Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/67ece40cb37d5aa48aaea7b5912b5d52427e8468.roa
File:                     67ece40cb37d5aa48aaea7b5912b5d52427e8468.roa (raw, json)
Hash identifier:          QilDqqv4zw8RDd0r3jk7jpApeBbntVJr0rKqHMGf+vM=
Subject key identifier:   8B:60:9F:B5:4B:DF:B1:5F:5A:9C:1D:5C:1F:14:5B:11:76:56:27:B7
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E38B6
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/67ece40cb37d5aa48aaea7b5912b5d52427e8468.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     27760
IP address blocks:        200.46.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932022 (0xe38b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=67ece40cb37d5aa48aaea7b5912b5d52427e8468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:c3:ef:8d:28:b0:9e:e8:e9:80:d2:c5:07:
                    89:e3:a2:d1:40:83:99:6c:6b:08:a7:fd:06:67:39:
                    ce:ce:9c:34:33:e4:64:72:23:83:d7:67:a1:16:30:
                    e5:44:08:62:00:0b:ae:32:02:00:0d:9d:30:d9:02:
                    74:d8:dd:04:60:6e:9d:7a:48:65:ee:72:d5:97:5d:
                    86:46:67:2c:00:3b:52:2b:0b:70:bb:44:c2:73:72:
                    e1:89:92:65:91:e9:97:38:84:90:a7:35:e4:6e:0d:
                    0d:ba:a2:bb:e4:02:8f:57:c8:92:07:84:79:7b:f4:
                    85:00:23:0a:2c:34:10:be:80:d4:b4:bf:40:f2:dd:
                    68:e5:c0:96:fb:27:b5:60:59:8b:22:d6:fe:6d:64:
                    3e:db:a5:47:91:2c:c8:a5:e1:3c:a7:9c:28:2f:24:
                    5d:70:98:26:2d:3d:de:26:2e:c7:e9:55:f6:a2:aa:
                    b0:29:7e:d2:02:0a:cd:21:97:17:1f:93:d9:4a:fe:
                    84:d2:9d:36:5e:34:0c:1d:da:dd:01:91:bb:b4:27:
                    d4:a7:7d:a6:4c:c1:ea:2e:1a:82:d5:ea:57:e6:7f:
                    eb:f3:7f:e1:0c:28:d1:5c:55:58:9c:fa:db:c7:17:
                    92:b8:e2:26:44:da:ca:7b:1d:cd:4f:2c:07:10:f8:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:9F:B5:4B:DF:B1:5F:5A:9C:1D:5C:1F:14:5B:11:76:56:27:B7
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/67ece40cb37d5aa48aaea7b5912b5d52427e8468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:12:93:b2:92:8e:e9:ab:4c:93:4a:c5:a0:17:5c:11:1e:f4:
         b2:b8:d4:b1:98:59:8b:b1:39:b0:a6:2a:66:be:e9:bb:5a:fe:
         0f:8b:de:db:8e:ef:c1:58:94:95:34:ff:45:68:7b:84:07:08:
         b3:81:c3:1d:53:9c:44:7a:a3:2e:db:72:92:3b:52:03:7f:1d:
         22:bd:61:e8:87:5a:eb:66:5c:41:fc:b4:7f:76:f4:4c:8d:78:
         53:1f:eb:c6:bc:50:55:91:37:59:58:32:82:d8:c4:a7:80:62:
         e8:af:bc:7a:5c:38:fd:e7:b7:ca:c1:ce:e5:b0:7e:f7:4e:f5:
         a0:42:3f:87:95:fb:37:b7:e7:a9:9f:4d:42:d1:07:c7:1c:33:
         22:be:04:19:00:6e:31:61:0d:f8:3f:43:a8:ab:9b:f7:50:a0:
         65:51:7f:51:9e:85:6d:f6:e9:3d:0c:c3:42:a0:68:48:e1:d1:
         ad:98:f4:b5:6f:ee:cd:e3:a7:c1:2f:de:84:01:f5:da:db:65:
         f5:df:5a:61:01:dd:b2:3a:b7:14:d3:0e:c7:ba:74:73:a2:12:
         31:74:01:cf:c5:55:f3:4e:78:0f:5b:fb:89:ac:d1:d1:0d:66:
         c4:07:9e:de:a7:91:77:9b:3e:64:e0:ae:45:61:60:90:0c:31:
         29:82:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org