Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/afb408264f506f45761c78b231b9f14724193a8a.roa
File:                     afb408264f506f45761c78b231b9f14724193a8a.roa (raw, json)
Hash identifier:          djTC7NLwkPJ/9shjGtnaot+nrUdVKu1ndUmlWwy9q0M=
Subject key identifier:   B0:BE:20:20:8A:60:8D:F0:68:15:33:7F:FB:66:68:21:51:3D:E0:BE
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       10101A
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/afb408264f506f45761c78b231b9f14724193a8a.roa
Signing time:             Mon 05 Jul 2021 18:48:08 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     27678
IP address blocks:        200.27.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052698 (0x10101a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=afb408264f506f45761c78b231b9f14724193a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:94:9c:05:f4:b0:66:a3:a2:37:92:e2:25:82:
                    56:69:53:ad:57:6c:78:e9:4f:6c:d4:75:aa:3e:5f:
                    a6:01:3e:2f:4e:74:ee:66:b7:cd:cb:76:f9:ac:ab:
                    a2:5d:29:8c:94:41:72:15:c8:96:cd:1d:74:f3:c9:
                    e8:fb:e2:80:05:f4:e6:28:5c:6c:dc:a0:e1:fe:39:
                    f5:56:f5:65:1d:b8:14:f9:06:d3:55:d8:8e:a1:63:
                    ce:ae:7e:70:db:af:86:10:62:7a:4e:96:af:17:0b:
                    90:c2:e6:ae:a4:83:02:ca:f1:43:ac:dd:c6:0a:a0:
                    03:a5:17:62:26:2e:dc:b9:42:00:fe:98:19:14:d9:
                    39:2e:de:12:ea:67:dd:3e:c4:4a:3d:bd:97:36:0a:
                    e1:f5:9f:bc:69:b6:2d:bb:c1:9d:50:45:55:63:c7:
                    f0:c1:14:23:dd:27:20:14:b7:c9:44:1e:fb:a1:2b:
                    6b:f8:1f:4f:38:ca:a5:35:52:ac:3c:22:c4:71:b5:
                    d5:dd:79:9e:0d:37:94:57:44:19:e5:d4:1d:f2:72:
                    3a:aa:20:7d:cb:9d:93:80:6d:22:c1:b5:f8:b7:a3:
                    56:09:9c:09:0a:ae:f5:bd:97:bb:58:fc:ec:c6:69:
                    f3:61:a6:88:d7:2c:8e:14:51:d3:3c:dd:0b:cc:72:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:20:20:8A:60:8D:F0:68:15:33:7F:FB:66:68:21:51:3D:E0:BE
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/afb408264f506f45761c78b231b9f14724193a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:26:a2:e4:11:c5:72:43:3a:04:df:ce:fb:4d:ca:10:da:e1:
         c5:47:00:2a:fc:f7:1e:94:c8:2b:47:fc:1c:46:2e:5b:d0:ad:
         ea:40:c7:f9:df:3c:ec:08:97:6f:93:25:3a:6a:63:72:28:79:
         44:dd:97:b9:15:bb:af:87:92:a2:e0:1d:08:43:b5:ef:04:79:
         6a:13:7e:8f:8d:7f:66:35:1d:b2:7c:03:87:b8:84:fa:c8:68:
         8b:b4:8f:8a:f1:f8:bc:a4:fc:63:9d:85:3e:8a:20:2c:06:cb:
         78:2b:cb:cb:86:d5:32:48:e3:82:a6:8c:e2:c4:fc:47:59:d8:
         c2:10:ae:a6:5e:c9:03:a5:fb:17:75:5d:3b:fd:65:ec:44:b1:
         80:3d:25:c1:fe:6e:80:5a:31:44:ee:01:95:c2:98:43:1f:72:
         fa:23:1b:1c:c5:29:d7:40:1c:d5:75:b9:e5:5c:48:bd:11:1e:
         de:19:a0:60:d9:0d:af:dd:11:5b:04:09:c6:1f:05:72:f4:88:
         27:e6:73:ce:9d:15:04:83:99:cd:b2:bf:a6:52:b8:fa:6b:45:
         2c:ad:fa:66:2d:5e:55:79:97:70:f1:6b:78:dc:bd:ad:52:2d:
         1a:8b:b1:51:0d:f9:0e:76:21:30:65:07:64:c9:2b:03:ae:cb:
         9a:6d:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org