Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/e8681a063214ef8a1474f9d27bc048d2a54ee4f9.roa
File:                     e8681a063214ef8a1474f9d27bc048d2a54ee4f9.roa (raw, json)
Hash identifier:          IzSvSbv7rew3B0+7UkOlcfMoKd93za1Ea+JhKYYCECs=
Subject key identifier:   8B:4B:9C:D7:FB:37:FD:F9:EC:A2:09:25:B5:C2:4E:14:91:FA:1B:55
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       102157
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/e8681a063214ef8a1474f9d27bc048d2a54ee4f9.roa
Signing time:             Mon 05 Jul 2021 18:49:39 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     12252
IP address blocks:        200.14.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057111 (0x102157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=e8681a063214ef8a1474f9d27bc048d2a54ee4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:3c:d5:6a:af:95:d8:a4:c0:5e:12:80:5c:
                    cd:3d:b2:43:d6:ce:57:06:62:58:0b:79:21:49:44:
                    8c:45:92:af:a0:a0:36:68:6d:54:19:ff:45:33:4d:
                    60:4c:29:9e:f1:01:2e:63:fd:25:2a:44:27:ab:32:
                    48:9e:2c:76:1e:6e:e5:93:c5:5d:b5:7f:2e:7a:d0:
                    54:73:ad:dc:f8:84:d7:9a:d8:4d:4f:bd:57:84:46:
                    b1:86:7a:fb:54:09:e7:da:4a:b4:f6:eb:f7:1d:de:
                    03:ab:fa:af:2e:13:95:5e:fb:33:a0:0b:8c:78:1d:
                    ff:60:93:94:3d:e7:0b:06:0a:b8:21:10:69:06:0c:
                    cd:f7:c1:4b:44:39:0d:8b:d4:b2:f4:49:c2:88:8a:
                    58:98:6d:e3:f2:43:9f:21:b7:01:bc:0f:71:fb:03:
                    38:b0:6d:90:66:40:1a:e2:0c:55:60:83:43:e6:f9:
                    dd:d2:46:63:6f:75:e1:cc:56:b6:54:aa:2e:8b:d9:
                    db:8a:9a:6a:6e:06:6b:20:5c:6e:00:04:fe:4c:9c:
                    30:b2:29:69:0f:95:2c:02:e0:26:3c:da:69:a4:2d:
                    9b:0e:75:8b:2d:fd:0f:15:5b:76:69:50:60:02:8f:
                    a5:ca:14:1a:27:f1:46:b2:1b:4e:83:ad:c7:38:50:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4B:9C:D7:FB:37:FD:F9:EC:A2:09:25:B5:C2:4E:14:91:FA:1B:55
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/e8681a063214ef8a1474f9d27bc048d2a54ee4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:02:31:93:6d:63:64:f3:5b:45:eb:48:c3:fc:aa:65:89:be:
         15:0c:71:d1:b5:57:ea:62:f6:84:23:b4:da:39:b1:bf:9c:f8:
         31:9a:dd:cc:d9:4f:bf:de:0a:23:bd:e2:b3:c4:90:12:da:8c:
         9a:b4:34:53:0e:7c:c6:dc:4f:87:be:2d:6e:e8:94:cf:da:1b:
         04:66:4c:b5:d8:33:b4:ad:68:0f:cb:9e:2b:90:74:36:5f:46:
         30:6d:05:cb:3f:5b:74:ab:fe:cb:1d:6b:64:ab:e8:43:37:75:
         e8:ad:bb:21:e7:73:e9:37:9f:63:84:8e:3f:f4:62:ea:73:fa:
         40:d4:65:6f:c2:c5:78:36:49:bc:07:74:05:b0:b3:f6:99:35:
         d9:b0:df:0b:d9:58:02:0c:06:cf:65:fe:a4:d7:79:37:40:ab:
         0c:61:25:b5:65:26:d9:12:e8:4f:3c:04:1f:a6:48:a4:c2:80:
         a7:89:87:e2:56:ae:ee:61:71:ab:05:d0:22:70:c9:3f:68:ce:
         b4:59:a0:b7:0b:5c:a9:e7:26:81:fb:dc:ea:41:a6:01:1b:4f:
         37:3f:63:43:ec:03:6c:f3:de:e9:1a:1f:84:9b:a6:76:ec:af:
         4c:ba:19:0b:28:86:99:04:44:ec:5d:80:d0:64:f5:8c:50:55:
         65:00:f9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org