Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/c531ff8902917b9a6ad687d2c6ffa0ea85fc5d90.roa
File:                     c531ff8902917b9a6ad687d2c6ffa0ea85fc5d90.roa (raw, json)
Hash identifier:          MCrLnbYRaGBS9QIoSnpYEu+c3fcGUv+LE/A+Vafpi1M=
Subject key identifier:   0B:66:9C:53:C5:B9:10:2A:CC:3A:D2:33:7E:74:49:2A:6B:69:E0:25
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01519C
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/c531ff8902917b9a6ad687d2c6ffa0ea85fc5d90.roa
Signing time:             Sun 14 Nov 2021 14:57:54 +0000
ROA not before:           Sun 14 Nov 2021 03:00:00 +0000
ROA not after:            Tue 14 Nov 2023 03:00:00 +0000
asID:                     27866
IP address blocks:        201.217.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86428 (0x1519c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 14 03:00:00 2021 GMT
            Not After : Nov 14 03:00:00 2023 GMT
        Subject: CN=c531ff8902917b9a6ad687d2c6ffa0ea85fc5d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:54:97:af:db:69:b5:63:0a:6d:87:e7:ed:
                    a1:66:53:4a:29:59:74:01:91:31:bc:b7:0b:67:9e:
                    63:b4:b4:c6:06:52:ac:ee:3d:4a:17:34:cb:81:d5:
                    6e:5d:e9:29:1f:d9:8d:04:c5:53:8a:98:9d:80:e8:
                    ef:73:b1:80:6e:45:bc:76:77:33:74:1c:64:eb:e6:
                    2d:cb:70:fe:24:d5:e0:ea:96:70:74:2e:71:bd:fe:
                    25:cb:d4:ca:6f:93:a0:af:8c:91:0d:14:50:b8:7c:
                    ed:f5:c3:f9:d4:f9:69:e0:71:c5:3f:25:32:7c:bc:
                    6c:e3:b8:70:a3:64:fd:f0:0b:b2:5e:f4:71:72:ca:
                    c6:ac:ad:1e:dc:44:f6:ac:0c:b3:70:a8:d9:ae:27:
                    b1:fb:11:a6:13:2b:60:82:52:37:a7:48:c5:ff:15:
                    11:24:c4:7a:58:99:21:c8:9e:9f:3f:24:72:03:9f:
                    2d:46:48:cd:b3:18:9e:e9:f6:cc:a5:10:fc:90:41:
                    09:f7:0a:95:90:19:65:92:03:f8:91:55:6d:46:53:
                    24:f6:d1:99:93:d0:9e:3d:10:a1:64:97:6d:ec:40:
                    90:71:99:cd:27:8b:d8:a9:6c:56:8a:34:dd:79:08:
                    38:be:3c:1c:16:03:22:8a:b9:e5:8c:0e:83:f2:e9:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:66:9C:53:C5:B9:10:2A:CC:3A:D2:33:7E:74:49:2A:6B:69:E0:25
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/c531ff8902917b9a6ad687d2c6ffa0ea85fc5d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:7b:1b:07:8b:0e:1c:7c:0c:d0:e1:37:b2:ab:2b:14:ad:
         2a:14:2f:a6:be:76:26:59:b7:73:d4:18:29:0b:a5:79:b9:de:
         7d:9a:f0:d0:5e:10:4c:0b:4f:d3:ac:29:b4:a1:39:0d:03:8a:
         9c:2c:55:c5:da:ee:ad:ea:46:3a:eb:64:33:76:05:5b:7f:59:
         4d:63:3b:90:35:77:41:d6:c9:41:bf:de:9e:6b:0a:cf:96:a8:
         27:ee:0f:6f:5b:8b:3d:59:2e:45:b0:da:43:19:dd:49:0d:55:
         d1:ab:ad:d6:bf:b7:e6:bd:ef:2c:3e:ac:70:60:63:f9:11:6d:
         70:46:08:b7:8c:cb:79:90:38:46:c8:5e:05:d1:18:d4:d8:7e:
         bc:bc:28:d0:1c:b8:3d:ff:2a:33:97:97:28:ac:6f:3d:c5:2b:
         8b:e1:07:6a:0e:18:78:0f:53:71:5d:3e:9c:6f:b4:5e:5f:96:
         19:69:c1:15:bc:03:96:2d:55:2a:95:fc:f5:bb:a7:be:27:5c:
         e5:47:22:b2:d1:21:35:cf:03:79:54:20:bd:75:a3:2a:9e:66:
         51:47:ee:eb:de:e7:27:ac:38:7d:1d:a1:6b:2a:d9:08:88:d0:
         49:ca:60:0d:43:df:f4:33:89:d0:99:98:b5:fa:02:63:23:6a:
         c7:3c:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org