Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6309490-6417-4d1c-8277-abda615e1fbb/1003fa3df697a546e9228b9198793c871121fee8.roa
File:                     1003fa3df697a546e9228b9198793c871121fee8.roa (raw, json)
Hash identifier:          fQGFx7qi3S4wf2+XmmDHcMx4v9Avi/eFtlIVijZ7IwY=
Subject key identifier:   A6:E6:6D:3A:C8:4B:53:1C:CD:78:C3:8B:AF:7F:6D:32:6A:12:AD:70
Certificate issuer:       /CN=3e2c9484285fd10b833391a3d2053ddf7dad58f6
Certificate serial:       0DA0BE
Authority key identifier: 36:A2:BE:C5:29:E8:3D:F6:B6:DA:9F:36:AE:9E:E3:22:BF:26:B7:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e2c9484285fd10b833391a3d2053ddf7dad58f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6309490-6417-4d1c-8277-abda615e1fbb/1003fa3df697a546e9228b9198793c871121fee8.roa
Signing time:             Wed 24 Mar 2021 14:30:43 +0000
ROA not before:           Wed 24 Mar 2021 14:30:43 +0000
ROA not after:            Tue 24 Mar 2026 14:30:43 +0000
asID:                     52293
IP address blocks:        200.12.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893118 (0xda0be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2c9484285fd10b833391a3d2053ddf7dad58f6
        Validity
            Not Before: Mar 24 14:30:43 2021 GMT
            Not After : Mar 24 14:30:43 2026 GMT
        Subject: CN=1003fa3df697a546e9228b9198793c871121fee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e2:bb:e8:29:1a:32:1f:22:03:ca:72:bc:cb:
                    85:9a:7d:f5:bb:5f:fa:4b:f1:81:1f:4d:58:58:8d:
                    a3:5c:5a:fb:03:60:2b:4e:c6:4a:34:6b:36:f4:e4:
                    94:be:5a:83:85:af:2c:4f:18:bc:2c:5e:a8:67:8d:
                    0c:ee:11:06:fa:44:b2:de:63:df:40:f1:df:ae:8b:
                    ad:3c:13:80:e4:a3:d7:29:2b:02:aa:d9:b8:75:8d:
                    eb:7e:9f:5a:bf:9f:69:87:ac:41:20:49:8a:36:af:
                    b8:b6:31:00:95:b3:07:79:6d:4f:e8:ca:9c:01:19:
                    c8:0e:ef:e0:3b:15:ea:01:37:f1:79:56:b3:b2:35:
                    eb:65:4e:31:3a:e3:43:51:20:43:80:78:d3:5d:19:
                    ee:35:fe:3e:c9:d7:cc:90:7e:2f:e0:2d:ce:c3:1d:
                    bc:5a:a1:18:5f:c5:5c:bf:ed:b4:40:cf:c1:29:2b:
                    99:2c:60:57:63:ce:4f:27:e5:ce:70:d0:5d:02:4d:
                    35:23:07:15:7a:77:9c:8a:a8:b7:f3:a5:5b:eb:1c:
                    ff:c0:e1:82:00:cf:0e:2e:f5:ea:81:d7:6a:76:93:
                    a5:0e:27:7f:bb:e9:5b:22:ef:98:f9:53:5f:c6:fc:
                    d9:52:5e:f4:be:1e:04:1d:b7:72:69:bf:fc:54:b2:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E6:6D:3A:C8:4B:53:1C:CD:78:C3:8B:AF:7F:6D:32:6A:12:AD:70
            X509v3 Authority Key Identifier:
                keyid:36:A2:BE:C5:29:E8:3D:F6:B6:DA:9F:36:AE:9E:E3:22:BF:26:B7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e2c9484285fd10b833391a3d2053ddf7dad58f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6309490-6417-4d1c-8277-abda615e1fbb/1003fa3df697a546e9228b9198793c871121fee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6309490-6417-4d1c-8277-abda615e1fbb/3e2c9484285fd10b833391a3d2053ddf7dad58f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:ec:b8:cd:c1:5f:4d:f9:65:05:8f:fd:1a:85:d2:13:01:
         cd:8d:08:cf:c0:b9:1e:f8:fd:1d:b6:96:44:86:4d:33:a7:27:
         7d:bb:2d:d2:d7:ec:fe:b9:73:84:48:cb:19:aa:6f:f4:53:a6:
         c9:8c:a2:67:79:fe:44:76:2a:22:14:1e:b1:27:3a:07:ff:85:
         ec:9e:a8:49:7f:05:f8:6e:7d:36:2a:78:f7:cb:2a:3d:a3:f6:
         62:57:75:58:55:a9:6a:a9:df:31:05:b0:f9:ad:a8:50:32:95:
         6a:04:e0:7c:3a:c2:8f:69:34:99:96:46:c9:aa:b9:47:69:0e:
         15:41:d8:28:50:44:80:e2:87:0d:d0:c0:d1:3a:cd:73:a8:ee:
         6e:55:92:94:36:3f:e6:bd:56:db:76:e9:df:02:99:38:7a:ad:
         38:dd:d1:a8:ea:86:f2:1e:dd:bc:ac:09:fb:e1:5e:9f:71:07:
         35:bb:4e:ac:bd:22:93:d2:59:64:9d:f8:fb:c2:83:35:96:75:
         49:5a:07:7e:41:25:91:9c:a1:f9:7d:ce:08:a2:73:a5:30:0d:
         eb:64:ad:74:53:6d:59:fc:c3:9a:4b:04:6e:8e:1f:ab:1f:2b:
         49:03:ff:d0:03:75:e8:dd:ec:09:51:a7:04:79:7c:e6:00:e3:
         79:ed:15:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org