Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/78457363ae30a81f44f37279279928480836c00b.roa
File:                     78457363ae30a81f44f37279279928480836c00b.roa (raw, json)
Hash identifier:          F/+aqFmK5SOxyhrjLMp7pJHufr1a57vrSdZMepEndNY=
Subject key identifier:   50:E9:08:22:40:DD:6A:A2:AE:F1:31:E5:6B:F4:34:71:6D:B3:73:53
Certificate issuer:       /CN=ab8a0b112e65d5e4030b0990fd668c531efaf401
Certificate serial:       143119
Authority key identifier: 38:A6:6B:A0:54:46:AD:48:4C:9F:91:15:08:CC:6D:CE:11:A9:7E:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab8a0b112e65d5e4030b0990fd668c531efaf401.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/78457363ae30a81f44f37279279928480836c00b.roa
Signing time:             Thu 03 Aug 2023 06:50:21 +0000
ROA not before:           Wed 02 Aug 2023 06:50:21 +0000
ROA not after:            Sun 03 Aug 2025 06:50:21 +0000
asID:                     271809
IP address blocks:        200.106.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323289 (0x143119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8a0b112e65d5e4030b0990fd668c531efaf401
        Validity
            Not Before: Aug  2 06:50:21 2023 GMT
            Not After : Aug  3 06:50:21 2025 GMT
        Subject: CN=78457363ae30a81f44f37279279928480836c00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2c:c0:bd:3c:2d:1e:82:d7:94:9d:9a:bd:ba:
                    a0:62:6d:a2:c3:e2:62:e7:95:96:96:cf:f0:bf:a3:
                    d9:5b:6d:30:c6:ec:48:05:0d:58:08:a0:d7:00:65:
                    79:c8:51:cc:f7:b4:11:bb:89:7f:b8:a1:85:94:08:
                    34:81:b3:3b:7b:21:1d:8b:a6:de:b3:00:15:ec:bd:
                    91:e1:0c:b3:39:b1:77:37:d8:e6:2d:9c:b1:e4:bb:
                    3c:21:fb:a6:ce:34:05:8f:19:f6:db:ca:a5:98:90:
                    c9:5d:58:4e:80:85:7f:2d:c3:ca:de:35:0b:f3:6a:
                    f9:1b:5b:ad:b5:71:d8:10:06:a4:ee:dd:d1:9f:b6:
                    aa:74:90:9e:52:9c:33:5e:3b:69:fc:d3:e2:c6:57:
                    6a:dc:fa:5e:73:b1:03:cd:84:35:f0:b9:54:39:0b:
                    c7:ba:72:c2:c3:b0:89:1a:f7:c6:18:1b:d7:0f:18:
                    b3:d4:87:c9:c1:c6:6d:8a:4b:e0:e3:ea:6d:06:3a:
                    28:b1:b0:61:b6:56:72:2f:81:54:57:4d:3e:be:d0:
                    11:bc:aa:bf:34:52:b5:32:43:85:3c:a9:32:8e:f9:
                    e8:cc:55:80:77:29:5a:40:3b:67:9e:53:71:cd:c1:
                    f9:cb:3e:95:f5:83:f0:08:8f:91:e9:a7:2b:5e:5d:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:08:22:40:DD:6A:A2:AE:F1:31:E5:6B:F4:34:71:6D:B3:73:53
            X509v3 Authority Key Identifier:
                keyid:38:A6:6B:A0:54:46:AD:48:4C:9F:91:15:08:CC:6D:CE:11:A9:7E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab8a0b112e65d5e4030b0990fd668c531efaf401.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/78457363ae30a81f44f37279279928480836c00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/ab8a0b112e65d5e4030b0990fd668c531efaf401.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:3a:af:18:56:da:2f:e9:98:06:ae:76:fc:7d:36:e7:98:c6:
         7a:f3:97:b6:e4:80:71:f0:6a:01:43:34:c5:14:e8:f8:b9:e1:
         13:95:4f:0b:61:f6:b6:b8:a7:59:90:31:36:45:76:95:8b:c6:
         ce:fa:05:fb:93:8c:d9:56:e5:81:05:6c:32:b0:5b:4c:09:8c:
         82:6c:0a:3e:8f:3f:8f:94:ca:92:55:85:7f:a6:55:64:2a:70:
         0c:e9:aa:7c:48:1a:41:d3:c5:8d:41:4d:0b:c1:98:40:97:a7:
         d7:d4:c9:28:d7:ef:bf:27:26:2e:9a:d8:14:eb:c4:2f:d7:80:
         f8:d4:df:71:88:af:f7:d1:35:98:66:68:c3:e7:f7:29:a3:3d:
         63:5d:b9:f6:d2:3f:d1:6e:4a:76:42:22:ce:6e:e8:5c:a1:ba:
         ce:41:26:7b:d8:ac:a5:fa:c4:c5:71:18:f0:a3:d1:00:af:d6:
         73:ea:fb:d3:b4:2a:55:7b:cf:e2:08:64:f0:60:9b:28:89:ca:
         10:92:95:0c:2c:04:5d:66:ee:36:cf:6d:a8:50:56:68:4d:f7:
         2f:83:6f:6f:d3:7d:61:9e:44:42:2a:87:e7:d3:3b:0a:9d:de:
         83:30:15:05:97:c7:3a:e9:ba:c4:3c:53:30:aa:2e:02:95:3a:
         b7:52:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org