Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/6dba3df1114285e40779f930bf9360e70cbcb58d.roa
File:                     6dba3df1114285e40779f930bf9360e70cbcb58d.roa (raw, json)
Hash identifier:          624uIzhlfyl2D5eDZEzCPpd4ZIa5etQirB//TkJ1R+M=
Subject key identifier:   83:BA:E7:5A:E6:14:8E:F9:4E:5D:37:85:1F:FD:6F:D3:33:A5:61:F1
Certificate issuer:       /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial:       29B5ED
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/6dba3df1114285e40779f930bf9360e70cbcb58d.roa
Signing time:             Sat 16 Mar 2024 22:03:30 +0000
ROA not before:           Sat 16 Mar 2024 22:03:19 +0000
ROA not after:            Fri 16 Mar 2029 22:03:19 +0000
asID:                     23383
IP address blocks:        200.30.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2733549 (0x29b5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
        Validity
            Not Before: Mar 16 22:03:19 2024 GMT
            Not After : Mar 16 22:03:19 2029 GMT
        Subject: CN=6dba3df1114285e40779f930bf9360e70cbcb58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:9a:f3:4b:27:fa:7d:5f:2f:b6:11:32:a5:
                    b7:ef:e8:da:86:1d:5f:1b:80:85:2b:39:44:52:1a:
                    70:b6:bc:27:be:8f:0a:45:cc:8f:f7:e8:b8:99:a5:
                    87:4c:4a:b5:03:d1:c8:64:43:e3:74:d4:dd:08:80:
                    88:2d:7a:ef:3d:f4:a6:40:29:8c:5c:e9:d6:f8:87:
                    9f:d8:b5:bb:ed:b4:e0:82:9a:3d:24:87:fc:f1:5a:
                    b8:f4:64:9f:64:50:22:c3:df:94:a8:20:41:38:d0:
                    5c:1d:45:b3:d4:68:43:51:d8:c1:41:9e:76:3e:3d:
                    e1:20:dd:04:6d:d0:e9:74:45:7f:dd:43:31:17:29:
                    77:11:7f:00:a1:6d:83:fd:b7:9d:10:36:8a:79:49:
                    6a:1b:80:03:80:1f:60:10:da:01:2c:48:0d:6c:84:
                    09:8b:15:0e:60:fe:7b:e8:b4:94:f2:e5:78:ab:2e:
                    bb:43:a6:17:54:2f:4a:39:c5:0c:96:da:e9:3c:9b:
                    d1:21:53:61:3c:38:ba:f5:52:65:cb:e7:0f:0c:c2:
                    0e:f4:a0:4e:a4:d3:fd:95:56:2a:82:b9:1b:c4:78:
                    68:0c:43:f3:a4:a8:1d:4f:d6:70:8b:a3:87:2e:06:
                    f4:b7:30:ae:45:1d:e6:6e:a1:a3:f6:98:7f:7c:16:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BA:E7:5A:E6:14:8E:F9:4E:5D:37:85:1F:FD:6F:D3:33:A5:61:F1
            X509v3 Authority Key Identifier:
                keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/6dba3df1114285e40779f930bf9360e70cbcb58d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:64:ff:78:26:51:3f:63:a6:43:36:ed:e4:c4:ae:71:97:
         42:1b:a5:ce:01:36:a8:41:f6:9b:bc:9d:b0:82:48:b4:d6:70:
         9c:a1:23:e8:28:88:8e:8e:bf:18:3c:a8:ca:a2:dc:b3:40:f9:
         fe:ce:a3:99:cf:e4:86:13:d9:d8:02:a8:7a:f9:d1:ce:73:c3:
         e8:74:4a:41:91:5f:44:db:da:ed:12:d0:f3:db:b2:29:ed:a7:
         6c:d1:3a:d6:8f:ab:17:28:65:a7:41:3b:53:7a:24:6b:03:cd:
         b4:67:58:5c:8f:5c:9f:77:13:7e:02:07:97:f4:85:8e:3c:ac:
         f9:f1:37:f9:64:87:8a:7f:47:9a:21:67:70:51:ae:01:4d:2c:
         4b:d7:d6:7c:4a:9f:4c:65:73:94:91:f7:1a:50:e8:07:78:72:
         35:6e:c1:ed:94:13:97:25:54:4e:48:09:52:10:38:54:52:ba:
         6e:b8:23:e0:08:16:ee:61:33:e9:68:68:49:17:5c:28:39:0b:
         86:7c:f6:49:07:1c:c4:88:90:8d:8c:e2:8d:61:fe:2c:1e:9a:
         74:46:08:00:a8:4c:98:03:5f:53:f0:36:4c:ce:3a:73:0a:56:
         ee:69:d4:bc:3e:04:ff:2f:7c:3e:cc:6d:85:98:5c:cb:ad:26:
         15:cd:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org