Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/e46e8984b221bfa201cda9d6d123e32a82802684.roa
File:                     e46e8984b221bfa201cda9d6d123e32a82802684.roa (raw, json)
Hash identifier:          uDNqz9usJMVOrB8YUaLMeZeNQsPVXLOMeRKI6OZkJe4=
Subject key identifier:   74:45:A7:54:90:C9:1C:AD:F8:1A:C0:FC:59:75:F9:FE:C6:8F:2D:BA
Certificate issuer:       /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial:       0B15B0
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/e46e8984b221bfa201cda9d6d123e32a82802684.roa
Signing time:             Fri 14 Oct 2022 23:23:29 +0000
ROA not before:           Wed 12 Jan 2022 03:00:00 +0000
ROA not after:            Sat 13 Jan 2024 03:00:00 +0000
asID:                     23243
IP address blocks:        200.12.32.0/24 maxlen: 24
                          200.12.33.0/24 maxlen: 24
                          200.12.34.0/24 maxlen: 24
                          200.12.47.0/24 maxlen: 24
                          200.12.51.0/24 maxlen: 24
                          200.12.62.0/24 maxlen: 24
                          200.12.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726448 (0xb15b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
        Validity
            Not Before: Jan 12 03:00:00 2022 GMT
            Not After : Jan 13 03:00:00 2024 GMT
        Subject: CN=e46e8984b221bfa201cda9d6d123e32a82802684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:e5:93:ef:ef:ef:14:8a:85:45:0e:78:7c:
                    e2:1e:8b:a1:5f:ca:54:1c:12:8b:59:50:ff:7f:f3:
                    91:34:3f:e9:70:49:e6:51:55:a5:03:f9:e0:08:e0:
                    9c:12:c5:29:c8:bd:37:10:2c:48:e8:3d:3a:06:a6:
                    bd:b3:de:06:a1:c5:fd:9c:fe:1d:12:f7:b8:11:ff:
                    99:8c:20:10:23:9b:ad:db:cb:03:b5:24:8b:a4:63:
                    a5:99:27:17:f2:25:10:89:e4:4e:01:4c:d0:f4:a4:
                    bc:8b:38:91:4e:ba:a9:a3:b5:b6:65:13:c7:5e:04:
                    ab:c4:c4:f3:31:68:6c:5a:af:f7:ba:c2:0b:03:dd:
                    f5:de:72:65:91:63:19:b9:d7:17:f8:71:ef:26:fb:
                    30:49:ae:f7:e4:2d:e2:a6:4a:8b:eb:dc:6b:cd:8b:
                    8c:fd:9c:eb:c1:df:46:a4:64:02:47:2a:b7:2a:82:
                    53:f4:81:00:d8:46:89:d4:ce:b0:d5:13:ad:44:26:
                    8f:fb:a9:a2:81:37:04:a8:dc:00:43:a3:59:f2:54:
                    16:4e:76:12:16:7e:dc:cb:c9:cb:15:81:db:15:eb:
                    07:78:b6:f6:51:ea:85:71:52:38:98:c1:9e:a7:af:
                    fe:46:e3:ba:cb:22:dd:5e:eb:c7:9d:84:9f:5d:a8:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:45:A7:54:90:C9:1C:AD:F8:1A:C0:FC:59:75:F9:FE:C6:8F:2D:BA
            X509v3 Authority Key Identifier:
                keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/e46e8984b221bfa201cda9d6d123e32a82802684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.32.0-200.12.34.255
                  200.12.47.0/24
                  200.12.51.0/24
                  200.12.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:6f:82:8a:7c:aa:2b:0d:bc:3d:75:4a:43:c3:b3:73:95:7e:
         6d:13:c1:15:fd:a3:8b:4f:bf:4d:68:cf:95:d7:04:90:3f:43:
         4d:8c:4c:c3:c6:be:2c:6d:f6:77:42:02:1a:58:ba:ea:7d:26:
         38:86:4c:0c:89:87:b2:d0:3d:75:cd:85:71:a5:9b:b6:92:44:
         f9:fd:e1:35:b6:12:8e:81:2d:8f:5d:92:ea:ce:af:e4:b8:14:
         41:1e:2a:70:0c:ae:02:1d:1b:a2:df:86:08:23:bb:14:f0:23:
         e1:5d:86:62:37:46:d9:85:dc:5f:5d:51:71:ce:5c:97:3b:95:
         6a:a1:92:c9:6d:e5:69:88:86:ce:c8:9a:ad:85:f1:1b:fe:ac:
         c0:f8:1b:3a:27:73:8e:d8:c9:80:f5:53:53:88:a8:29:54:00:
         79:8a:e0:c5:de:e7:6f:ba:1b:52:ad:1b:fc:2c:b1:77:87:0f:
         74:9d:e1:49:99:74:0f:fa:30:04:a8:f4:74:78:74:50:1b:8e:
         a6:2e:61:d6:ef:ba:46:af:d0:c0:10:d6:b2:0c:5f:18:e0:e4:
         ca:6e:01:52:bc:37:a3:34:9a:0f:b0:73:2e:bd:cd:fc:a7:54:
         20:88:45:43:27:51:4d:1f:dc:b0:eb:b7:24:7e:ce:82:73:85:
         d0:00:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org