Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/2296641a83dfdbc764d4bb9f055154c07d7619e5.roa
File:                     2296641a83dfdbc764d4bb9f055154c07d7619e5.roa (raw, json)
Hash identifier:          u2nsH09ahTTAoOoio4Gbqo2DDtI6kI8Kfzv8HAWJuiA=
Subject key identifier:   CD:9A:B2:D9:D6:85:B3:B1:49:08:D0:9B:A7:90:08:1D:C8:21:85:02
Certificate issuer:       /CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
Certificate serial:       0D4E28
Authority key identifier: 5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/2296641a83dfdbc764d4bb9f055154c07d7619e5.roa
Signing time:             Wed 24 Mar 2021 14:38:05 +0000
ROA not before:           Wed 24 Mar 2021 14:38:05 +0000
ROA not after:            Tue 24 Mar 2026 14:38:05 +0000
asID:                     27725
IP address blocks:        200.14.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871976 (0xd4e28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
        Validity
            Not Before: Mar 24 14:38:05 2021 GMT
            Not After : Mar 24 14:38:05 2026 GMT
        Subject: CN=2296641a83dfdbc764d4bb9f055154c07d7619e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:0b:9a:56:3d:e4:8a:a9:fd:53:45:37:26:
                    18:41:a0:64:1f:81:3c:aa:ee:f0:3e:64:7f:55:49:
                    e2:18:14:ed:31:90:be:52:69:22:58:58:41:93:79:
                    45:67:72:54:55:68:8e:19:21:79:b0:2e:0e:19:a6:
                    a8:6f:0c:af:aa:35:83:6d:2e:bd:c3:a5:2d:fe:3e:
                    f1:3d:d9:01:09:26:cd:9b:70:88:25:26:f7:19:41:
                    b0:48:75:72:02:5f:74:88:2a:33:14:67:a3:8f:1d:
                    f7:fe:79:89:55:2f:a7:1b:fa:a6:94:18:92:03:a0:
                    5a:f6:19:31:f2:7b:3b:47:80:cb:8e:ed:0b:da:58:
                    9d:b2:79:c0:4c:9f:6a:8d:73:63:b6:9d:82:04:33:
                    c6:11:5c:4c:48:2d:d2:34:bc:00:cd:f1:5f:30:57:
                    ae:21:b1:3f:f9:aa:93:4a:31:f7:f5:4c:ac:83:97:
                    7d:8c:0e:dc:75:90:0e:d9:96:a2:f6:07:5d:0c:ff:
                    b0:21:40:c4:7d:79:7f:65:78:1c:56:21:c8:09:4e:
                    fe:25:cf:aa:43:4b:c8:3b:e0:8d:e6:b0:0f:06:61:
                    a9:ee:e8:24:7c:08:3d:fd:b8:e3:85:62:f1:e5:0f:
                    07:09:cd:54:43:46:dc:0f:ec:f8:64:a2:af:b8:3f:
                    d9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:B2:D9:D6:85:B3:B1:49:08:D0:9B:A7:90:08:1D:C8:21:85:02
            X509v3 Authority Key Identifier:
                keyid:5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/2296641a83dfdbc764d4bb9f055154c07d7619e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/5d8acf86c4ef1439f1fcdd22154481d770578f01.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:82:b0:42:03:33:35:70:9b:4d:56:60:91:68:dd:60:d0:b3:
         29:cf:a7:01:a0:b8:45:4c:79:62:99:2b:39:1f:27:3f:58:e7:
         31:84:5e:6f:62:9e:6a:e3:7d:e8:29:53:e7:51:e3:e4:79:14:
         5b:c5:51:7d:9c:75:04:e4:f0:d8:a0:98:87:45:13:4b:70:8a:
         5d:87:11:17:aa:84:dc:37:44:cf:5c:8f:96:17:09:06:97:08:
         d0:f6:ac:1a:0d:e4:ac:6f:94:cc:33:e5:14:00:6b:67:92:12:
         30:cc:36:0d:a4:1c:3b:31:49:f0:2d:e6:04:f2:f0:3e:49:65:
         7c:46:91:60:74:86:c3:fc:ff:73:7d:27:e1:3b:30:8a:58:08:
         56:d0:2f:ae:44:81:73:cf:37:91:70:26:de:a4:f0:a2:44:a7:
         3f:3d:9f:3d:3c:09:1e:26:a1:56:74:15:24:01:f0:6f:b0:20:
         1f:7d:64:23:12:78:6b:db:da:37:2e:e2:89:26:a9:9e:80:86:
         55:30:e1:57:2e:ea:80:ee:a7:5b:6a:2c:63:2d:e3:50:e1:b7:
         a6:0b:71:71:59:04:4d:fc:96:91:f0:6b:f5:41:ba:2b:93:cd:
         74:bf:46:b1:d9:89:8e:2d:4d:8f:5d:73:d0:c8:38:4d:05:ce:
         71:37:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org