Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2.roa
File:                     cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2.roa (raw, json)
Hash identifier:          H+oI4WQkcOBRqsxdpMRbhgbsONmYpmgd0VqekIdAjSg=
Subject key identifier:   4D:E7:5E:7D:79:0F:2F:15:70:05:21:57:06:AA:53:63:67:C0:8C:46
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       21A606
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2.roa
Signing time:             Fri 24 Mar 2023 08:30:18 +0000
ROA not before:           Thu 23 Mar 2023 08:30:18 +0000
ROA not after:            Sat 22 Mar 2025 08:30:18 +0000
asID:                     27968
IP address blocks:        200.125.192.0/24 maxlen: 24
                          200.125.224.0/24 maxlen: 24
                          200.125.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205190 (0x21a606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 23 08:30:18 2023 GMT
            Not After : Mar 22 08:30:18 2025 GMT
        Subject: CN=cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:40:65:45:df:3e:92:40:3f:9d:19:ec:e2:
                    d4:ff:16:03:eb:57:26:ba:a5:f3:fa:e7:45:86:1e:
                    ca:bf:3e:16:d1:4c:08:e1:ff:69:0e:6f:dc:c2:09:
                    d0:d0:8d:80:3d:f2:7f:c1:a3:51:62:04:5d:90:7a:
                    62:b8:13:57:c8:f0:62:fa:c0:cf:d6:39:f5:4e:61:
                    c5:1c:f3:6e:2a:cd:7a:6d:1d:8e:25:05:74:f7:78:
                    03:b5:93:dd:8a:ca:1e:f7:41:92:a8:80:16:9f:35:
                    f1:b4:30:8e:52:8e:20:14:a9:08:f6:ed:b1:d9:75:
                    13:53:66:00:25:f7:0d:bc:71:ef:77:d7:4a:4a:bc:
                    4e:ab:dc:3d:c2:a1:f5:61:33:ba:93:e1:ed:b4:fb:
                    85:89:5a:e5:35:87:6e:b5:da:55:11:4a:a3:b6:bd:
                    74:d7:12:3e:9e:78:fa:75:49:e3:09:54:72:70:b6:
                    cb:77:38:83:70:18:30:f6:0d:96:2e:10:28:dd:57:
                    aa:c6:24:35:e1:4e:d5:49:0c:56:2f:ae:48:f9:af:
                    10:a7:33:42:50:60:d2:53:92:99:b0:2c:36:89:f2:
                    52:f3:61:37:4a:90:b2:d0:47:b7:98:9e:81:e3:5f:
                    c3:d3:10:5d:88:82:c3:a5:a5:d1:77:49:7d:5f:d9:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E7:5E:7D:79:0F:2F:15:70:05:21:57:06:AA:53:63:67:C0:8C:46
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.192.0/24
                  200.125.224.0/24
                  200.125.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:18:8d:36:f0:70:55:c6:e6:c5:29:76:59:af:00:5c:7b:02:
         51:9c:2c:f5:13:db:45:57:bc:6c:75:e8:0b:c4:c2:5b:46:b1:
         b9:56:2a:b0:85:13:b7:df:59:73:59:8a:ad:d6:bc:4b:de:37:
         fe:d3:93:04:a5:31:04:96:5b:21:64:ec:c1:b0:6b:e3:55:f7:
         f1:32:fc:59:09:1e:67:56:27:1e:bc:45:db:c2:ce:34:e8:ef:
         11:8f:24:20:8f:d9:19:a6:c8:12:50:6e:f5:4b:82:28:9c:78:
         82:4b:c3:cd:5d:68:db:ee:c8:1a:f0:44:2d:a3:3e:06:7b:f2:
         30:54:53:c7:7f:7c:5a:82:b0:84:60:a3:df:de:66:8e:78:b9:
         24:5d:cc:ad:9f:2f:36:12:a8:8f:4b:8f:d7:e6:af:02:f2:3d:
         ca:e4:7b:5b:9e:74:e4:96:f8:61:3d:af:4f:54:64:4a:b7:03:
         8d:d9:d0:24:49:e5:45:25:e4:e4:48:b7:59:ab:ef:32:db:04:
         50:a4:2e:e4:26:67:25:a3:1d:39:0a:c4:c7:34:23:bb:88:90:
         9e:ca:1f:ae:a9:82:df:1f:33:53:33:66:ab:af:73:25:fe:43:
         94:ab:e7:e7:d3:ab:1a:bf:43:c8:10:6f:8e:86:14:2c:ad:93:
         e6:13:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org