Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/68eab0b1dbda9006e622ecdeaf6ca2f17a00a785.roa
File:                     68eab0b1dbda9006e622ecdeaf6ca2f17a00a785.roa (raw, json)
Hash identifier:          pjwAfyDUw2a3wdFFZ6wil4wkMoMZehCiaiXtVBWnnU0=
Subject key identifier:   85:DA:8D:5D:90:D7:42:DC:57:1C:D9:6F:D4:79:7E:2F:F5:FB:E6:67
Certificate issuer:       /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial:       042F77
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/68eab0b1dbda9006e622ecdeaf6ca2f17a00a785.roa
Signing time:             Thu 13 Jan 2022 16:45:12 +0000
ROA not before:           Thu 13 Jan 2022 03:00:00 +0000
ROA not after:            Sat 13 Jan 2024 03:00:00 +0000
asID:                     23243
IP address blocks:        200.12.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274295 (0x42f77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
        Validity
            Not Before: Jan 13 03:00:00 2022 GMT
            Not After : Jan 13 03:00:00 2024 GMT
        Subject: CN=68eab0b1dbda9006e622ecdeaf6ca2f17a00a785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dc:19:60:50:2e:4a:44:8f:86:ed:29:48:80:
                    f6:6f:4f:77:9b:44:ff:48:1d:4a:ad:9d:01:95:4a:
                    10:9b:c4:c9:0e:f9:4c:44:49:fb:36:4f:b8:e9:07:
                    b3:3b:61:a2:f7:45:00:1f:f7:3c:1d:68:ec:3d:31:
                    94:22:59:9b:db:dd:b9:16:4a:bd:9a:f0:a8:cd:19:
                    f1:d5:49:3c:33:8d:4b:23:a3:d1:1e:90:3a:1d:6f:
                    cd:a2:96:a7:52:21:a8:d6:2c:7f:01:e0:76:e3:29:
                    a6:6c:f4:78:88:08:80:ed:c7:7c:f9:94:5a:d5:44:
                    9e:1c:86:0e:3b:6e:4b:e8:99:45:de:df:c6:f6:eb:
                    38:d2:34:76:8e:97:50:10:95:53:55:e5:4b:d5:33:
                    d3:5c:21:d7:dc:a4:12:ae:f4:ff:25:93:0b:93:8a:
                    5d:6e:cb:51:23:13:28:29:ff:d7:14:96:26:bb:b5:
                    ed:46:9c:f9:c7:84:8d:dd:18:12:9f:4b:51:24:d0:
                    63:c5:74:c4:98:9c:7c:92:d9:23:79:be:52:50:49:
                    b5:a6:41:58:94:74:2e:1d:16:4f:2c:18:e6:2f:b6:
                    fc:a0:8b:de:95:28:9c:da:f1:f7:01:8e:d7:a2:ca:
                    9a:3c:a2:97:fd:1f:c4:35:60:4a:3e:d2:d0:00:8f:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:8D:5D:90:D7:42:DC:57:1C:D9:6F:D4:79:7E:2F:F5:FB:E6:67
            X509v3 Authority Key Identifier:
                keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/68eab0b1dbda9006e622ecdeaf6ca2f17a00a785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:21:98:da:df:54:52:b0:2e:66:02:67:7d:97:c5:ff:75:
         d1:47:ed:31:50:d9:00:ee:e2:a6:90:b2:ec:81:16:de:54:a1:
         ba:4d:44:9d:f3:c3:2b:ba:f0:c7:c7:be:cc:3d:46:50:3e:6b:
         ba:5a:df:1e:bc:8d:3a:04:da:13:56:83:8d:9d:4c:2f:06:ed:
         5c:26:bd:59:54:91:58:3f:fe:a9:ca:8d:c9:f5:22:af:15:4e:
         c6:33:4f:b3:a6:a4:d0:3e:85:a4:47:5e:87:08:5e:52:53:09:
         f9:7a:16:85:a9:28:d9:33:e9:2a:c3:c5:8b:36:55:bb:3b:60:
         3b:b7:6c:37:98:b8:e5:fe:f4:a5:60:ca:a5:4f:0e:5c:03:61:
         08:e3:21:2f:c8:0b:22:33:61:22:a1:90:a1:7d:12:d4:c3:dd:
         b0:b5:a6:c1:bf:c4:f5:2f:ca:af:34:16:12:5c:75:a7:d5:73:
         f9:01:a2:94:9d:df:07:0e:93:db:83:fc:35:fe:0a:0a:53:9a:
         41:05:1d:dd:ff:a2:cb:35:d1:0a:5d:6b:ce:2d:e2:c0:f2:69:
         87:9f:35:92:f7:bd:48:4a:8a:1e:8f:b1:28:89:e0:56:be:5d:
         eb:d4:b2:51:94:b7:b5:98:8e:55:1f:73:59:27:c6:52:d7:1e:
         77:e1:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org