Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/edd800d5f30ba31b07ce9f51037d7f85d0567347.roa
File:                     edd800d5f30ba31b07ce9f51037d7f85d0567347.roa (raw, json)
Hash identifier:          0xM4KiVT5lTiq0PZyJ6jP438GrTB5htAk3caSFgrDGk=
Subject key identifier:   07:F0:95:88:BA:30:E4:1C:49:8E:BD:1C:7D:7D:B7:7F:FC:06:0E:86
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       101560
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/edd800d5f30ba31b07ce9f51037d7f85d0567347.roa
Signing time:             Mon 05 Jul 2021 18:48:23 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     6429
IP address blocks:        200.14.202.0/24 maxlen: 24
                          200.14.208.0/23 maxlen: 24
                          200.14.215.0/24 maxlen: 24
                          200.14.216.0/22 maxlen: 24
                          200.27.0.0/16 maxlen: 24
                          200.29.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054048 (0x101560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=edd800d5f30ba31b07ce9f51037d7f85d0567347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:71:d7:75:9e:f3:35:54:ba:9a:e8:ec:19:
                    41:ce:15:d6:3a:37:a0:b9:d2:fe:25:fd:fe:cc:cd:
                    84:b0:cf:d9:27:2d:b6:8f:ae:90:2b:8b:bb:fa:87:
                    4f:fe:e6:c0:86:06:c9:eb:77:85:a7:8b:1b:2c:0c:
                    08:06:ab:33:9b:78:b8:2a:2e:aa:88:01:db:6c:06:
                    34:7b:80:ba:72:19:c3:05:c0:46:12:82:b1:06:c5:
                    55:23:38:2c:4e:75:c5:e4:b7:34:b2:c5:fa:1a:ae:
                    2a:01:ee:69:19:21:3b:e2:01:4a:20:d4:e4:e8:a1:
                    14:fb:90:ea:ea:4f:93:26:28:fd:74:68:29:28:21:
                    5b:31:6a:97:df:b5:37:af:24:cf:e5:12:f8:e1:b9:
                    7c:23:dc:f8:0c:71:c6:37:df:e4:20:3d:82:f5:27:
                    56:63:3b:57:03:9f:35:34:6d:d0:9b:e1:94:35:5c:
                    93:52:a7:fa:7a:6e:83:88:9b:ba:0b:64:ba:10:37:
                    13:2f:b8:5f:6b:c7:51:1f:0a:4b:34:39:2d:88:32:
                    e8:07:f3:3c:e3:d7:27:24:f5:3d:63:57:96:a4:0e:
                    31:20:bc:d0:de:79:dd:33:85:f4:db:c9:2f:6c:6a:
                    7e:5d:85:2c:4b:9c:cb:d6:5a:1e:7b:3a:16:7a:fd:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F0:95:88:BA:30:E4:1C:49:8E:BD:1C:7D:7D:B7:7F:FC:06:0E:86
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/edd800d5f30ba31b07ce9f51037d7f85d0567347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.202.0/24
                  200.14.208.0/23
                  200.14.215.0-200.14.219.255
                  200.27.0.0/16
                  200.29.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:c8:c4:ca:b0:ff:1b:ee:66:8d:1c:73:ee:38:f9:2b:6e:3d:
         51:83:0d:1a:48:05:7c:44:4c:1e:9f:f2:e0:59:bf:0f:84:02:
         b4:cb:48:1d:be:4a:e7:b1:84:f5:87:9b:c5:44:bd:eb:c5:e5:
         a5:d7:36:07:ab:48:19:a6:fe:87:ef:37:2e:dc:69:c7:a2:0a:
         1f:b5:d8:da:69:1f:39:33:a6:12:b5:da:9f:fe:83:74:08:18:
         15:af:50:a1:c6:ef:b8:68:b4:80:40:6d:b7:d4:27:f1:44:8f:
         5f:f5:14:58:49:98:ff:9f:90:c4:02:37:ca:0e:6f:90:da:02:
         f4:a6:4d:42:50:b9:0e:ee:50:ee:48:a2:44:02:ce:68:57:13:
         2b:ed:c2:e4:df:ae:58:f7:4f:52:32:95:ee:12:12:59:b1:39:
         49:50:47:41:e6:03:af:74:12:29:9e:52:73:25:45:46:0e:70:
         51:98:aa:b6:48:8b:8d:ee:5b:47:e9:dd:14:07:53:4b:40:e7:
         69:ea:4c:20:99:ec:fe:ce:fe:81:2f:f4:fa:4f:99:bd:94:e7:
         fe:95:a9:c0:af:e0:0f:e6:58:4b:74:97:17:14:46:c1:04:50:
         32:ac:2c:da:57:f8:ff:e7:1c:8a:4a:7e:b2:67:88:fb:21:eb:
         94:6c:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org