Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/7510187d02f03770a319336e971051b3176f4d98.roa
File:                     7510187d02f03770a319336e971051b3176f4d98.roa (raw, json)
Hash identifier:          thiJUpp0zYm9FGSM+SCxf0B7XCTiVYeWaMm9CQ76w2I=
Subject key identifier:   42:0B:EE:63:1F:C3:C8:B3:04:99:B2:26:21:A6:7E:A5:76:DA:FE:B3
Certificate issuer:       /CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
Certificate serial:       0D51C6
Authority key identifier: 5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/7510187d02f03770a319336e971051b3176f4d98.roa
Signing time:             Wed 24 Mar 2021 14:38:05 +0000
ROA not before:           Wed 24 Mar 2021 14:38:05 +0000
ROA not after:            Tue 24 Mar 2026 14:38:05 +0000
asID:                     27725
IP address blocks:        200.14.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872902 (0xd51c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
        Validity
            Not Before: Mar 24 14:38:05 2021 GMT
            Not After : Mar 24 14:38:05 2026 GMT
        Subject: CN=7510187d02f03770a319336e971051b3176f4d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f8:fa:29:c4:a9:b9:c6:b9:25:83:be:f5:87:
                    e5:43:b8:2a:d1:62:8f:a7:42:d2:23:07:f3:b7:16:
                    4d:a3:11:99:bc:34:b9:27:87:f0:5a:1e:66:3e:29:
                    7d:07:a4:e9:be:13:87:0a:c0:3a:e9:78:da:1d:5c:
                    90:27:62:4a:0f:7d:86:92:b3:b6:f5:f1:d5:85:fd:
                    96:c8:65:91:81:ed:98:9e:15:3f:f9:a3:bb:86:b5:
                    bf:e5:a7:71:64:ac:92:86:bc:bc:a5:59:a0:82:98:
                    1b:10:e2:20:98:25:39:0a:9b:e5:49:5d:b2:03:5e:
                    64:19:69:3c:70:81:49:c7:d2:3c:84:c4:ad:e4:46:
                    7d:a1:4a:fb:67:13:10:c2:99:bc:70:47:d0:c8:60:
                    3c:f4:bc:c5:ca:38:74:7f:62:d8:c1:2e:8e:72:23:
                    d1:45:d5:a7:e5:2a:f8:4e:4b:3f:d4:8d:5a:7b:9a:
                    1f:17:06:7a:fa:a3:44:42:92:3a:33:36:fd:e5:2c:
                    ed:89:63:95:79:f4:93:e2:52:3d:ed:84:74:86:a1:
                    25:f6:3a:d5:da:6b:a5:4a:fc:ad:1e:1b:84:2b:60:
                    34:46:7e:4c:10:ac:38:75:74:24:e3:ac:72:45:a0:
                    31:f3:db:06:10:78:be:cf:ea:8e:56:e9:09:a8:20:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0B:EE:63:1F:C3:C8:B3:04:99:B2:26:21:A6:7E:A5:76:DA:FE:B3
            X509v3 Authority Key Identifier:
                keyid:5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/7510187d02f03770a319336e971051b3176f4d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/5d8acf86c4ef1439f1fcdd22154481d770578f01.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:bb:a5:39:64:ad:06:86:fb:7d:74:84:68:c3:9e:c9:56:31:
         49:ae:01:21:d3:cb:e6:47:be:69:ce:6c:13:4c:ce:8b:57:44:
         52:94:4c:09:f7:cb:50:c7:5a:50:e4:79:29:5c:72:f8:4e:ee:
         f9:e6:cc:1e:31:40:c1:77:4c:55:fa:ae:e2:27:eb:f5:d0:0c:
         97:30:7b:9f:76:59:52:2d:e1:6d:c5:f7:94:3d:86:3f:65:c8:
         34:79:f3:37:33:d4:af:da:ad:b6:02:6c:b2:97:6f:0f:f7:b3:
         ba:ff:85:b1:b1:62:04:af:28:e8:3f:fc:07:60:fa:d0:d8:03:
         06:26:9b:c0:3b:e3:fd:d1:62:89:3c:55:5d:27:15:c3:a2:25:
         18:a1:67:04:77:b1:b7:54:79:11:1a:26:dd:7f:89:85:19:26:
         d4:f2:d5:c7:30:df:12:5f:10:e2:52:1a:a0:62:3b:86:95:24:
         03:d8:27:a2:d7:6d:59:d3:1e:fe:ac:d5:37:2a:66:13:e3:e3:
         df:02:77:55:70:d2:bd:73:cf:ce:1e:60:94:c3:6d:3c:e5:36:
         49:7d:48:50:fe:1a:61:2a:e5:f6:9e:06:60:05:04:e4:cb:6e:
         2d:df:03:3a:99:0d:62:fd:13:ef:c0:87:4a:8f:1d:1b:e0:37:
         79:32:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org