Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/0f9e925024d7c5a89bb3d08e5861c688602526e7.roa
File:                     0f9e925024d7c5a89bb3d08e5861c688602526e7.roa (raw, json)
Hash identifier:          KsVqHJHYVvC8zlDaJKX9z2Mln8yMdMJSaWmpo0dK0RA=
Subject key identifier:   53:C8:D0:26:F3:48:57:26:57:74:F8:73:CB:E2:38:8B:4A:B2:13:2B
Certificate issuer:       /CN=4e26de49cdf671c8caceba8adf635148030505f5
Certificate serial:       1B460E
Authority key identifier: B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/0f9e925024d7c5a89bb3d08e5861c688602526e7.roa
Signing time:             Fri 15 Sep 2023 04:54:21 +0000
ROA not before:           Thu 14 Sep 2023 04:54:20 +0000
ROA not after:            Mon 15 Sep 2025 04:54:20 +0000
asID:                     265831
IP address blocks:        200.63.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787406 (0x1b460e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e26de49cdf671c8caceba8adf635148030505f5
        Validity
            Not Before: Sep 14 04:54:20 2023 GMT
            Not After : Sep 15 04:54:20 2025 GMT
        Subject: CN=0f9e925024d7c5a89bb3d08e5861c688602526e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:70:b5:ff:de:fd:be:73:ad:e2:43:ba:ec:
                    35:52:c5:05:d0:ad:7f:ce:99:a8:94:8e:5a:28:71:
                    c8:6e:66:c6:a8:af:3e:75:ef:65:b4:4a:08:2c:7b:
                    48:35:d0:1d:f3:d4:b7:1e:93:2f:cb:f2:e0:e3:e7:
                    1f:47:57:6f:74:ce:4b:e8:75:56:35:ea:f6:f5:f4:
                    ca:da:47:a0:20:cc:a4:58:c2:30:dd:18:c4:f8:7d:
                    d8:27:d0:80:83:7a:3d:ab:b2:41:e1:e9:75:4c:bf:
                    73:76:26:61:97:6a:d5:48:c1:63:3d:b7:e9:f4:aa:
                    05:16:f0:e5:93:af:99:3e:fc:3c:60:1e:70:6b:b6:
                    e9:0c:e5:c0:b0:98:73:a9:9f:48:b7:25:af:7d:b4:
                    dd:27:b7:de:87:0e:86:b4:3b:09:e5:ba:83:cc:2e:
                    88:95:29:49:3c:7d:ef:5e:ce:76:81:5b:c6:9e:20:
                    96:1d:1e:72:67:4a:5b:6d:1e:4b:c9:af:01:95:60:
                    e3:43:43:e5:0e:a7:91:b0:cd:3c:bd:be:ed:d4:61:
                    fa:51:e8:c6:4f:7a:55:ec:34:c7:35:6c:80:93:e9:
                    23:1c:c5:ca:1b:44:a3:fe:5a:dc:af:9e:d9:f9:25:
                    1f:1f:3e:94:b6:f9:ee:29:d0:17:fd:0b:5c:fe:34:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C8:D0:26:F3:48:57:26:57:74:F8:73:CB:E2:38:8B:4A:B2:13:2B
            X509v3 Authority Key Identifier:
                keyid:B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/0f9e925024d7c5a89bb3d08e5861c688602526e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4e26de49cdf671c8caceba8adf635148030505f5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:b3:9b:81:a0:6d:9e:69:81:52:8a:da:14:a1:ae:8d:bf:4b:
         db:7a:ae:6b:c3:8c:39:a4:22:55:eb:79:b3:a4:b3:9f:20:cf:
         70:61:f0:aa:7c:77:68:a0:2d:b6:57:2f:a7:6d:6f:88:ca:b2:
         11:9e:6e:74:a7:88:f6:c0:7c:15:d8:b3:7d:9f:1a:7a:c9:46:
         f9:10:dd:ff:c7:fc:90:05:39:b1:1e:2b:f2:78:96:a0:48:0d:
         65:94:07:ee:8d:6e:a3:fe:6f:91:38:18:21:fa:3d:b3:07:c2:
         fc:7c:25:87:f9:23:9a:5b:35:1a:e7:de:e4:16:59:35:1f:28:
         d1:5e:6f:49:d0:08:6b:d6:11:f7:3a:37:eb:98:20:59:e1:c9:
         aa:8d:ed:87:33:1c:47:57:68:3f:06:b5:b8:60:92:cb:08:08:
         56:a5:63:92:60:cf:aa:fe:74:5c:71:22:cd:12:21:cd:1f:95:
         d2:f3:79:69:e8:50:c4:dc:65:60:3b:a8:f4:77:9c:f7:52:96:
         6f:d6:24:04:d4:17:3c:66:5e:de:b6:2d:2e:81:45:3a:96:b0:
         78:01:c0:f7:d3:dd:17:4d:c1:1c:33:c1:a6:cd:df:2f:b5:04:
         a1:55:7e:80:93:40:e7:ed:fd:75:1c:9c:61:ca:52:ed:07:59:
         23:49:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org