Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/340a280b16115bc3bdc1c682fa3012ac3bf22ed9.roa
File:                     340a280b16115bc3bdc1c682fa3012ac3bf22ed9.roa (raw, json)
Hash identifier:          DAsni0WKRt1mAxwxW0/WA/3ctIctA/Y8l8dZSYx9gdk=
Subject key identifier:   0E:9F:7C:80:E3:00:23:62:3B:D7:70:24:60:AC:42:EA:D0:E2:C7:84
Certificate issuer:       /CN=45578380b9b89070a52d9eb52d3ea3222cd94a51
Certificate serial:       0CEE73
Authority key identifier: F0:AC:99:E3:BD:66:B7:43:F7:00:BE:6C:DD:68:A1:37:19:39:F1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45578380b9b89070a52d9eb52d3ea3222cd94a51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/340a280b16115bc3bdc1c682fa3012ac3bf22ed9.roa
Signing time:             Wed 24 Mar 2021 14:42:25 +0000
ROA not before:           Wed 24 Mar 2021 14:42:24 +0000
ROA not after:            Tue 24 Mar 2026 14:42:24 +0000
asID:                     7727
IP address blocks:        181.210.0.0/18 maxlen: 19
                          181.210.128.0/17 maxlen: 18
                          181.210.64.0/18 maxlen: 18
                          190.130.0.0/18 maxlen: 19
                          2803:100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847475 (0xcee73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45578380b9b89070a52d9eb52d3ea3222cd94a51
        Validity
            Not Before: Mar 24 14:42:24 2021 GMT
            Not After : Mar 24 14:42:24 2026 GMT
        Subject: CN=340a280b16115bc3bdc1c682fa3012ac3bf22ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:b1:7f:29:b8:e3:ee:40:34:9a:fe:9c:63:
                    32:62:7e:c6:83:80:63:58:b7:1c:16:e0:1d:3d:17:
                    d4:85:fa:31:44:87:d0:f9:dd:6b:37:e8:55:58:36:
                    0f:c7:72:55:c0:ea:37:87:51:95:a4:ce:dc:e9:61:
                    1a:ee:a0:d4:1e:f7:69:54:d1:5b:be:b2:b1:bf:fb:
                    c0:b9:c3:6b:be:3e:f8:6c:f2:28:1f:a6:99:a3:c1:
                    9b:aa:ca:eb:07:9b:c3:fd:6e:06:e0:01:60:c8:89:
                    b6:0b:2a:11:39:00:bd:80:14:b6:17:9b:be:57:d0:
                    7f:99:6e:7c:97:0f:49:b6:83:fb:5e:24:b8:41:8f:
                    bd:34:fd:be:b1:8b:01:fc:a2:90:24:4b:b0:08:c7:
                    3c:90:62:38:34:83:a7:03:b6:ac:e0:90:d0:08:d8:
                    7c:c7:d8:8a:d4:80:21:b4:88:41:22:9b:89:6a:bf:
                    c9:a3:60:d3:92:4b:6c:04:ea:b3:09:1d:21:f2:b7:
                    49:9a:40:d8:e5:7a:d1:a5:85:86:3a:1a:e4:b6:32:
                    e4:6d:56:9a:d1:8e:90:07:a5:4b:b5:1d:bc:4f:13:
                    51:c8:f4:83:5c:74:dc:0b:c5:35:2d:35:77:94:eb:
                    4f:1c:54:20:3f:61:48:fc:61:26:37:1c:92:32:62:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:7C:80:E3:00:23:62:3B:D7:70:24:60:AC:42:EA:D0:E2:C7:84
            X509v3 Authority Key Identifier:
                keyid:F0:AC:99:E3:BD:66:B7:43:F7:00:BE:6C:DD:68:A1:37:19:39:F1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45578380b9b89070a52d9eb52d3ea3222cd94a51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/340a280b16115bc3bdc1c682fa3012ac3bf22ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/45578380b9b89070a52d9eb52d3ea3222cd94a51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.210.0.0/16
                  190.130.0.0/18
                IPv6:
                  2803:100::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:c0:f7:46:10:db:9a:e3:ed:9d:33:79:8a:53:18:88:63:
         8b:46:86:39:58:92:78:b1:73:42:67:42:86:59:40:ba:f2:32:
         e3:03:06:57:da:e4:bf:d1:a9:1d:36:46:a7:f0:92:c9:6f:0b:
         c9:6d:24:90:f5:80:97:5a:fc:ba:f7:32:00:eb:7c:5a:e0:00:
         7d:9b:ee:2e:b7:c1:a5:0a:87:c0:e3:5c:16:76:54:8a:e3:7d:
         79:9f:d2:e8:ab:d4:1e:2c:ff:c6:e7:af:05:25:c5:ea:b7:dc:
         ae:f1:0a:81:16:82:94:13:b5:0e:7e:e1:98:01:c2:05:bc:ca:
         ee:3a:d4:4e:fd:1e:10:ba:cb:fb:be:c5:8c:07:63:32:cc:c0:
         7a:53:c4:9e:9c:5c:64:06:39:5c:fa:37:87:90:0e:2a:09:f4:
         e0:27:20:a4:30:84:ae:d4:d3:98:c1:70:85:46:bc:ca:5c:9c:
         8a:b9:24:73:3e:af:30:5c:94:cb:12:a6:2e:64:2d:0f:3d:c6:
         1f:06:ca:db:d0:e8:27:cd:b9:97:7b:a8:37:fa:df:7d:ea:26:
         fa:53:0e:b0:0e:75:25:5c:bd:28:53:de:42:27:2d:a6:d1:5e:
         de:da:a5:69:1f:64:50:51:43:92:df:8a:71:0a:99:b6:3e:ef:
         18:f1:55:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org