f8bd719e527c075d1975618d1234b50de72
Certificate serial:       0DAEDA
Authority key identifier: CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/6848c5309d15f5e8ef8f58a1ad7575cf2d3f640d.roa
Signing time:             Wed 24 Mar 2021 14:31:38 +0000
ROA not before:           Wed 24 Mar 2021 14:31:38 +0000
ROA not after:            Tue 24 Mar 2026 14:31:38 +0000
asID:                     27826
IP address blocks:        200.16.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896730 (0xdaeda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cba7f8bd719e527c075d1975618d1234b50de72
        Validity
            Not Before: Mar 24 14:31:38 2021 GMT
            Not After : Mar 24 14:31:38 2026 GMT
        Subject: CN=6848c5309d15f5e8ef8f58a1ad7575cf2d3f640d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:60:27:38:fd:6e:ed:71:f0:e4:46:d3:e2:
                    94:09:e8:f3:34:d2:7d:c3:57:66:44:27:fc:d9:f3:
                    60:d4:6e:82:57:e8:5f:24:10:0a:c9:8b:7d:4c:17:
                    df:b3:8f:85:ef:63:46:6d:d2:24:35:fc:53:8c:cf:
                    31:4b:4c:58:da:86:d6:8a:1b:dc:8f:3c:07:b5:3d:
                    0c:18:29:7f:64:6e:1b:bd:e0:1c:0c:d0:f1:dd:7d:
                    2e:1c:92:54:74:90:63:87:84:f7:96:f8:04:10:ce:
                    59:64:d6:79:1c:de:7d:17:d0:65:cf:67:46:7f:ad:
                    cb:15:dd:58:d6:d3:a7:94:7e:ff:ff:7c:72:77:e4:
                    76:6c:c3:48:2d:b9:4f:86:8d:c5:4f:ff:6d:50:9d:
                    83:0e:f0:f5:0f:f6:6b:97:f0:24:ce:06:62:05:7e:
                    dd:cf:fe:be:6c:9c:1f:4e:db:a6:32:5e:ad:a5:44:
                    89:4f:3b:ad:b3:9b:9f:9e:b4:19:93:c2:47:ca:f1:
                    6e:41:ac:17:7b:be:e1:c2:5b:a1:3c:67:4d:2c:1f:
                    e3:2c:92:1f:c5:25:f8:30:04:24:98:00:e2:3e:3f:
                    72:f0:9c:6a:78:c4:2f:b3:36:6e:42:e7:a4:7d:a4:
                    d3:71:5a:87:0a:b3:56:1a:38:51:43:60:06:89:08:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AE:99:67:68:A9:97:7D:F2:EE:96:23:A0:A7:3B:41:BA:75:4E:8A
            X509v3 Authority Key Identifier:
                keyid:CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/6848c5309d15f5e8ef8f58a1ad7575cf2d3f640d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/4cba7f8bd719e527c075d1975618d1234b50de72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:98:f5:b5:19:13:48:b8:20:a6:e9:42:a4:a8:74:24:a7:4a:
         11:ea:06:f2:7c:17:22:04:c3:61:4c:7b:14:75:3b:15:e6:ae:
         ff:e2:30:13:ad:d2:aa:54:4d:34:ad:4f:62:6a:99:38:dc:35:
         5d:c8:8c:86:a5:11:bb:ab:66:50:a5:24:fe:95:17:32:b4:8a:
         4d:d4:06:be:83:d1:3c:0f:5e:c4:80:19:2c:6b:40:f8:a5:38:
         42:c6:6f:4d:b5:c9:30:38:a7:37:d0:6b:e3:e4:94:81:3c:bf:
         aa:c4:55:72:7b:8a:fe:14:dc:a1:e6:e5:63:a7:14:73:ec:bd:
         ad:f4:f2:78:9c:41:e8:b2:92:40:9f:6e:a6:ae:90:bb:09:aa:
         a0:6b:8b:fe:3b:3f:33:b4:77:a3:78:48:c9:37:88:00:01:dc:
         27:ef:71:fc:93:e7:ae:29:ba:7b:39:83:38:92:35:fa:ed:d6:
         37:0b:a2:cd:3a:c5:25:e0:b1:98:99:1c:a9:43:62:e6:36:7c:
         ca:ea:f8:d5:9f:ec:7c:da:26:3b:70:8d:d1:cc:5f:67:b7:51:
         71:03:89:eb:a0:e3:1a:72:c1:25:00:41:cf:02:2a:84:97:3c:
         83:c6:91:45:40:5e:f7:fa:00:83:95:a3:08:07:84:28:59:98:
         e7:e0:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org