Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/c631f7b51547f957ac0b26b1628f82af905300a4.roa
File:                     c631f7b51547f957ac0b26b1628f82af905300a4.roa (raw, json)
Hash identifier:          Ys4jFpKOCnVEUNH1y638zqGBkinj7sH0NYNk0lvovoQ=
Subject key identifier:   A4:3A:86:DE:50:12:4C:97:43:E3:18:4F:C3:08:20:D3:4F:2C:0C:5C
Certificate issuer:       /CN=4e26de49cdf671c8caceba8adf635148030505f5
Certificate serial:       1B4060
Authority key identifier: B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/c631f7b51547f957ac0b26b1628f82af905300a4.roa
Signing time:             Fri 15 Sep 2023 04:54:20 +0000
ROA not before:           Thu 14 Sep 2023 04:54:20 +0000
ROA not after:            Mon 15 Sep 2025 04:54:20 +0000
asID:                     265703
IP address blocks:        200.63.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785952 (0x1b4060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e26de49cdf671c8caceba8adf635148030505f5
        Validity
            Not Before: Sep 14 04:54:20 2023 GMT
            Not After : Sep 15 04:54:20 2025 GMT
        Subject: CN=c631f7b51547f957ac0b26b1628f82af905300a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:dd:0f:42:56:0d:84:01:99:d2:25:aa:cc:
                    86:0f:10:ba:97:8f:5f:e5:a1:ad:40:c6:9d:26:24:
                    29:86:81:3b:7c:f5:01:9b:e3:ac:b4:8f:cd:c4:e0:
                    83:6c:8e:ff:0c:eb:59:e4:59:9e:e5:c0:8f:63:05:
                    97:93:fe:e2:0c:c7:2d:6b:22:b8:f0:9c:83:5d:85:
                    63:37:16:75:87:b3:f9:fd:5d:bb:57:31:c8:3c:91:
                    18:c6:0f:e8:55:a8:81:61:27:79:be:08:30:89:90:
                    0b:9d:56:7f:86:ed:ed:53:02:6e:8e:c3:93:48:3b:
                    53:17:15:21:de:ed:77:ef:54:70:2d:6c:f1:c2:de:
                    6c:13:e6:61:3a:2b:51:3c:52:1a:e6:62:49:e6:93:
                    fa:ae:b6:a3:91:da:e6:67:48:88:50:93:a6:44:7a:
                    7a:ea:3a:f4:02:a5:20:aa:be:51:e3:0f:f4:69:e6:
                    b8:ef:7c:dd:bd:3d:cd:ab:59:7f:79:59:48:96:d5:
                    50:64:63:7a:4d:ab:db:24:c5:59:86:3c:5e:66:c3:
                    66:63:2e:ea:b7:28:40:88:05:e2:71:56:fa:48:64:
                    5e:07:a9:d1:ba:3f:bb:e1:ba:1a:16:34:a1:d1:bf:
                    73:00:51:43:10:b0:ce:f9:22:68:24:48:1c:37:d5:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3A:86:DE:50:12:4C:97:43:E3:18:4F:C3:08:20:D3:4F:2C:0C:5C
            X509v3 Authority Key Identifier:
                keyid:B6:10:37:DE:0E:94:04:7D:4A:C0:0B:7B:97:FC:4B:D0:84:AE:ED:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e26de49cdf671c8caceba8adf635148030505f5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/c631f7b51547f957ac0b26b1628f82af905300a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cc3b477-c542-443e-a0c0-eadb548c361c/4e26de49cdf671c8caceba8adf635148030505f5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:aa:74:36:b4:10:0a:6f:41:e0:7e:7d:ab:37:66:8c:78:
         8f:53:3e:10:eb:12:a4:ab:8f:59:2e:a6:2e:5d:18:19:bc:9e:
         aa:ea:8f:2e:56:99:9c:bb:c8:06:4b:81:be:ab:b6:0b:03:b0:
         68:ce:b2:09:ff:97:db:df:b1:68:c8:07:5c:ed:c2:6d:9d:0d:
         63:d1:fa:cb:6d:76:a5:3c:7d:8d:d3:ab:57:87:6d:39:b3:c5:
         25:05:ff:36:d0:c2:e3:5f:58:fc:e9:e2:74:a3:64:c1:89:4f:
         85:c1:ce:a9:f6:74:9a:a6:35:15:a3:33:b6:b6:b5:ad:b9:f0:
         6d:52:d6:60:3e:43:d0:3b:5d:d2:34:fa:51:0d:06:49:51:22:
         b1:5f:50:5e:d7:0e:f7:1b:e9:c8:2d:6c:43:e0:ba:26:86:b9:
         2d:d0:3a:a3:0a:63:13:b6:ec:83:32:73:f3:61:19:03:42:c0:
         51:b7:56:44:a6:82:7d:14:61:91:7b:f2:4e:cf:71:0c:0d:02:
         88:7e:e7:b0:e5:f6:0f:12:3b:ef:01:f6:91:97:61:26:63:83:
         f0:44:90:6e:9e:1f:23:7d:a4:42:c7:a5:8b:3d:93:9a:4e:71:
         b4:58:3d:a0:eb:cd:44:9e:16:36:29:80:6b:87:51:c3:01:31:
         d1:0c:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org