Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0b9de48cd7e04d088b86f24cb81d07983d8cf861.roa
File:                     0b9de48cd7e04d088b86f24cb81d07983d8cf861.roa (raw, json)
Hash identifier:          kMTHADWlL1YE6H7e2BP1qSIaKV8nNCrmrXl/WM4e7j4=
Subject key identifier:   F6:F2:CB:68:09:E3:51:07:CC:9F:48:06:6B:5C:3D:85:75:A3:63:81
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       223E98
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0b9de48cd7e04d088b86f24cb81d07983d8cf861.roa
Signing time:             Tue 25 Apr 2023 15:05:33 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     27760
IP address blocks:        200.46.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244248 (0x223e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=0b9de48cd7e04d088b86f24cb81d07983d8cf861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:bb:ef:8d:43:fd:18:d6:b8:ef:93:ac:1e:
                    be:7c:48:ed:d6:65:1e:34:ae:79:44:22:0c:c2:84:
                    76:c0:c9:96:3d:b7:84:a6:df:cf:ea:ba:63:d5:07:
                    3e:24:02:06:a8:ed:55:6c:49:9c:d8:ae:a1:db:85:
                    e2:39:0f:25:06:e0:c5:b2:6e:81:e3:c4:b0:52:eb:
                    66:94:96:0e:3d:a6:51:04:01:de:5d:47:52:51:7a:
                    d9:c5:ce:4a:8f:45:d1:58:ae:54:52:9b:c2:17:6b:
                    3b:83:aa:a5:08:40:e8:dd:23:b1:ff:bc:61:ce:72:
                    ed:a4:66:d6:d5:42:6a:ba:d8:93:7f:4a:ad:43:6a:
                    90:18:06:bf:a4:3f:dd:5c:dd:99:b6:73:57:ff:e3:
                    b9:97:6a:13:e2:56:43:8e:95:93:44:86:51:37:7e:
                    8d:ad:bd:f6:9b:a4:36:93:a4:7a:3d:cd:25:75:de:
                    46:11:89:20:b5:58:64:fc:3b:66:34:ac:9b:37:01:
                    f7:f2:d9:72:73:55:92:c6:88:c5:92:04:19:84:71:
                    09:fd:28:40:29:2c:64:7f:1e:61:00:fc:99:f5:44:
                    9b:26:45:47:26:07:4c:d4:5e:05:51:23:05:b0:8b:
                    72:3b:b4:29:a4:a4:72:85:fd:54:6b:91:5b:a9:79:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:CB:68:09:E3:51:07:CC:9F:48:06:6B:5C:3D:85:75:A3:63:81
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0b9de48cd7e04d088b86f24cb81d07983d8cf861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:da:5d:9c:7f:ac:a9:ed:ee:02:57:93:9a:62:8b:1e:c8:
         8c:a2:3b:85:3f:92:2b:fb:9d:bd:b1:78:c8:9a:a0:02:76:3a:
         d5:fe:03:a3:75:10:32:1f:78:0d:60:12:8e:92:cc:07:76:dc:
         db:3b:78:7c:75:50:0b:df:a9:cf:86:e3:b6:57:2b:80:0b:7d:
         72:f4:eb:97:00:4c:e8:6a:85:5d:a6:54:9d:72:f1:4e:8d:18:
         37:6d:98:2c:1c:6e:38:ca:f8:6b:ed:f8:22:23:46:7b:7e:be:
         40:5f:89:8f:f2:dd:69:8f:f5:9e:62:c2:7a:fd:a0:fc:fa:89:
         e7:c4:a1:8d:74:f5:14:32:ca:90:dc:1d:01:3f:b8:23:15:5a:
         68:e5:b7:39:18:01:ba:a8:fc:43:74:69:96:6b:00:71:f7:90:
         b0:08:28:2d:fc:4b:e9:9f:52:c7:8b:0f:c3:95:0e:f4:df:72:
         d6:93:77:5a:ec:e5:04:f1:3d:e5:50:c6:d6:ba:91:c9:4d:0d:
         31:df:6b:b6:ef:df:58:ea:73:31:82:d5:25:58:11:f5:a7:df:
         4d:95:68:02:6c:1e:ac:34:6f:c3:11:fa:85:63:a1:2d:d0:5c:
         10:0c:c5:99:e2:33:3d:09:c1:d3:6e:21:48:60:fb:af:b3:8e:
         21:74:99:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org