Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a045afbeba889c6ac3a905b607ef7542f0d9b8d9.roa
File:                     a045afbeba889c6ac3a905b607ef7542f0d9b8d9.roa (raw, json)
Hash identifier:          n/pc+r1CInUl4vGk0zTGUplwqCmH3Ptj432u2lPzNBQ=
Subject key identifier:   20:8C:D1:BD:A0:D9:41:F0:9F:32:FD:9D:E0:29:D2:58:EB:25:13:88
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03E74F
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a045afbeba889c6ac3a905b607ef7542f0d9b8d9.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     61447
IP address blocks:        200.93.247.0/24 maxlen: 24
                          2801:1b:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255823 (0x3e74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=a045afbeba889c6ac3a905b607ef7542f0d9b8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:48:14:46:62:e9:4f:9e:df:9d:5f:89:ac:
                    0d:21:3a:bf:43:56:2e:2d:2b:84:cc:e1:85:be:12:
                    e5:89:cb:64:54:57:5b:ce:42:3d:1b:a0:e0:bb:5a:
                    94:bb:25:f7:6c:af:08:9d:16:89:a7:6b:4a:95:36:
                    b6:0f:69:b4:f1:55:33:cf:e7:5e:17:cb:ca:f8:f2:
                    0c:11:92:94:ff:04:f1:e5:f4:2c:87:e1:42:aa:f2:
                    3b:73:08:27:8a:18:dd:91:47:f9:e4:7d:c6:2a:94:
                    f2:27:6d:5d:e5:1a:0c:8c:8a:c2:f7:cb:0c:f7:9c:
                    65:7d:27:31:75:6f:f4:e1:d7:09:eb:8f:db:bb:fd:
                    0f:98:e8:74:f5:00:ff:00:5e:05:34:f4:87:40:13:
                    16:87:f0:b8:ae:e8:f1:48:2e:ba:b5:8d:8d:54:3d:
                    ff:a9:cd:6d:a3:15:f1:29:72:31:41:03:cb:fc:ce:
                    b7:c8:54:a9:95:27:1d:c4:69:6a:ff:e7:76:b9:08:
                    88:de:c1:74:3e:04:4b:50:e5:bf:7c:93:60:cf:ea:
                    5c:b6:3c:12:23:fd:62:b0:c4:d0:6e:d0:c4:2d:4e:
                    af:f1:db:77:54:ec:db:02:ef:d2:1d:53:fc:b3:86:
                    9f:15:b7:12:4c:8c:79:03:ef:a7:d0:8a:e2:98:8d:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:D1:BD:A0:D9:41:F0:9F:32:FD:9D:E0:29:D2:58:EB:25:13:88
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a045afbeba889c6ac3a905b607ef7542f0d9b8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.247.0/24
                IPv6:
                  2801:1b:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:22:0d:0f:0a:e5:e5:81:f4:ad:2c:28:96:67:05:71:48:95:
         47:96:fb:88:e8:12:22:7d:18:27:85:3a:6b:0b:06:62:63:9b:
         85:f5:58:90:08:71:7f:78:0a:6c:da:f6:99:09:a4:90:4e:ba:
         c2:32:96:ad:e2:56:8c:30:b5:5d:2f:02:a7:60:39:7c:fa:07:
         05:da:6e:07:e9:5e:dd:ef:2f:36:8c:3b:7d:90:41:a8:a0:cc:
         7a:f1:bc:64:26:6c:84:18:2b:d2:e1:f6:09:8b:3b:02:3d:b7:
         02:ff:89:d0:8d:89:31:bd:64:a0:27:0b:c8:3d:38:ba:1d:55:
         91:86:72:c3:b0:b1:97:a5:ba:e2:91:7e:f2:13:d1:46:fc:8d:
         d5:52:e6:b3:2b:bc:bb:9a:39:e7:14:c8:c5:0d:e4:a9:2c:ef:
         d5:72:13:da:8b:19:6b:aa:1a:e6:f9:55:04:b8:23:50:cc:21:
         3a:ea:94:5b:49:91:41:65:b9:ce:74:c3:9f:ec:aa:82:21:85:
         f6:17:f8:f5:62:18:4f:83:91:56:13:35:80:cd:6c:06:1e:e8:
         f4:4b:c6:3a:21:39:78:62:11:5c:b6:e1:db:6c:b8:08:92:2f:
         d7:90:77:d7:a7:80:31:d2:69:9f:9c:e2:f1:a6:f8:6e:f6:c0:
         93:a7:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org