Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/95a7251dc5bf05c746b03fa6e490b1b9b800a5dc.roa
File:                     95a7251dc5bf05c746b03fa6e490b1b9b800a5dc.roa (raw, json)
Hash identifier:          IGEn9I/FOsSh7/N6ALmAfdmHb8VIWDNdR4KlXO4ZHR8=
Subject key identifier:   81:75:53:AE:3E:EF:16:80:76:F4:2B:85:B7:3D:48:BA:E4:6B:6B:99
Certificate issuer:       /CN=d0770ddd551675937607f1d9793d3dafd3873a04
Certificate serial:       03EF
Authority key identifier: F7:47:78:57:17:EC:F0:3C:86:56:79:51:47:C8:1B:4D:59:F9:02:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0770ddd551675937607f1d9793d3dafd3873a04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/95a7251dc5bf05c746b03fa6e490b1b9b800a5dc.roa
Signing time:             Thu 30 Jun 2022 20:24:01 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Sun 30 Jun 2024 03:00:00 +0000
asID:                     7965
IP address blocks:        200.2.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0770ddd551675937607f1d9793d3dafd3873a04
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2024 GMT
        Subject: CN=95a7251dc5bf05c746b03fa6e490b1b9b800a5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:41:54:87:a7:77:95:b5:2e:ed:f6:d0:aa:
                    c4:76:92:b9:9c:b9:c6:0e:cc:cb:a9:03:6a:c7:70:
                    4a:c3:34:ce:f7:42:d5:62:75:cb:cb:45:56:e3:c5:
                    e3:21:6b:90:22:f1:05:ef:82:c1:22:4c:35:ef:2b:
                    fa:2d:50:31:67:f0:b8:7c:e5:e7:e7:1b:74:d9:f6:
                    5b:9d:43:53:9b:14:b9:31:f7:f1:8a:52:bb:fc:c8:
                    10:1e:76:c0:c5:78:3a:84:f0:b7:cb:d6:96:6c:9e:
                    58:62:17:43:82:38:54:ed:8e:e3:93:ee:6f:91:17:
                    e6:a0:37:01:f8:03:10:4d:59:94:df:f7:11:7e:f0:
                    3c:37:c8:64:03:53:e0:38:6f:91:b9:53:e4:ea:09:
                    8d:e8:4b:d1:00:39:8a:10:d2:4f:85:c3:76:2b:36:
                    8d:4a:1f:60:10:26:21:64:4a:50:e6:4f:a2:63:a9:
                    eb:f1:eb:99:2c:c7:11:7a:c0:b4:84:1b:22:cd:57:
                    de:62:5f:29:6e:86:50:0b:c3:28:bd:4e:bc:54:c9:
                    8d:63:34:b5:19:36:62:77:48:09:a0:6b:b9:a0:b5:
                    d0:30:0b:c8:77:3c:01:29:7e:c5:11:1f:df:d4:c3:
                    f2:6f:c9:7d:54:15:b2:4a:4d:60:a0:4b:47:9a:56:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:75:53:AE:3E:EF:16:80:76:F4:2B:85:B7:3D:48:BA:E4:6B:6B:99
            X509v3 Authority Key Identifier:
                keyid:F7:47:78:57:17:EC:F0:3C:86:56:79:51:47:C8:1B:4D:59:F9:02:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0770ddd551675937607f1d9793d3dafd3873a04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/95a7251dc5bf05c746b03fa6e490b1b9b800a5dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/d0770ddd551675937607f1d9793d3dafd3873a04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:96:7d:4b:56:d5:b4:e4:5d:cd:8d:f8:45:81:fe:21:a1:b4:
         43:94:94:f4:a8:52:c0:8b:de:bd:9a:0e:b7:7b:59:20:26:26:
         4a:a1:c7:23:be:ed:40:c8:b0:e5:83:7b:48:53:e3:18:ba:e4:
         de:44:30:d5:70:f4:d5:94:77:1d:b1:e6:2e:de:c6:e8:95:d0:
         1c:38:21:63:cd:d9:94:ec:5c:bf:22:2c:38:49:a4:51:4f:34:
         1b:a4:56:3a:eb:85:ae:63:1d:9a:f6:2b:4b:e7:bb:da:af:cd:
         73:58:1d:a6:36:65:13:ea:56:fe:9b:fd:f0:35:64:83:72:ae:
         4f:7b:32:97:ad:d3:79:e6:06:04:85:fc:84:75:0e:86:5c:99:
         3e:5a:2b:83:66:11:41:92:6f:cc:ef:91:66:00:02:65:42:45:
         5c:95:a3:ea:79:3a:e6:cc:87:9f:76:bc:c3:7c:30:c0:23:b1:
         eb:ea:ea:2f:d5:52:49:3a:d1:d1:5e:78:0b:5d:de:98:c3:d5:
         0f:6c:cd:76:1c:99:bc:19:1c:4b:d5:96:78:30:1e:d3:30:c6:
         cd:30:82:af:21:e0:5e:b1:e5:37:99:58:18:9e:54:f5:3b:bf:
         94:d0:ee:ab:2d:b1:cc:fe:6f:17:55:ac:6e:ab:b4:b2:cb:0a:
         6b:31:5b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org