Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/f257a3b62b30fea2ff4dce69b08a640ed3490c4c.roa
File:                     f257a3b62b30fea2ff4dce69b08a640ed3490c4c.roa (raw, json)
Hash identifier:          R8rv2AP3dvEY1+/oA/U/XeyO5sIjqAQLNUIiOBlW17I=
Subject key identifier:   63:19:68:D5:25:16:27:C9:C0:71:85:F8:9E:A9:2B:F1:07:47:FC:5D
Certificate issuer:       /CN=4cba7f8bd719e527c075d1975618d1234b50de72
Certificate serial:       0DA61B
Authority key identifier: CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/f257a3b62b30fea2ff4dce69b08a640ed3490c4c.roa
Signing time:             Wed 24 Mar 2021 14:31:38 +0000
ROA not before:           Wed 24 Mar 2021 14:31:38 +0000
ROA not after:            Tue 24 Mar 2026 14:31:38 +0000
asID:                     27826
IP address blocks:        200.16.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894491 (0xda61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cba7f8bd719e527c075d1975618d1234b50de72
        Validity
            Not Before: Mar 24 14:31:38 2021 GMT
            Not After : Mar 24 14:31:38 2026 GMT
        Subject: CN=f257a3b62b30fea2ff4dce69b08a640ed3490c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:51:b9:b1:19:64:8a:36:b1:95:1c:ca:6e:
                    d2:75:ba:4f:cf:74:e9:f9:7e:8b:d6:ee:a8:35:9f:
                    b5:05:ec:66:1a:b0:9e:10:0e:33:29:f2:86:ae:34:
                    2c:41:22:89:50:28:fb:41:30:15:3b:60:4f:58:b6:
                    3b:9d:20:2b:94:48:0f:b6:5c:ae:4b:83:f2:da:3b:
                    02:3b:e7:8c:ec:c7:61:fc:6b:65:da:d0:52:ea:eb:
                    24:30:33:83:42:59:40:54:15:e7:75:0b:66:51:ee:
                    46:c4:09:ce:25:1c:05:83:fa:76:89:4b:72:41:a2:
                    7c:fa:f2:6b:80:f7:19:d9:cd:88:78:7f:48:63:6e:
                    d4:b2:26:8f:28:51:5f:5f:bd:ca:f9:92:5c:f7:7a:
                    4c:12:fe:a0:04:8b:38:df:dd:e6:65:ba:ed:f1:89:
                    2d:8a:97:a6:9f:47:05:7f:56:61:99:d5:31:4e:b0:
                    58:f9:0e:25:e6:82:17:cf:ce:16:e0:ff:be:32:54:
                    b5:30:48:81:06:f8:3a:8d:33:3b:dc:99:6c:92:36:
                    fd:07:31:f6:74:d8:a5:bf:5a:34:8f:a7:5f:f4:4d:
                    e3:18:5a:9a:53:a4:54:35:a8:6a:d7:81:44:5e:a6:
                    8b:bd:a0:2c:bc:60:eb:a8:bd:2f:6f:40:f3:d5:b4:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:19:68:D5:25:16:27:C9:C0:71:85:F8:9E:A9:2B:F1:07:47:FC:5D
            X509v3 Authority Key Identifier:
                keyid:CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/f257a3b62b30fea2ff4dce69b08a640ed3490c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/4cba7f8bd719e527c075d1975618d1234b50de72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:26:9b:69:f8:5d:3c:32:38:07:ee:97:ee:fe:d6:69:19:c0:
         4b:3c:50:4e:dc:1f:dc:fe:27:52:a7:51:d1:13:51:09:73:a6:
         e9:fb:c4:02:89:64:45:8d:fa:31:68:d4:4b:13:9e:b7:a5:0d:
         ce:ad:c8:32:ad:52:b5:70:b8:21:b5:ad:8b:8e:43:cd:54:5f:
         f3:9a:eb:4f:61:86:ce:db:32:39:25:31:82:d7:93:7d:66:50:
         d8:c8:86:73:01:a2:2a:c0:d4:97:41:50:3e:3f:b1:e2:c7:51:
         40:ba:46:98:5b:23:33:1d:b3:c5:63:8d:f3:1a:bf:05:30:f7:
         f5:42:0a:bc:e8:b2:48:f1:05:0e:ba:39:ce:dc:3a:6b:cf:87:
         4a:81:28:49:15:74:bd:98:ea:c1:43:fd:01:42:66:6d:0d:fa:
         76:5d:f5:b0:7b:a5:03:9f:3d:9c:d4:2f:91:f5:15:35:49:d4:
         5f:ac:c7:51:2c:fa:9c:83:fc:79:86:40:66:e2:5f:d5:3b:49:
         5f:72:79:24:27:99:c1:c7:2e:ae:f3:7e:87:7c:93:e7:7d:28:
         07:15:87:81:3d:c7:c5:cb:bb:0c:2a:82:89:95:00:8e:65:95:
         fd:5c:49:31:a8:a3:7e:88:08:d2:68:05:e6:a0:2f:72:72:e9:
         69:b1:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org