Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/21861bbb8008bb13fdf6ded962b943eb8d6bbd9f.roa
File:                     21861bbb8008bb13fdf6ded962b943eb8d6bbd9f.roa (raw, json)
Hash identifier:          aGpQMCRCjv9RMw5vWeXrZlkiSPHv0fq4+D+YbkoqiMs=
Subject key identifier:   67:37:77:D0:FA:93:82:97:E7:D3:A0:FA:BD:25:E5:17:24:C9:96:76
Certificate issuer:       /CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
Certificate serial:       0DB766
Authority key identifier: A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/21861bbb8008bb13fdf6ded962b943eb8d6bbd9f.roa
Signing time:             Tue 20 Apr 2021 22:34:55 +0000
ROA not before:           Tue 20 Apr 2021 03:00:00 +0000
ROA not after:            Thu 20 Apr 2023 03:00:00 +0000
asID:                     27958
IP address blocks:        200.50.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898918 (0xdb766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
        Validity
            Not Before: Apr 20 03:00:00 2021 GMT
            Not After : Apr 20 03:00:00 2023 GMT
        Subject: CN=21861bbb8008bb13fdf6ded962b943eb8d6bbd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:d2:ac:8c:f1:a0:48:3e:40:0c:2c:2b:21:
                    b9:39:98:59:de:44:96:8c:30:99:15:10:f3:53:f3:
                    bf:bf:c5:cc:2f:6c:00:7b:a2:2b:cf:a7:a4:51:ab:
                    6c:b2:2f:0a:a5:d4:2a:1a:57:df:fc:6e:ac:d8:96:
                    00:44:39:53:b3:3e:5a:70:7f:37:c8:b8:70:da:ef:
                    46:37:85:c0:fa:ba:ba:e9:c7:15:9d:bf:53:db:f4:
                    71:64:7c:6b:38:90:b3:ff:7b:97:4b:55:cf:f2:69:
                    bd:d4:99:b1:ff:0e:da:0c:64:c7:d2:07:0b:89:a1:
                    a1:10:9a:47:92:17:e5:3c:4d:63:ce:17:9e:e1:dd:
                    af:b7:7b:d4:86:6f:b3:bf:50:4d:f4:62:d6:7e:f8:
                    c2:a8:ad:af:ac:d3:4b:68:b2:61:a2:90:d6:8c:c3:
                    8e:7a:9f:30:df:21:44:4d:59:07:e7:ec:6c:68:4b:
                    6d:57:56:a7:6f:40:5d:ba:e7:58:75:25:af:b7:f5:
                    18:fc:7c:50:b9:f7:09:24:a4:d5:3d:a6:70:19:2d:
                    ec:4a:35:f3:51:6b:a8:b2:0f:29:4d:d3:d7:a8:f7:
                    bf:65:0f:fd:d2:fd:57:66:ae:c1:7a:5a:8a:52:fc:
                    e5:80:4c:19:f0:2c:ab:a9:8f:a7:b6:77:32:e1:f7:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:37:77:D0:FA:93:82:97:E7:D3:A0:FA:BD:25:E5:17:24:C9:96:76
            X509v3 Authority Key Identifier:
                keyid:A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/21861bbb8008bb13fdf6ded962b943eb8d6bbd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:8c:73:4e:14:83:69:ce:0c:3d:88:e7:8b:3c:b2:e7:6d:2c:
         7e:2c:48:14:6c:2c:f4:3a:af:f0:f9:31:fa:65:90:2b:c9:79:
         11:d1:dc:b3:45:22:3c:db:58:a2:e9:b3:47:09:a1:53:aa:87:
         6f:87:f0:e2:05:86:17:8f:9e:e7:3b:bc:24:13:3e:01:c7:a5:
         e5:6b:f7:b4:de:94:4f:38:03:87:91:5a:f2:76:a5:6d:64:45:
         7a:5c:dc:a4:64:bb:06:43:e2:3f:8f:da:48:c6:4d:ad:29:d8:
         2b:ba:31:46:dc:10:49:26:c6:be:af:f6:27:35:58:3b:db:6f:
         15:3e:21:8d:61:0b:20:a3:ed:0f:5e:5d:dc:10:bc:1e:6b:1a:
         f7:73:ae:f8:54:ef:4c:5f:29:9f:07:39:c1:14:ba:b1:38:0b:
         d6:a5:a9:be:83:e4:a2:eb:62:36:56:5c:4d:5c:93:f7:5b:b6:
         16:82:9f:f2:d1:61:58:bd:0c:9a:03:c8:cd:9b:70:8f:2b:54:
         00:cf:ae:3a:25:4e:5b:7f:e4:46:df:8f:f9:38:3c:c8:f3:2f:
         c1:78:d6:87:16:b3:72:6b:f5:a7:cb:48:59:d8:9e:99:16:56:
         75:4d:33:af:97:41:37:79:9e:65:b3:db:21:a3:16:70:84:3c:
         9c:8a:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org