Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/afb8e331c45546f2bae0e6c19737b0073ae82340.roa
File:                     afb8e331c45546f2bae0e6c19737b0073ae82340.roa (raw, json)
Hash identifier:          1zSG8N7iHM4fgCMicRMgb62iw8DpqWfrHjzSIlOLUOM=
Subject key identifier:   C0:92:B4:07:DE:97:39:DD:65:8D:AD:AA:CB:FE:EB:44:BF:A1:EB:1B
Certificate issuer:       /CN=a79f7c916be3a1ea7251327afacd5a877554edc2
Certificate serial:       0D57E8
Authority key identifier: 72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/afb8e331c45546f2bae0e6c19737b0073ae82340.roa
Signing time:             Wed 24 Mar 2021 14:31:50 +0000
ROA not before:           Wed 24 Mar 2021 14:31:49 +0000
ROA not after:            Tue 24 Mar 2026 14:31:49 +0000
asID:                     52329
IP address blocks:        131.72.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874472 (0xd57e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79f7c916be3a1ea7251327afacd5a877554edc2
        Validity
            Not Before: Mar 24 14:31:49 2021 GMT
            Not After : Mar 24 14:31:49 2026 GMT
        Subject: CN=afb8e331c45546f2bae0e6c19737b0073ae82340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:53:6e:e5:68:25:91:80:39:98:3d:0b:f8:
                    da:78:88:ee:c0:6f:cd:ff:c7:3d:7f:8b:45:41:90:
                    62:27:0d:70:0b:66:62:f7:13:0d:43:87:fc:34:44:
                    53:55:04:4f:a7:c8:8d:41:7c:51:e1:1b:48:2d:7f:
                    60:9e:9b:16:c6:00:82:ef:c0:a3:41:20:a6:4a:d3:
                    5d:38:89:56:ba:09:eb:94:27:32:e3:07:c5:72:8d:
                    10:ed:96:fe:1d:3a:00:69:ea:39:f3:57:e0:a4:d9:
                    67:79:52:17:78:b3:02:de:bd:4c:6e:a5:a0:bb:58:
                    e4:79:ea:6d:42:7b:37:ca:c6:c9:ef:c2:bc:d8:69:
                    5b:15:b0:08:b8:0d:cc:a1:12:fb:1b:71:24:7c:f2:
                    b2:a0:71:ff:b9:75:bb:b6:d0:7e:60:55:d7:51:c2:
                    3a:7d:91:70:23:08:f3:6c:99:80:6b:33:09:b2:3d:
                    6d:38:27:aa:b0:c5:41:c8:1f:70:5b:94:67:29:98:
                    d8:7c:a2:27:9d:26:85:cf:39:9b:a8:d5:8a:8a:04:
                    e8:49:c5:8d:1d:82:4b:19:a9:ea:ff:5a:19:9d:7d:
                    4c:ff:62:ee:9d:3a:a5:78:ce:9f:27:71:7b:65:eb:
                    19:f2:ab:4a:4e:0d:e5:89:db:e9:51:f8:c1:6e:9b:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:B4:07:DE:97:39:DD:65:8D:AD:AA:CB:FE:EB:44:BF:A1:EB:1B
            X509v3 Authority Key Identifier:
                keyid:72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/afb8e331c45546f2bae0e6c19737b0073ae82340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:f4:27:aa:7a:77:aa:20:fe:05:4f:8d:ad:20:ea:cb:4b:
         f7:54:ba:68:7e:50:28:07:e8:d8:20:79:a2:63:eb:e7:c3:3d:
         7a:90:cb:c6:03:a6:18:2f:99:e9:8d:00:f9:83:b2:41:5c:c9:
         82:51:5c:05:a6:b0:dc:5e:75:7b:f4:3f:80:43:4c:44:fb:aa:
         31:c3:9c:20:2a:77:5f:bb:13:f2:24:ff:6f:06:de:1d:1a:39:
         ac:9a:66:85:42:8e:07:66:32:00:9f:de:59:d5:4c:33:4d:c9:
         17:11:77:da:d2:59:f4:85:1c:cf:9e:5a:a0:d4:09:21:6b:a1:
         75:e4:c3:d5:cd:c1:cd:a9:42:35:b2:fd:c0:1c:d8:b5:90:8c:
         db:69:72:aa:76:a6:c2:73:a6:d9:8e:94:15:0d:cc:f3:53:e7:
         4d:32:3f:cb:b8:2d:ed:af:59:af:63:8d:24:4d:33:59:8d:10:
         3f:89:d6:92:5a:11:09:6d:c0:b3:0e:ec:50:c5:44:5d:d5:46:
         56:46:e0:f8:ef:23:e7:43:26:a5:a6:e6:5e:13:1a:3a:c6:9a:
         1b:85:88:6a:98:21:a1:63:10:16:6c:b0:fc:be:a1:7e:3d:af:
         52:65:da:af:0c:52:16:96:40:70:df:17:bb:2a:9d:92:ca:36:
         4a:37:3f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org