Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/e3504496b22cbc09ba6732663e06ba9c52b9e4ae.roa
File:                     e3504496b22cbc09ba6732663e06ba9c52b9e4ae.roa (raw, json)
Hash identifier:          FZOeDUGwDFLoI2ynr3wRxhEpxCdTgVh/STwmatgWb0E=
Subject key identifier:   80:52:92:8B:DA:62:AF:3E:32:E1:C4:5B:46:3E:22:D2:8C:B0:E0:EF
Certificate issuer:       /CN=92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8
Certificate serial:       0D73FE
Authority key identifier: 51:07:E5:8C:65:19:19:3D:C1:BB:72:06:A9:34:B2:86:11:03:F6:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/e3504496b22cbc09ba6732663e06ba9c52b9e4ae.roa
Signing time:             Wed 24 Mar 2021 14:40:22 +0000
ROA not before:           Wed 24 Mar 2021 14:40:21 +0000
ROA not after:            Tue 24 Mar 2026 14:40:21 +0000
asID:                     27947
IP address blocks:        200.29.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881662 (0xd73fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8
        Validity
            Not Before: Mar 24 14:40:21 2021 GMT
            Not After : Mar 24 14:40:21 2026 GMT
        Subject: CN=e3504496b22cbc09ba6732663e06ba9c52b9e4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7b:cf:70:59:45:29:f9:25:cb:64:eb:5a:69:
                    40:de:b5:25:53:bb:0b:96:6a:62:2c:0f:1c:5c:46:
                    ba:ab:76:12:73:da:02:ac:ed:15:94:6c:12:39:58:
                    31:1d:80:8a:6d:03:bb:b0:b7:7e:a9:24:d7:9c:1f:
                    21:85:5e:01:8e:f8:3a:ee:e9:66:75:75:70:86:99:
                    b6:7c:78:60:44:1e:d8:2e:00:13:73:1d:8b:a2:58:
                    e9:dc:ca:83:b1:d8:6e:ab:a8:eb:5a:93:78:ac:d2:
                    76:dd:2e:6e:27:e3:df:57:fd:7f:c8:24:52:32:28:
                    c7:e7:97:70:88:b2:57:49:d8:c4:d0:74:bf:52:75:
                    ae:5b:27:75:02:a5:3d:7f:f7:42:1d:ab:07:ea:e8:
                    d4:22:9a:fb:58:21:2e:0c:21:97:e9:48:b5:7e:96:
                    33:3f:9d:fc:cf:7e:62:a3:0c:f7:5b:a4:eb:74:31:
                    82:c5:51:3c:d9:b9:92:79:92:2b:5e:61:a0:5e:5d:
                    d2:0d:9d:e6:50:eb:c5:58:00:04:f4:34:a6:28:f8:
                    21:08:7f:53:f5:3c:94:3a:74:00:30:22:73:50:36:
                    87:7c:00:4c:80:b9:bc:71:f7:5b:40:04:6e:db:5b:
                    86:fe:8b:7e:f1:8e:43:99:29:1f:12:45:b7:02:bb:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:92:8B:DA:62:AF:3E:32:E1:C4:5B:46:3E:22:D2:8C:B0:E0:EF
            X509v3 Authority Key Identifier:
                keyid:51:07:E5:8C:65:19:19:3D:C1:BB:72:06:A9:34:B2:86:11:03:F6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/e3504496b22cbc09ba6732663e06ba9c52b9e4ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:fb:2e:a6:68:61:6d:89:4f:5f:96:05:18:d5:cc:1d:16:
         a7:12:7a:d7:77:77:1e:c8:4b:c0:9e:23:3a:ac:68:01:5f:a5:
         bf:db:18:4e:3b:d0:78:1b:c8:f3:2e:f8:a9:74:e1:a7:8d:c2:
         af:80:d1:7d:26:1c:f0:7a:c5:f6:b0:73:99:ca:2c:a3:df:3a:
         fc:54:46:29:20:21:d7:09:76:18:91:21:43:96:28:96:c8:6e:
         bc:17:f0:3d:ff:3d:b4:5f:a8:b4:8c:77:f6:5d:4c:e9:34:af:
         1c:bf:9d:66:c3:47:7a:2f:93:a7:1c:ef:5d:6b:31:8c:fd:2b:
         06:a5:90:ca:ab:e5:ce:5c:14:6f:05:bf:64:6e:e7:7b:39:db:
         3b:e9:1d:8b:a2:0e:7f:66:14:b6:90:ea:0b:d9:f8:09:f9:53:
         2c:39:0a:ba:50:9b:c5:d4:cf:1a:ab:46:ec:e4:d3:c5:a9:73:
         2b:0d:f1:f9:2a:53:fa:eb:ea:37:3f:04:d3:f2:78:7f:ab:2d:
         d1:e7:19:68:6b:63:99:27:24:c9:df:9c:a3:d6:37:c6:db:45:
         ed:5f:05:8e:04:94:07:47:1a:eb:a3:4f:1c:f2:10:fa:dd:d3:
         9b:ca:0a:dc:79:38:b1:b9:7e:a9:cf:11:4b:23:1d:df:bd:0c:
         d9:e4:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org