Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/7f4a93db2ff7a3b0af2ab7b2af16440945f726ff.roa
File:                     7f4a93db2ff7a3b0af2ab7b2af16440945f726ff.roa (raw, json)
Hash identifier:          oK0ypFppSbbY55n9zs+xqA4LeE7W14rmutugeJNDX44=
Subject key identifier:   75:12:E6:B8:FC:8D:8F:86:8B:71:FC:6C:67:83:42:9A:CA:67:57:90
Certificate issuer:       /CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
Certificate serial:       0D5744
Authority key identifier: 5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/7f4a93db2ff7a3b0af2ab7b2af16440945f726ff.roa
Signing time:             Wed 24 Mar 2021 14:38:05 +0000
ROA not before:           Wed 24 Mar 2021 14:38:05 +0000
ROA not after:            Tue 24 Mar 2026 14:38:05 +0000
asID:                     27725
IP address blocks:        200.14.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874308 (0xd5744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
        Validity
            Not Before: Mar 24 14:38:05 2021 GMT
            Not After : Mar 24 14:38:05 2026 GMT
        Subject: CN=7f4a93db2ff7a3b0af2ab7b2af16440945f726ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:2f:74:5a:75:aa:8d:c1:6e:f4:3a:80:5f:
                    6c:16:80:1c:19:57:0d:22:1e:c7:5f:5b:d4:52:9b:
                    79:c5:66:27:0b:b7:b2:5b:10:e5:df:26:13:3a:b3:
                    d3:89:6a:cb:23:74:4a:fd:3f:6f:a5:58:d9:ee:98:
                    99:4e:a9:3a:35:85:ce:db:8d:9c:69:c4:83:b4:99:
                    58:21:35:14:c3:a0:fc:1b:d6:21:d5:29:cf:c3:b0:
                    ff:3e:16:54:b5:7a:14:bd:d4:88:2d:a2:7a:f2:5a:
                    51:3e:2f:5f:8d:ce:4b:b9:ed:67:fa:b2:93:8a:34:
                    7a:fc:03:c9:73:97:54:23:ca:90:9a:05:b2:b5:5f:
                    6a:0c:4f:59:59:1f:b7:7e:6e:22:0d:59:4f:93:46:
                    f4:a4:d9:39:d0:a3:cf:aa:d0:6c:eb:08:9a:a7:7a:
                    5d:14:3c:66:4a:16:1b:e9:21:ac:46:47:35:bb:bb:
                    e4:00:87:00:f8:20:85:96:e9:04:7b:31:7c:d3:71:
                    e2:b2:a8:1e:3d:e9:00:8b:7e:75:fb:8e:1f:38:ea:
                    ae:22:21:d5:71:2d:15:f6:e9:b9:b1:4d:92:ef:5a:
                    ba:83:8a:58:16:94:8d:db:6b:28:84:55:9b:6f:37:
                    f2:62:75:e5:c2:5f:7f:36:e2:a5:47:ae:81:a3:79:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:E6:B8:FC:8D:8F:86:8B:71:FC:6C:67:83:42:9A:CA:67:57:90
            X509v3 Authority Key Identifier:
                keyid:5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/7f4a93db2ff7a3b0af2ab7b2af16440945f726ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/5d8acf86c4ef1439f1fcdd22154481d770578f01.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:36:82:36:7b:4b:22:a9:3a:43:8d:34:08:27:53:a2:fc:
         71:1a:b5:a0:84:86:26:bf:57:31:1c:f6:9e:1c:9e:d8:26:6f:
         e7:e0:a5:d7:33:11:75:ff:4e:64:f2:f3:70:57:9c:e3:c3:c8:
         12:af:d3:3a:a0:2b:ef:fe:a5:62:27:80:4e:39:93:d4:f1:9a:
         1e:64:74:cf:9f:d2:25:d4:23:3f:27:c2:66:34:43:f3:5c:63:
         2c:ad:d6:55:dc:29:5b:e0:0a:1c:47:32:98:55:95:13:85:42:
         0c:5f:86:1d:72:c8:02:86:09:45:0f:03:e8:16:62:4b:c8:7f:
         b1:52:f4:6c:24:24:fa:cf:6c:3a:c5:e5:55:54:26:03:90:25:
         35:d9:c1:6d:69:5f:61:0b:d5:f0:63:4c:6f:ba:ae:3b:f3:5e:
         a0:17:3b:56:51:ec:d7:96:c7:f9:bb:4a:63:ed:bb:2f:09:2d:
         ce:7e:8a:9e:f2:58:5c:e0:3b:7e:4d:93:eb:19:59:19:04:d5:
         60:b9:97:36:7b:59:b8:ba:7a:b4:9a:60:bc:05:e6:1e:8f:8b:
         e7:27:9f:ad:0d:8a:0c:c2:54:d7:44:62:5e:fb:77:c0:fd:6d:
         37:a3:7a:b1:4e:0d:ab:fd:f9:5c:73:ab:49:69:3a:df:f0:d4:
         78:42:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org