Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/60b76a3c0e40e7a84c6449ed2b4b9d9ed1f01f6b.roa
File:                     60b76a3c0e40e7a84c6449ed2b4b9d9ed1f01f6b.roa (raw, json)
Hash identifier:          uXnEkKYM+pGuiozGSjXE1EZORTJ/L3MJmt/GYpyxM6M=
Subject key identifier:   09:A6:D4:E6:A3:3D:D3:F6:D3:48:5B:03:E1:14:BD:BE:18:31:A4:0E
Certificate issuer:       /CN=151939fc96650e9ed90e8be5070013a08273ea09
Certificate serial:       0573
Authority key identifier: F0:6A:90:B8:97:2B:5C:D8:DF:FE:38:96:C6:00:E1:3A:89:C6:D5:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/151939fc96650e9ed90e8be5070013a08273ea09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/60b76a3c0e40e7a84c6449ed2b4b9d9ed1f01f6b.roa
Signing time:             Tue 07 Jun 2022 21:45:57 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Mon 07 Jun 2027 03:00:00 +0000
asID:                     27839
IP address blocks:        200.90.144.0/21 maxlen: 24
                          200.110.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151939fc96650e9ed90e8be5070013a08273ea09
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2027 GMT
        Subject: CN=60b76a3c0e40e7a84c6449ed2b4b9d9ed1f01f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:b5:f0:43:64:cc:5d:d5:aa:6e:2b:51:27:
                    cc:2d:ad:f8:d5:b5:2d:fa:56:0b:24:76:62:c2:da:
                    e6:c6:a7:f3:ca:3a:4a:1c:df:c0:6b:d9:8a:be:d2:
                    8e:0c:ad:22:55:19:46:d5:4d:91:90:ab:34:81:17:
                    39:dd:03:26:ed:f2:bc:d8:d1:3a:c7:0c:85:93:72:
                    6a:4a:95:cd:a8:85:f3:f4:9f:46:9a:6d:73:5e:e0:
                    6d:c5:32:fc:10:7f:cb:73:bd:4f:64:28:84:0a:c6:
                    b2:0b:40:8b:f7:cc:be:ce:34:e5:57:f1:ca:57:d6:
                    d7:da:04:84:8c:d1:b9:86:7a:1b:16:a5:34:58:c3:
                    69:85:c3:40:87:f5:b2:c3:9a:6a:ea:c0:ac:e0:3d:
                    d3:f8:b9:2c:8c:af:65:e0:15:b0:e9:33:c8:ee:fc:
                    52:48:90:c9:f6:90:af:32:34:cf:9b:36:02:6c:6c:
                    74:d5:fb:a1:5f:db:bc:db:45:b5:2b:0c:42:b4:3a:
                    58:de:5f:05:0c:ac:e2:dd:42:55:80:6a:4c:21:0b:
                    1b:2c:ea:e7:bb:ae:e2:60:6b:a4:fe:e8:a7:84:2d:
                    25:54:f0:f5:48:a5:89:13:c5:75:e0:ff:d4:2f:64:
                    ed:0a:73:31:40:70:a3:ce:5c:c5:ae:54:75:40:8a:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A6:D4:E6:A3:3D:D3:F6:D3:48:5B:03:E1:14:BD:BE:18:31:A4:0E
            X509v3 Authority Key Identifier:
                keyid:F0:6A:90:B8:97:2B:5C:D8:DF:FE:38:96:C6:00:E1:3A:89:C6:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/151939fc96650e9ed90e8be5070013a08273ea09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/60b76a3c0e40e7a84c6449ed2b4b9d9ed1f01f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/151939fc96650e9ed90e8be5070013a08273ea09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.144.0/21
                  200.110.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:26:b2:2b:8e:c9:e9:ce:3c:37:e8:70:93:96:7f:71:03:
         c7:0d:42:a0:5a:f5:dc:01:a1:1c:63:85:6a:9e:57:30:ee:86:
         3c:49:0c:0b:a1:54:0d:b9:0f:51:d9:66:db:be:b5:9c:ee:84:
         e7:a7:9d:12:06:b1:c9:71:c9:37:59:f3:87:92:61:47:b3:c4:
         b7:1a:0d:20:c3:90:6f:3b:a7:09:b9:a4:2f:b5:f2:9d:8a:39:
         d3:82:06:c6:32:d4:ae:9c:35:75:52:fe:91:05:3d:ae:6c:e8:
         df:c6:fc:2f:d9:30:56:2e:44:e4:4b:9c:f8:78:cb:64:5d:77:
         02:5e:26:94:1c:89:52:00:86:f4:80:3d:6c:d3:fa:e8:9c:c1:
         03:8c:3b:72:8b:a4:2d:4e:d0:00:d5:82:61:3e:d9:e4:df:35:
         47:ea:98:30:7e:c8:57:94:7e:21:9c:7a:86:af:36:2d:18:10:
         2e:93:ba:26:ae:2f:8f:42:2b:d3:9d:8f:a1:f2:80:69:e6:dc:
         b5:80:18:0d:ed:83:c7:65:de:40:10:ac:34:3b:5e:f8:4f:99:
         7e:b2:a8:ac:ae:42:7e:6c:1f:f6:86:ae:c1:d6:63:7f:54:d2:
         64:12:94:a0:1c:fe:23:6b:0a:7b:a9:39:8a:81:e2:64:a0:23:
         2f:d1:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org