Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/b27aa07c22ae5144ecb436f6060c7919fce44d05.roa
File:                     b27aa07c22ae5144ecb436f6060c7919fce44d05.roa (raw, json)
Hash identifier:          GdSRpJd9NdFfxsm+RNehJpDbJX+Kofzj2gCo2k7rW7o=
Subject key identifier:   91:C2:9E:72:0D:B1:AD:C7:B9:BF:D7:19:87:9B:3B:C5:97:15:4A:3C
Certificate issuer:       /CN=a5346d2ac1e2fe0a8450cb3df09c729567332040
Certificate serial:       0D3610
Authority key identifier: C5:C6:9E:CA:85:A0:88:71:1D:9C:4F:AD:F8:07:16:14:D2:4F:AB:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5346d2ac1e2fe0a8450cb3df09c729567332040.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/b27aa07c22ae5144ecb436f6060c7919fce44d05.roa
Signing time:             Wed 24 Mar 2021 14:42:21 +0000
ROA not before:           Wed 24 Mar 2021 14:42:21 +0000
ROA not after:            Tue 24 Mar 2026 14:42:21 +0000
asID:                     265767
IP address blocks:        164.163.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865808 (0xd3610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5346d2ac1e2fe0a8450cb3df09c729567332040
        Validity
            Not Before: Mar 24 14:42:21 2021 GMT
            Not After : Mar 24 14:42:21 2026 GMT
        Subject: CN=b27aa07c22ae5144ecb436f6060c7919fce44d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:d6:ed:96:68:7b:7f:30:25:7c:a3:40:42:
                    bd:3d:da:17:4b:0d:9b:8b:c5:2b:fa:26:37:76:39:
                    8e:9c:f4:5f:62:e7:09:52:05:86:08:f8:9a:5b:db:
                    dd:21:5c:09:1c:9d:3f:a8:03:28:73:d9:c1:94:1b:
                    55:c9:53:9c:ef:21:14:13:ff:a0:22:8a:3d:26:5d:
                    1f:0f:e6:94:a9:3c:05:4d:89:56:4e:59:05:1d:ba:
                    91:73:cf:fd:d3:fb:09:1b:0d:af:0b:66:0f:8a:3f:
                    2c:4d:31:54:09:90:15:6e:50:69:02:25:0b:5e:a4:
                    1d:82:67:db:2c:b8:8a:22:47:0a:51:fc:cd:a8:b4:
                    01:3a:33:1b:e1:ca:5f:97:55:8f:6a:0d:4a:10:67:
                    d8:2c:7b:9f:8c:77:1c:3e:4e:15:dc:9a:e2:b3:61:
                    08:0d:30:05:82:bb:09:28:74:bf:47:4c:1a:d0:7f:
                    d7:0b:7c:48:56:8c:b5:3a:0e:28:85:b5:97:1d:ee:
                    00:61:e8:71:5a:e5:5e:ba:cc:00:87:86:07:91:4c:
                    23:b3:08:72:23:33:5d:2e:7c:59:fb:a0:05:34:0f:
                    ec:e2:56:95:c8:a9:c4:20:88:ee:a3:25:b7:c4:80:
                    3b:a4:fa:7e:a0:f5:8a:5c:bb:a5:5c:86:31:03:ae:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C2:9E:72:0D:B1:AD:C7:B9:BF:D7:19:87:9B:3B:C5:97:15:4A:3C
            X509v3 Authority Key Identifier:
                keyid:C5:C6:9E:CA:85:A0:88:71:1D:9C:4F:AD:F8:07:16:14:D2:4F:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5346d2ac1e2fe0a8450cb3df09c729567332040.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/b27aa07c22ae5144ecb436f6060c7919fce44d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/a5346d2ac1e2fe0a8450cb3df09c729567332040.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:0c:4a:37:d0:95:90:61:52:f7:d1:3b:01:71:b7:72:f2:72:
         5c:35:b8:7c:45:c2:cd:29:2f:c2:8c:c7:21:db:28:8d:4c:7d:
         30:33:af:0b:15:02:4a:25:6b:ed:17:da:d8:0f:5d:67:ed:1d:
         c7:4b:e2:06:5b:c8:c5:3f:ca:02:b9:c0:fe:ac:d4:41:d1:4b:
         09:31:4a:3c:e8:6a:67:a1:52:d9:aa:ce:0a:f2:63:53:62:ad:
         29:e0:a2:00:1a:d5:28:ed:a7:26:ee:b1:22:2a:e7:15:57:e3:
         b4:e8:47:9f:7f:dc:05:4c:4d:a2:2c:af:44:63:df:52:8c:d5:
         99:78:2d:b7:7e:cd:de:49:5b:d5:60:5e:95:d5:3e:1c:0f:04:
         e1:89:9c:99:98:6b:a0:47:23:45:1f:4a:5b:5d:42:88:27:7e:
         37:42:f3:bb:01:9d:b1:48:d7:d0:6f:d7:a7:b1:e9:f1:94:6f:
         47:ef:24:8d:d5:1b:0b:fc:2e:d9:5d:6e:52:7e:5e:97:1f:eb:
         ee:9b:70:51:5c:ca:13:49:10:56:cf:ce:6b:42:b5:9a:65:df:
         4f:46:ac:4d:9f:4a:69:70:bf:35:24:18:1c:ac:57:2a:e4:7e:
         c4:99:99:8b:06:01:36:96:02:d8:28:8b:7b:c8:9a:10:ed:4d:
         87:a2:ed:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org