Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/7ea5ba6c29e99fd55eb42dddcb978de41956cd1f.roa
File:                     7ea5ba6c29e99fd55eb42dddcb978de41956cd1f.roa (raw, json)
Hash identifier:          V2h7lY9T2IuotgLTlkXZ5YHi/m47s9Qc1jS22HG2EWQ=
Subject key identifier:   45:02:A8:2D:1D:6C:52:41:60:72:E4:AE:B3:FD:15:EA:29:4E:28:72
Certificate issuer:       /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial:       165BE8
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/7ea5ba6c29e99fd55eb42dddcb978de41956cd1f.roa
Signing time:             Thu 20 Apr 2023 22:05:37 +0000
ROA not before:           Wed 19 Apr 2023 22:05:37 +0000
ROA not after:            Sun 20 Apr 2025 22:05:37 +0000
asID:                     272046
IP address blocks:        200.63.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465320 (0x165be8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
        Validity
            Not Before: Apr 19 22:05:37 2023 GMT
            Not After : Apr 20 22:05:37 2025 GMT
        Subject: CN=7ea5ba6c29e99fd55eb42dddcb978de41956cd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:55:e6:30:31:d3:ae:0f:46:4f:92:c0:d5:9c:
                    0d:ae:9e:15:31:b7:4c:ec:26:7c:4d:41:40:21:da:
                    ac:88:31:02:35:43:53:c4:ac:1f:65:a5:8c:7f:fa:
                    17:47:77:ee:d8:56:42:ed:76:e4:11:50:6a:4d:90:
                    63:98:46:ec:5a:35:ff:bb:b7:7c:3a:45:54:da:32:
                    a5:6b:1c:02:51:b2:ab:38:67:a9:5d:e4:cc:21:6f:
                    a3:04:e5:4a:15:bb:e8:57:6b:54:28:cc:2d:90:62:
                    14:ff:63:2f:85:b4:c4:6d:a8:ab:8c:98:33:b2:92:
                    fe:de:d8:e9:4e:22:16:5e:49:9c:d9:08:01:87:cd:
                    51:8a:c4:9c:76:21:13:74:79:f8:5a:be:54:8e:7b:
                    8a:90:4c:e1:8b:41:45:14:59:7a:d4:9d:bf:61:dc:
                    72:92:30:ee:5f:7b:16:01:3b:02:89:14:18:17:7f:
                    bc:4f:47:8e:e5:e2:00:0a:15:c5:9b:06:89:76:33:
                    0c:e2:54:85:55:9b:62:c5:79:2c:50:fa:a6:e6:9d:
                    b2:26:5b:ac:83:ec:83:a4:72:49:7f:b9:8a:e2:ec:
                    21:b0:08:e0:a1:aa:37:38:7b:7c:b7:19:a9:00:5b:
                    b1:67:fd:9a:ea:f0:51:d4:2f:53:e8:59:aa:73:20:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:A8:2D:1D:6C:52:41:60:72:E4:AE:B3:FD:15:EA:29:4E:28:72
            X509v3 Authority Key Identifier:
                keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/7ea5ba6c29e99fd55eb42dddcb978de41956cd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:fa:5a:03:2a:93:ed:27:12:c0:fc:98:b3:fe:9e:6d:18:be:
         c1:35:b8:bc:18:9b:29:d2:6a:d4:fd:ce:da:0b:29:2e:05:20:
         89:d1:18:fb:63:9e:b1:14:ed:20:a0:ca:0f:a8:16:3f:44:ac:
         58:a3:2d:a3:55:0f:4c:2e:1b:75:da:03:c2:f1:3e:8b:5b:d6:
         82:fb:96:c9:9f:3e:0c:74:42:18:83:ce:9e:4f:85:74:ba:db:
         ac:31:4d:e6:61:3a:9f:55:17:e9:fb:bb:94:b6:f0:ed:c2:d1:
         b3:6e:6f:58:f6:f3:d6:d9:0f:90:c8:ec:41:e2:73:16:d9:57:
         8e:4e:04:57:3a:5e:57:4d:a6:d2:79:66:03:75:d0:6b:07:0c:
         b8:08:bb:64:4c:a7:39:71:0b:ab:8a:ed:a2:50:a6:a8:07:b6:
         2d:58:f1:e2:ab:96:2f:65:39:ac:f1:72:97:19:4e:08:6b:c2:
         61:79:2f:6e:a2:9d:16:b1:1e:4f:49:32:45:5b:39:88:45:66:
         62:43:9a:61:d0:e7:fa:aa:0d:93:86:21:22:de:bb:68:cf:4e:
         66:f3:06:bc:7a:5b:9c:ef:eb:0c:f7:c2:8f:e0:35:b0:e2:16:
         a3:fd:f7:77:7d:31:6a:69:06:60:7b:ee:7f:2c:c6:63:b3:14:
         fc:35:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org