Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/9438b1cabc34da4d42600ead7f007f6542c2a68b.roa
File:                     9438b1cabc34da4d42600ead7f007f6542c2a68b.roa (raw, json)
Hash identifier:          yNPQyZ7UiEZ8Eo03uy32Z/m16CGC2E02qq5+deQFwEs=
Subject key identifier:   C0:92:88:35:D5:87:6F:27:09:92:18:66:B8:9F:19:9B:7D:95:26:C6
Certificate issuer:       /CN=24b432c17b9178d531eefe49147c81e1af1b6784
Certificate serial:       0BC09F
Authority key identifier: 8C:D5:D1:14:8A:7F:1A:D0:BC:2C:81:F4:8D:DC:41:B4:D8:93:F9:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b432c17b9178d531eefe49147c81e1af1b6784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/9438b1cabc34da4d42600ead7f007f6542c2a68b.roa
Signing time:             Wed 24 Mar 2021 14:40:28 +0000
ROA not before:           Wed 24 Mar 2021 14:40:27 +0000
ROA not after:            Tue 24 Mar 2026 14:40:27 +0000
asID:                     27947
IP address blocks:        200.9.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770207 (0xbc09f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b432c17b9178d531eefe49147c81e1af1b6784
        Validity
            Not Before: Mar 24 14:40:27 2021 GMT
            Not After : Mar 24 14:40:27 2026 GMT
        Subject: CN=9438b1cabc34da4d42600ead7f007f6542c2a68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:be:1e:90:c0:67:04:cd:9d:eb:fd:2d:63:
                    22:ab:3e:eb:b2:0b:ee:c0:76:3e:c2:b3:f1:d9:34:
                    8f:1e:d2:2d:48:07:1b:25:98:8f:10:b5:22:c1:a2:
                    c3:b4:58:b4:cb:46:91:53:c3:8e:e6:e8:ad:ad:10:
                    b6:db:0d:8f:e6:e9:f3:38:cc:58:f0:b6:65:d6:d1:
                    ba:78:6d:61:2e:fa:58:90:61:f0:db:95:e3:93:f2:
                    a0:9e:f1:a3:aa:d1:72:d7:39:85:d8:5f:8d:3f:b1:
                    7b:f0:75:54:03:40:ea:cd:b5:8b:31:50:f2:50:32:
                    f3:28:d1:a2:dc:5d:5d:9c:9a:8b:78:32:f8:5e:17:
                    79:75:55:28:14:5b:07:a2:44:5d:f0:ef:b0:dc:96:
                    1f:57:4d:57:4e:15:17:0c:cf:ab:cb:df:cc:e7:2f:
                    5e:2e:d8:97:1f:c0:a6:5b:35:0e:8a:d8:58:93:85:
                    9d:5a:96:52:4a:04:9b:92:83:68:14:53:82:36:53:
                    4e:49:1c:47:95:df:c3:54:40:78:02:44:3d:c8:0d:
                    ed:eb:48:75:00:f5:2f:da:c2:f4:8e:b7:56:72:47:
                    1c:52:ff:f0:3c:73:81:47:b2:e6:f1:68:71:93:b4:
                    19:f6:15:46:54:8e:d9:40:cf:b6:11:39:e6:dc:08:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:88:35:D5:87:6F:27:09:92:18:66:B8:9F:19:9B:7D:95:26:C6
            X509v3 Authority Key Identifier:
                keyid:8C:D5:D1:14:8A:7F:1A:D0:BC:2C:81:F4:8D:DC:41:B4:D8:93:F9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b432c17b9178d531eefe49147c81e1af1b6784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/9438b1cabc34da4d42600ead7f007f6542c2a68b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/24b432c17b9178d531eefe49147c81e1af1b6784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:76:44:b2:96:00:b8:c2:09:14:20:dc:36:a0:ff:23:5e:
         33:4b:be:a0:9b:c8:d6:dc:f1:af:79:16:34:da:c4:1d:10:e6:
         9e:e9:20:79:f9:75:e8:0f:7f:66:3c:49:b7:26:16:8c:04:04:
         1a:61:04:af:0f:ff:23:5e:81:2c:75:89:0e:17:53:57:5a:71:
         0d:4c:ee:12:74:b8:a6:04:c8:da:74:19:3e:58:18:5e:fe:ad:
         98:b8:3f:63:9f:68:ac:8e:2d:a9:56:e9:40:9b:5d:55:19:e1:
         01:85:5e:4d:73:8f:57:20:95:29:c4:ae:88:aa:52:f3:c4:9a:
         4f:25:dc:86:5a:4f:1f:f0:34:96:ff:0b:92:24:0f:15:0d:37:
         e7:51:1a:0f:58:fd:89:dc:12:47:e3:98:bb:47:7c:73:77:24:
         d3:b6:c1:fe:2d:d5:e4:5d:a3:19:f2:2f:d5:ff:55:ae:f1:4e:
         5b:81:63:d6:ed:14:e3:fc:11:42:d2:c7:2b:c4:4c:a8:a3:2b:
         26:e0:a2:3f:a3:50:f4:20:6f:95:6e:b0:9d:20:fc:5f:09:3c:
         4f:81:f3:48:ca:1e:b0:41:80:fd:20:aa:8d:f9:c6:b4:12:ee:
         1d:50:c2:4a:6f:95:2e:16:f7:28:e9:d5:94:bc:a9:9a:e1:85:
         b8:47:4a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org