Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa
File:                     cec93a7e5f787c1777b0a7a4461711741e9e6812.roa (raw, json)
Hash identifier:          gYUnGrDQdlnE29iZw6hJ+d7ZSC/HDvVSag8t9GHcy44=
Subject key identifier:   BC:B4:79:95:28:46:3E:E6:ED:2E:AC:7D:F4:BA:40:CD:21:10:E8:98
Certificate issuer:       /CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Certificate serial:       22D561
Authority key identifier: 81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa
Signing time:             Tue 11 Jul 2023 17:51:46 +0000
ROA not before:           Mon 10 Jul 2023 17:51:46 +0000
ROA not after:            Fri 11 Jul 2025 17:51:46 +0000
asID:                     267781
IP address blocks:        200.229.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282849 (0x22d561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
        Validity
            Not Before: Jul 10 17:51:46 2023 GMT
            Not After : Jul 11 17:51:46 2025 GMT
        Subject: CN=cec93a7e5f787c1777b0a7a4461711741e9e6812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:7d:2f:5f:d1:e7:e6:6f:d6:d6:e1:09:2f:
                    67:a3:30:4d:4c:cc:31:ea:e5:1f:3a:91:d5:d5:88:
                    06:6b:c5:b3:ce:5f:5e:9e:62:1c:b3:64:2e:1c:92:
                    9c:68:d4:f5:61:6c:b9:2a:40:01:49:8a:98:01:87:
                    92:3d:c2:34:be:19:62:dd:ed:1d:62:c4:ad:c5:dd:
                    af:e3:3d:c5:6e:e1:55:98:6e:fb:a5:2e:cc:81:f6:
                    e7:30:d6:87:b6:1b:30:e4:b7:d1:5d:78:3c:21:8c:
                    f9:55:cb:94:f4:f1:5f:a5:5b:66:de:7d:37:f6:51:
                    68:39:91:2f:71:1f:30:01:2b:86:d5:69:47:72:06:
                    af:71:9c:85:db:e8:27:73:c6:49:0a:89:4d:30:a6:
                    c9:e1:1b:9e:d3:61:df:e8:88:57:46:7c:e4:04:6b:
                    ed:54:d6:21:86:9b:ff:86:b3:c7:f7:1d:93:b8:16:
                    b1:1d:8b:9e:60:b6:2f:84:88:4c:65:3f:22:e3:0e:
                    e0:0d:d6:73:11:80:da:39:7a:54:f5:a0:af:5d:49:
                    5d:0f:98:50:61:17:b3:05:8b:70:11:c5:fc:95:06:
                    47:86:71:79:43:5e:98:64:f4:d7:bd:a5:16:91:fd:
                    82:3b:ee:7f:4f:56:9c:c8:ae:d8:eb:5a:9a:e2:9a:
                    4d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B4:79:95:28:46:3E:E6:ED:2E:AC:7D:F4:BA:40:CD:21:10:E8:98
            X509v3 Authority Key Identifier:
                keyid:81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:c4:be:f5:bc:16:5a:83:fc:77:be:3d:54:92:b4:06:d8:55:
         de:5d:48:1a:65:1b:b5:8a:dc:b6:8d:5c:e4:4c:1d:01:da:d1:
         80:43:3a:f4:a6:52:c9:3c:7d:63:e3:3a:34:20:ee:21:4c:69:
         dd:7f:71:30:6f:5c:24:46:1a:d4:18:0e:a2:b8:6d:1c:30:ce:
         81:db:07:58:c2:43:18:99:19:f4:9d:b0:7c:67:89:6f:c1:0b:
         4e:3b:5c:4d:33:b3:bf:e8:37:08:2f:21:92:ef:d4:2d:ed:22:
         4f:4a:a7:bf:65:4d:45:85:df:05:31:6d:38:e2:c7:d5:fb:a8:
         77:e9:73:93:8d:ef:fc:1c:94:bb:c4:7c:4d:21:20:e1:3a:c3:
         58:ef:60:1d:8e:90:17:8d:4f:b3:b3:8b:c7:e7:ef:37:3a:a7:
         7b:39:c6:a1:4f:e1:85:af:17:a2:6c:24:07:bc:53:90:e7:26:
         4c:e4:62:8d:cb:1c:d8:14:25:d2:1b:11:d3:24:5e:84:48:af:
         2c:d4:a1:89:6f:d3:35:68:09:0a:13:a9:15:71:09:ac:cc:ff:
         29:33:15:11:f4:99:97:d1:a7:f9:2f:9f:7a:da:25:99:63:4e:
         eb:40:bf:de:2f:01:9d:80:b7:31:09:ce:51:3f:8d:8b:83:a9:
         ad:4d:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org