Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/f631259c99ce8fb40e58ce1c91c44ab811c95e7a.roa
File:                     f631259c99ce8fb40e58ce1c91c44ab811c95e7a.roa (raw, json)
Hash identifier:          Ev/qtxZrhS5Ou4kkocGXpPdQZyOUySnCjJnpuQfALbQ=
Subject key identifier:   FB:33:E1:7B:C6:1A:8D:95:FB:71:F6:03:87:A3:99:17:0D:ED:DB:3F
Certificate issuer:       /CN=e858a451a2d1892b132aefb56f410eaea05663bc
Certificate serial:       02F1
Authority key identifier: C2:72:71:87:F0:11:13:07:16:F0:3A:7E:81:71:34:6F:8C:59:AB:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e858a451a2d1892b132aefb56f410eaea05663bc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/f631259c99ce8fb40e58ce1c91c44ab811c95e7a.roa
Signing time:             Tue 27 Apr 2021 14:02:13 +0000
ROA not before:           Tue 27 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     271809
IP address blocks:        200.106.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858a451a2d1892b132aefb56f410eaea05663bc
        Validity
            Not Before: Apr 27 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=f631259c99ce8fb40e58ce1c91c44ab811c95e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:83:0c:dd:83:b9:70:c1:8f:53:39:96:28:
                    48:8b:33:c7:59:fa:3a:94:0a:9b:a1:fd:2a:43:77:
                    47:f4:08:8e:19:b0:70:0b:27:bd:47:ef:0b:6d:63:
                    37:54:48:be:7d:fe:01:62:75:4d:d0:56:11:53:27:
                    f2:bd:6a:7f:67:cb:d3:54:f9:7a:fc:dc:23:74:b5:
                    c3:95:57:7b:9d:b3:c0:e9:d9:8f:1b:7a:0b:46:9a:
                    f0:bb:97:22:a0:03:8e:c1:ea:96:04:a9:37:cd:76:
                    75:03:ac:49:e7:b5:74:89:6a:59:a5:6c:df:d9:e1:
                    61:62:35:c5:9b:34:72:3a:0b:d6:ad:8f:ac:a5:e2:
                    79:e3:b4:4f:c2:7f:5b:e1:88:4f:72:c5:20:2c:5d:
                    19:80:e1:7a:3e:21:5d:1b:e5:80:75:e7:78:79:64:
                    e6:39:94:ac:af:c8:cc:98:a3:6f:ca:10:ab:67:83:
                    03:e9:39:0d:8a:ac:1f:a0:53:75:55:32:6f:00:79:
                    72:ed:63:f1:15:a6:9d:90:bd:ed:54:50:87:62:a3:
                    ab:4c:17:ab:66:be:49:5d:cb:ab:8c:94:44:fc:40:
                    ed:57:63:25:f7:5f:3a:f3:7e:f7:d4:b3:a7:d1:66:
                    46:e3:65:cc:82:ba:4b:93:92:f0:92:87:26:9b:43:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:33:E1:7B:C6:1A:8D:95:FB:71:F6:03:87:A3:99:17:0D:ED:DB:3F
            X509v3 Authority Key Identifier:
                keyid:C2:72:71:87:F0:11:13:07:16:F0:3A:7E:81:71:34:6F:8C:59:AB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e858a451a2d1892b132aefb56f410eaea05663bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/f631259c99ce8fb40e58ce1c91c44ab811c95e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/e858a451a2d1892b132aefb56f410eaea05663bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:ef:92:7f:eb:5c:3c:52:d5:b9:52:b5:22:d5:85:68:8e:
         0b:3c:c1:8b:02:5c:bb:26:37:b0:a6:26:ef:ca:25:f1:8d:07:
         5f:36:bc:fe:cc:ed:08:9e:f3:d5:6a:7b:5e:52:fe:98:57:3d:
         29:d9:3c:6a:3f:de:b0:5a:74:d6:78:1d:e6:e5:45:d3:4c:c5:
         55:be:66:79:12:d2:4d:6b:45:57:08:27:10:06:5a:94:6c:44:
         30:3f:45:3f:88:36:05:51:f2:42:98:9b:96:6b:58:80:e9:c8:
         ca:18:20:e8:b1:e9:13:93:1c:99:23:21:1b:e0:cb:48:4d:5c:
         4e:74:3f:a5:3b:91:a8:46:f5:6d:bb:71:7b:bd:c9:6f:f6:b6:
         0b:8f:64:ac:0a:29:fc:fe:f8:f7:fd:73:84:38:7f:fa:ec:4e:
         eb:2a:7b:9f:2e:9c:c6:08:4e:35:0e:2c:1c:aa:22:be:ac:25:
         80:eb:31:76:fa:b6:cd:d3:c1:86:2e:a8:0c:c0:a6:e9:cd:f3:
         6a:85:e9:68:cf:0e:4e:5f:06:e0:ad:f5:bc:68:57:9b:23:e8:
         df:fc:c3:81:a1:12:1c:bc:79:d1:f7:66:2b:4e:04:88:fb:43:
         57:b5:de:7c:f3:27:85:ac:8a:a5:f1:3d:46:74:ad:b7:fb:ed:
         4c:57:84:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org