Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/2240fdcee006c47a00621983aebb808907f66796.roa
File:                     2240fdcee006c47a00621983aebb808907f66796.roa (raw, json)
Hash identifier:          xkC+fmAXLAfmUT+grRMt5hOvWlX5Wcjpkpk28Z9k1fk=
Subject key identifier:   C9:60:8F:CD:50:69:C4:E1:02:0C:1B:2A:32:3C:1B:E4:19:47:40:16
Certificate issuer:       /CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
Certificate serial:       0D5500
Authority key identifier: 5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/2240fdcee006c47a00621983aebb808907f66796.roa
Signing time:             Wed 24 Mar 2021 14:38:05 +0000
ROA not before:           Wed 24 Mar 2021 14:38:05 +0000
ROA not after:            Tue 24 Mar 2026 14:38:05 +0000
asID:                     27725
IP address blocks:        200.14.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873728 (0xd5500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
        Validity
            Not Before: Mar 24 14:38:05 2021 GMT
            Not After : Mar 24 14:38:05 2026 GMT
        Subject: CN=2240fdcee006c47a00621983aebb808907f66796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dd:ae:0a:62:74:61:33:46:7b:52:1e:3e:8f:
                    f8:2b:c2:55:37:40:4d:a7:2e:1d:01:61:5f:ad:4b:
                    74:83:b9:94:d1:77:dc:3e:3b:8c:b9:6e:9b:2c:17:
                    89:2a:07:74:10:2e:c3:15:7e:cd:ef:b9:be:00:20:
                    8a:e8:16:88:39:c8:76:c4:b2:9a:55:d8:15:ab:c4:
                    f0:3d:11:ba:85:f6:82:40:f2:d3:17:a9:cb:94:2d:
                    9c:15:28:63:e1:ca:f7:cf:5c:7d:92:87:09:24:99:
                    c6:29:e6:4b:6a:c9:0e:73:24:60:2c:ee:13:6a:da:
                    60:4d:d7:be:74:14:1c:a3:79:d2:a3:e5:c5:09:22:
                    8d:3e:f1:84:81:31:67:9a:e2:6d:ac:90:ad:10:87:
                    d0:63:cf:a5:51:d0:7d:26:8f:ac:f2:86:9c:ac:8f:
                    4f:1a:cb:a4:74:32:d3:86:3b:13:95:7b:1e:2e:07:
                    09:12:47:9a:d9:fd:d4:ab:49:5a:e9:1e:9f:f3:26:
                    5e:eb:fd:e6:a5:32:77:58:b0:10:60:32:67:12:3e:
                    5f:49:ed:ea:79:27:ea:7a:50:2b:e8:82:bb:a0:12:
                    9a:d2:a2:ad:bf:6d:a6:71:29:90:ec:35:eb:5f:9c:
                    11:9f:89:06:a8:23:f8:d7:d7:2a:a4:17:dc:5d:49:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:8F:CD:50:69:C4:E1:02:0C:1B:2A:32:3C:1B:E4:19:47:40:16
            X509v3 Authority Key Identifier:
                keyid:5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/2240fdcee006c47a00621983aebb808907f66796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/5d8acf86c4ef1439f1fcdd22154481d770578f01.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:07:65:06:09:19:6b:46:c7:07:74:98:10:d9:69:c7:f8:34:
         09:35:13:c8:f7:f1:f7:75:6b:f5:62:e0:49:f3:96:c0:cc:13:
         c4:df:38:c3:fc:49:26:77:81:30:77:ce:6d:b5:5b:d8:5b:14:
         17:d1:d8:dc:bd:17:96:12:c4:79:ed:47:3c:46:ab:52:5c:93:
         a0:21:cc:1a:e1:70:98:4f:82:34:26:77:cf:01:7c:87:10:dc:
         c3:c4:9e:9f:5f:02:76:6e:7e:48:96:18:3d:77:5c:da:82:ca:
         fe:95:ea:05:1a:b4:95:73:eb:03:2f:9a:62:78:3f:65:41:a3:
         f1:83:47:23:05:e1:d8:97:b1:5c:93:c4:90:3a:e8:62:e6:d1:
         24:98:94:00:5d:9d:d9:6a:0d:0c:4b:6e:39:f4:40:87:25:31:
         7b:0e:ff:04:13:b5:f8:dc:c7:7f:a6:7d:28:19:18:09:40:c3:
         02:5e:23:81:43:f9:81:b5:e2:ff:8f:87:cd:e1:77:fd:e6:58:
         bf:b3:ba:ba:65:43:f9:ee:cb:c4:26:dd:5f:14:06:36:29:c4:
         e3:2e:98:fc:ae:16:85:eb:17:03:85:80:1e:7d:82:a6:1b:e5:
         aa:e9:4c:b6:18:a0:79:76:f8:19:64:ed:c3:71:42:7d:e6:1a:
         a5:0a:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org