Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e487239d-90e1-40e2-ad53-4fc703b654f8/08ac048296b45fec6484e31ac7b1e89ed4091890.roa
File:                     08ac048296b45fec6484e31ac7b1e89ed4091890.roa (raw, json)
Hash identifier:          eMeiuIUtpI28QzdzQ6h7PRcvN+KUbUOz+3iWlB5DTsY=
Subject key identifier:   CE:96:EF:5B:47:03:EA:8C:C4:D8:14:37:C8:EE:F2:27:DC:7D:ED:74
Certificate issuer:       /CN=86059556325495219b02c9ff8c0c0906818810fa
Certificate serial:       11E2B3
Authority key identifier: B3:77:57:2E:A3:DF:DE:74:2F:A7:72:FB:64:EC:99:6F:55:56:95:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86059556325495219b02c9ff8c0c0906818810fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e487239d-90e1-40e2-ad53-4fc703b654f8/08ac048296b45fec6484e31ac7b1e89ed4091890.roa
Signing time:             Wed 11 Oct 2023 08:30:01 +0000
ROA not before:           Tue 10 Oct 2023 08:30:01 +0000
ROA not after:            Thu 09 Oct 2025 08:30:01 +0000
asID:                     23031
IP address blocks:        200.0.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172147 (0x11e2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86059556325495219b02c9ff8c0c0906818810fa
        Validity
            Not Before: Oct 10 08:30:01 2023 GMT
            Not After : Oct  9 08:30:01 2025 GMT
        Subject: CN=08ac048296b45fec6484e31ac7b1e89ed4091890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:40:8b:14:36:15:e0:39:4d:e8:4c:6e:5c:4e:
                    6f:35:dc:ab:4a:d0:30:1e:4a:cb:6f:1d:d5:1c:40:
                    8e:00:76:26:1f:49:49:48:7d:cb:39:c2:6a:25:cc:
                    c2:60:9e:1e:7b:da:cc:79:0f:ce:86:1e:2a:bd:3f:
                    69:cc:25:03:d3:9f:d1:f2:bb:b5:2e:21:ed:74:90:
                    b8:64:d9:25:c3:a0:18:2d:9c:24:48:51:31:9c:b8:
                    f2:6f:8a:08:f3:c0:dc:4a:2b:5d:52:01:46:a6:cd:
                    b0:a5:b5:c8:70:b2:9a:8c:3f:f5:bc:12:73:dd:08:
                    c6:d3:e9:3d:17:f1:57:01:d2:58:84:de:b6:64:dc:
                    58:ee:ab:5a:10:2c:38:67:69:5f:8e:4b:ea:9b:d6:
                    7a:d2:f0:f2:12:8c:44:32:44:30:c7:fd:d2:cc:d9:
                    74:85:12:ac:03:ac:b3:35:f6:72:11:12:ee:ff:8c:
                    94:27:4d:e0:b5:7b:d0:f5:c1:ef:61:af:0f:ef:17:
                    4a:17:58:8f:bf:01:72:a1:38:8c:43:cb:1d:2d:d1:
                    c8:2f:fc:c1:ef:9d:c5:8e:5f:fd:d6:5e:95:97:42:
                    eb:65:b4:59:11:ff:ae:ad:bf:f8:1b:37:02:f0:ae:
                    ed:ba:02:34:c1:95:87:55:55:86:f0:d0:66:f5:2d:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:96:EF:5B:47:03:EA:8C:C4:D8:14:37:C8:EE:F2:27:DC:7D:ED:74
            X509v3 Authority Key Identifier:
                keyid:B3:77:57:2E:A3:DF:DE:74:2F:A7:72:FB:64:EC:99:6F:55:56:95:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86059556325495219b02c9ff8c0c0906818810fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e487239d-90e1-40e2-ad53-4fc703b654f8/08ac048296b45fec6484e31ac7b1e89ed4091890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e487239d-90e1-40e2-ad53-4fc703b654f8/86059556325495219b02c9ff8c0c0906818810fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c4:a9:24:d5:a7:93:81:7d:63:36:e5:30:73:77:95:71:88:
         9f:6d:b5:72:7c:41:cc:a0:72:92:f9:0c:18:07:f6:5f:20:77:
         d8:0c:35:e8:9f:d4:e7:4d:b0:b3:2a:61:ec:f5:f4:13:8e:7a:
         66:6c:ca:e2:06:e5:2a:97:35:3b:7b:9c:94:7a:01:3d:ea:d2:
         dc:5b:7a:fc:f2:73:24:5a:ed:d4:4c:f7:4f:85:d2:5c:82:be:
         ac:8c:1d:b4:e3:83:79:d0:81:03:08:7f:7e:5b:bd:0b:fb:1b:
         36:e6:20:62:31:ac:be:47:0e:20:05:1a:c0:9f:ab:d2:fe:1f:
         24:13:d0:1d:c9:00:c5:e6:e1:85:b6:9b:97:0c:dc:cd:8b:d1:
         23:a9:d1:27:b0:a9:1f:a3:b4:37:6e:97:ce:cd:d9:44:f9:5d:
         95:f0:de:ca:ac:2a:14:64:a8:71:ea:3b:f9:16:45:91:0a:e2:
         81:98:59:c8:cd:3c:6e:25:3b:a1:75:c2:4c:11:c8:9b:57:2f:
         1c:d0:4d:a2:c1:5d:27:05:44:3f:d3:e9:99:e4:df:d2:de:d1:
         9e:51:79:aa:63:f1:85:65:ed:f0:5e:fa:7c:1a:6b:63:18:60:
         34:b6:7a:91:32:e0:c5:cf:a6:ef:55:49:f9:07:ee:6c:be:88:
         ba:88:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org