Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/fdb8efe54c0dcd6a210189c12678d0910c24f396.roa
File:                     fdb8efe54c0dcd6a210189c12678d0910c24f396.roa (raw, json)
Hash identifier:          XXl+UK+fadoljFVFbSREXVDnCQcFa7YWqR/ctD4aI0w=
Subject key identifier:   EC:C7:FA:4D:BA:47:66:AD:A9:B1:3B:5B:D8:F1:FB:0E:44:40:41:D5
Certificate issuer:       /CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
Certificate serial:       0CA62A
Authority key identifier: B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/fdb8efe54c0dcd6a210189c12678d0910c24f396.roa
Signing time:             Sun 25 Jul 2021 15:08:17 +0000
ROA not before:           Sun 25 Jul 2021 03:00:00 +0000
ROA not after:            Tue 25 Jul 2023 03:00:00 +0000
asID:                     269928
IP address blocks:        200.108.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828970 (0xca62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
        Validity
            Not Before: Jul 25 03:00:00 2021 GMT
            Not After : Jul 25 03:00:00 2023 GMT
        Subject: CN=fdb8efe54c0dcd6a210189c12678d0910c24f396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:5e:5c:de:d4:2d:5d:b1:40:63:83:5a:dd:
                    ab:9a:18:e0:54:9a:c8:50:81:1f:59:9f:52:91:24:
                    4e:02:11:e9:af:f1:05:f2:f0:82:62:48:95:14:a9:
                    59:d9:b9:de:ce:cd:52:0a:97:cb:24:ed:0b:f4:0b:
                    2c:11:cf:8e:85:c6:b8:a9:00:0b:fb:21:e0:f3:d1:
                    f5:32:b9:16:65:3d:e1:30:6e:03:6f:96:a8:28:1b:
                    c6:37:ed:49:bf:a6:31:37:48:67:ad:5f:e0:e2:6a:
                    ea:81:57:ff:3f:23:19:db:cc:66:15:58:22:7d:0d:
                    58:6d:6f:7d:d7:14:6a:b9:c0:27:f5:a1:37:4d:f6:
                    51:b2:b4:3f:3c:60:26:35:46:c4:dd:64:23:9c:38:
                    c5:2c:b2:fd:4f:db:c9:91:fc:19:a4:0b:e4:0b:45:
                    31:08:63:8d:ef:da:22:19:2a:65:2b:c8:be:45:8a:
                    2d:15:fc:93:4e:af:59:40:55:7b:85:ad:39:0d:70:
                    36:08:93:5a:5f:3b:1a:6a:d0:67:20:64:b4:b6:b5:
                    44:58:96:1d:0f:11:76:d1:ec:d2:a2:b0:ff:94:86:
                    ff:79:e0:9d:4e:d0:a6:65:7c:2e:af:f8:47:6d:67:
                    1a:31:f4:7f:63:f3:bf:e7:7a:78:ee:64:5f:c2:9b:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C7:FA:4D:BA:47:66:AD:A9:B1:3B:5B:D8:F1:FB:0E:44:40:41:D5
            X509v3 Authority Key Identifier:
                keyid:B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/fdb8efe54c0dcd6a210189c12678d0910c24f396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:2e:2a:d5:2c:41:01:f3:e2:61:cd:1c:e1:79:17:c6:cc:
         6f:12:07:fe:d1:e1:11:85:58:50:d6:3a:4e:7d:14:b0:ed:36:
         be:60:93:84:4f:15:99:fb:60:75:ee:d9:ef:55:b3:4c:e9:dc:
         19:5d:3b:f0:24:7f:4b:22:be:01:ec:d2:0a:3d:02:29:53:27:
         ad:27:43:8c:7f:af:68:7b:07:b2:bc:eb:b3:32:73:36:14:a7:
         24:ce:9e:bc:25:1e:d8:69:02:aa:10:ab:5e:a6:dc:d4:d0:ff:
         c2:f2:06:d8:1d:43:6e:be:c8:6d:0e:4e:04:fb:0f:5d:8a:3c:
         15:24:de:ce:5e:a7:83:61:07:3d:b6:f0:e8:4c:ea:75:c3:e5:
         d3:c7:a0:ce:ef:23:83:d7:89:f1:a0:56:88:7f:ef:e0:d3:08:
         c2:e4:92:ad:5d:47:a5:ec:a7:46:be:5b:43:d3:5b:8f:bd:db:
         06:bb:c4:f1:5d:9e:11:42:1d:07:79:a2:e8:92:16:44:34:85:
         1f:c2:20:56:0e:70:84:19:b5:de:1b:ce:7b:f9:87:33:18:80:
         6b:11:d2:8d:1b:af:34:fc:4e:37:71:77:59:56:58:d6:ed:68:
         09:e4:1f:0a:c4:92:3b:c2:53:a1:62:ec:67:88:f8:32:eb:59:
         fc:e8:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org