Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c42d5925-4471-42e7-a1f6-77c075c4819a/2ca3909a25dd93e56858ee04881bfade0e4a109c.roa
File:                     2ca3909a25dd93e56858ee04881bfade0e4a109c.roa (raw, json)
Hash identifier:          DrmpzT2C6Y6pV6WiXdQGmJQNfRL/xg5Y1teX+VV0ELU=
Subject key identifier:   6D:32:ED:13:61:19:AA:18:4C:32:8C:37:2D:25:10:C6:E9:E7:19:69
Certificate issuer:       /CN=a178ad5a7fa596cf6b734e6f607d98fb4c854d6c
Certificate serial:       0D0230
Authority key identifier: C7:94:2B:65:6E:A7:1D:1B:D6:82:A3:09:5A:F6:26:64:53:8E:B4:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a178ad5a7fa596cf6b734e6f607d98fb4c854d6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c42d5925-4471-42e7-a1f6-77c075c4819a/2ca3909a25dd93e56858ee04881bfade0e4a109c.roa
Signing time:             Wed 24 Mar 2021 14:35:07 +0000
ROA not before:           Wed 24 Mar 2021 14:35:07 +0000
ROA not after:            Tue 24 Mar 2026 14:35:07 +0000
asID:                     264762
IP address blocks:        200.192.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852528 (0xd0230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a178ad5a7fa596cf6b734e6f607d98fb4c854d6c
        Validity
            Not Before: Mar 24 14:35:07 2021 GMT
            Not After : Mar 24 14:35:07 2026 GMT
        Subject: CN=2ca3909a25dd93e56858ee04881bfade0e4a109c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:35:ee:fb:a3:c4:ae:d2:bb:b6:97:f2:a6:
                    05:6c:81:d0:8c:f3:56:19:a1:3f:f1:bf:eb:3a:aa:
                    ab:07:8e:11:ab:af:5b:cb:1a:43:94:ce:a5:50:81:
                    ae:47:a2:de:7a:6d:b7:b7:6a:94:f7:8e:35:70:6d:
                    cd:d3:84:5c:72:6a:60:56:a9:bd:32:0d:2e:3d:9c:
                    83:ae:e3:b3:a3:bc:87:9c:1e:f9:7e:12:13:c5:d5:
                    eb:08:01:61:7d:91:20:e3:b1:f2:e4:d2:bb:1b:b5:
                    40:bb:ac:e0:42:25:dc:86:0e:a8:a0:91:d2:42:13:
                    43:eb:0b:29:1d:1e:d9:0b:4e:be:d6:32:7f:50:dd:
                    a7:41:a3:0d:4d:b2:d6:a4:05:e3:b0:3e:36:92:ec:
                    ef:1d:e7:be:36:76:54:7f:74:4f:15:5f:2b:8d:df:
                    20:ae:84:22:fd:b1:36:c1:8f:4a:61:d5:76:2f:e5:
                    ad:fb:9f:06:07:32:16:39:f8:36:b8:06:b4:c8:3a:
                    c7:c7:71:13:de:f8:30:e7:4c:f7:e5:95:e8:7b:bb:
                    c5:b5:86:08:7e:d8:fd:6d:44:51:9e:71:04:79:e4:
                    2d:b2:75:14:5b:dd:14:dd:87:f0:9a:42:26:bf:e2:
                    32:d2:ef:78:ac:b5:3b:95:d0:c2:e1:c6:40:db:11:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:32:ED:13:61:19:AA:18:4C:32:8C:37:2D:25:10:C6:E9:E7:19:69
            X509v3 Authority Key Identifier:
                keyid:C7:94:2B:65:6E:A7:1D:1B:D6:82:A3:09:5A:F6:26:64:53:8E:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a178ad5a7fa596cf6b734e6f607d98fb4c854d6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c42d5925-4471-42e7-a1f6-77c075c4819a/2ca3909a25dd93e56858ee04881bfade0e4a109c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c42d5925-4471-42e7-a1f6-77c075c4819a/a178ad5a7fa596cf6b734e6f607d98fb4c854d6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:25:62:5a:56:95:17:f7:c5:3d:ce:8a:ed:9c:ac:e9:af:f5:
         33:ee:fb:21:6f:a5:44:38:11:f8:87:d1:de:39:cd:2e:f9:d0:
         e4:44:43:12:c3:24:bb:bf:62:96:bf:e6:83:b4:b0:48:8a:bb:
         91:f7:bc:c4:fa:22:3e:1e:9e:1d:94:c3:07:9e:a5:39:f7:ab:
         0b:8f:83:f8:6b:63:af:dc:5f:cf:8d:a6:c4:0c:dc:aa:4b:e9:
         16:96:ca:38:3e:05:f1:22:77:f0:ab:ba:4f:ce:bf:f0:22:5f:
         3a:e2:95:1c:6b:51:a0:7f:49:ef:1e:a2:7b:59:05:a6:96:2c:
         68:c2:e0:6e:ec:0b:65:99:dd:38:c6:88:bd:85:7b:d6:89:fe:
         bb:a1:5f:f0:b2:08:c1:4e:08:94:20:77:4c:aa:bb:ef:38:c7:
         95:73:1b:b7:89:dc:a9:1b:86:bf:2b:4a:48:f0:cc:11:f3:6d:
         1d:4d:60:f0:22:a6:91:c0:d7:a0:7e:9d:4e:c9:1d:60:58:83:
         d9:97:76:35:e2:7d:4f:cd:15:d4:e7:de:0d:d8:77:98:9e:99:
         cf:d4:3c:82:06:a4:91:2e:8f:ac:79:4e:60:6f:27:a3:c9:ac:
         4d:e3:56:fe:2b:c3:67:53:d3:ff:87:32:19:51:a6:7a:bd:d9:
         07:ac:e4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org