Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/fd337fda7ac04ab4eb50762358caabfa46639a1b.roa
File:                     fd337fda7ac04ab4eb50762358caabfa46639a1b.roa (raw, json)
Hash identifier:          UPZA0hpzkzalL1a4CMNLfuVIlGJDuARpxwSqtACBcho=
Subject key identifier:   53:22:E8:E3:FB:38:B2:A6:83:83:CA:3F:A8:4E:9F:3E:FF:69:B4:12
Certificate issuer:       /CN=296ae134c63fda98feba9ece79438406ecc84f03
Certificate serial:       214261
Authority key identifier: 8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/fd337fda7ac04ab4eb50762358caabfa46639a1b.roa
Signing time:             Mon 12 Jun 2023 23:32:08 +0000
ROA not before:           Sun 11 Jun 2023 23:32:07 +0000
ROA not after:            Thu 12 Jun 2025 23:32:07 +0000
asID:                     17079
IP address blocks:        181.189.176.0/20 maxlen: 24
                          200.85.0.0/23 maxlen: 24
                          143.0.104.0/22 maxlen: 24
                          200.85.4.0/22 maxlen: 24
                          200.85.8.0/21 maxlen: 24
                          200.85.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179681 (0x214261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296ae134c63fda98feba9ece79438406ecc84f03
        Validity
            Not Before: Jun 11 23:32:07 2023 GMT
            Not After : Jun 12 23:32:07 2025 GMT
        Subject: CN=fd337fda7ac04ab4eb50762358caabfa46639a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:7d:fa:7f:cb:49:cd:ca:2d:bf:0c:59:af:
                    60:1c:a3:2f:10:31:b1:bf:fb:a3:fb:2c:4c:2d:dc:
                    95:1c:b8:af:93:1a:92:2e:a6:5a:c6:b5:1e:92:29:
                    a9:87:db:6a:90:b8:a1:34:c0:33:76:81:e8:55:24:
                    66:b5:da:8a:e2:3a:53:25:d5:46:54:3d:9f:97:06:
                    8a:7f:be:c8:77:47:90:9e:88:87:54:4c:e6:ec:49:
                    f4:85:9e:c1:e3:57:a7:f5:6e:0f:b0:c1:3b:f2:d9:
                    59:ed:ca:04:8c:9c:b2:3a:99:c0:4e:2a:08:f0:de:
                    ba:25:2a:8c:0e:54:39:ae:66:89:d1:64:89:29:aa:
                    6b:7c:06:3b:ac:d6:17:17:8d:99:ab:09:59:b0:af:
                    75:5d:9c:21:65:24:c0:5e:f3:0d:37:f7:a3:f3:be:
                    41:eb:fc:54:68:97:5f:a2:4f:6b:a0:0c:67:7f:90:
                    60:ba:29:2c:6b:68:53:65:8d:9f:e4:a5:e0:5c:ea:
                    2b:f8:c6:27:2a:e8:3e:c4:f9:3c:3c:04:b0:54:74:
                    3e:cf:a7:d4:10:2c:a8:4a:03:d9:59:2b:77:f5:ff:
                    df:e4:75:c2:05:e4:ad:4d:72:41:ec:58:db:5e:64:
                    87:d5:c2:91:08:63:b1:84:2b:56:39:4e:98:ce:a0:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:22:E8:E3:FB:38:B2:A6:83:83:CA:3F:A8:4E:9F:3E:FF:69:B4:12
            X509v3 Authority Key Identifier:
                keyid:8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/fd337fda7ac04ab4eb50762358caabfa46639a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.104.0/22
                  181.189.176.0/20
                  200.85.0.0/23
                  200.85.4.0-200.85.31.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:c5:d3:cf:49:34:b7:bf:57:2f:e3:61:00:7d:98:4d:0b:
         c2:2f:48:0e:0f:9e:ca:9c:cf:6a:78:d4:69:01:9a:72:ca:14:
         6a:98:47:18:b6:52:b7:77:ca:2f:e8:fd:fb:5d:7e:d7:22:69:
         3b:67:4e:e0:1f:d4:5c:2b:28:c3:a5:40:6e:2b:6f:73:8f:5e:
         30:69:11:b9:18:0e:44:cf:66:07:57:59:90:8c:61:05:ba:ee:
         b1:5e:7c:4f:c5:ec:3d:f5:44:9c:c2:ba:1a:76:6d:06:d7:d3:
         d7:cc:57:22:80:7c:b9:e7:6d:09:e0:ed:b5:e8:73:90:0e:8c:
         d5:80:94:75:d0:99:f6:96:e8:d5:0e:23:2c:a5:a8:8e:5c:29:
         62:88:8a:97:5f:7a:ec:11:c0:83:03:cb:ba:0b:c8:c2:ac:88:
         a0:5f:d3:da:cb:4f:48:22:a8:5f:3c:cf:18:29:9b:cf:e1:43:
         0c:12:b3:66:13:e7:e3:e5:1f:5c:1c:c3:80:fa:54:01:1c:b3:
         12:b2:eb:a2:c0:e5:3e:7c:2b:23:8f:9e:f1:c1:9b:f8:75:e0:
         6c:44:2b:34:f0:89:0e:b9:96:1d:5f:b9:f1:34:d2:44:79:55:
         45:64:08:03:fa:0f:65:3d:bd:ae:13:55:1f:9e:37:1c:3d:74:
         4a:53:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org