Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/71daf0cca7d00d37e0df75178fb02474e6c7a328.roa
File:                     71daf0cca7d00d37e0df75178fb02474e6c7a328.roa (raw, json)
Hash identifier:          EQI84hcoSl3tdrxEEACHTOIhOVETyO2XyyHIehPTGug=
Subject key identifier:   5A:3E:31:96:9E:66:B6:70:68:E6:54:C4:63:6F:32:D3:E4:09:30:F5
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       2255D5
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/71daf0cca7d00d37e0df75178fb02474e6c7a328.roa
Signing time:             Tue 25 Apr 2023 15:05:50 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     22010
IP address blocks:        200.46.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250197 (0x2255d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=71daf0cca7d00d37e0df75178fb02474e6c7a328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:2e:62:84:32:af:50:12:7d:c7:7f:1f:99:
                    bb:e1:e0:15:f6:e4:26:31:4c:f0:1f:50:f8:c6:35:
                    e1:05:38:37:e7:b9:a1:dc:1a:48:10:a6:d0:cb:4c:
                    fd:c4:b9:73:32:cd:80:f9:7c:69:45:d9:c9:55:65:
                    1f:8e:87:1e:a8:f7:f8:ba:ba:c5:0a:dd:9e:f8:bf:
                    bd:74:4a:0e:29:3f:0e:52:e7:af:6b:90:3b:d7:68:
                    74:e1:80:ea:c8:d6:1b:be:3a:ae:f9:15:b0:a8:ed:
                    c3:55:b9:39:30:5b:e8:b3:38:91:4e:87:16:42:02:
                    f6:90:47:9a:ca:d7:ca:e7:9f:bf:ba:16:e8:84:d6:
                    22:7e:30:68:29:5c:fd:66:7a:6b:11:84:79:08:e2:
                    67:dc:d5:cc:f3:30:70:8b:0a:94:e3:ac:1d:be:80:
                    ff:37:48:62:6c:bc:1f:d8:d5:81:60:ae:23:60:b3:
                    46:73:32:cd:4e:ac:c7:0a:bf:96:cb:72:7e:ca:bd:
                    31:9d:6e:3d:3a:a0:6d:fe:78:b1:d7:e1:9c:e1:98:
                    a7:91:26:fd:de:75:6d:4c:9b:cf:1e:8d:b7:2b:9f:
                    5e:4b:ac:e2:2b:c1:40:ba:b3:8c:22:73:78:4a:48:
                    de:01:d6:e2:90:f1:ae:f5:00:6a:db:d3:17:2e:33:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3E:31:96:9E:66:B6:70:68:E6:54:C4:63:6F:32:D3:E4:09:30:F5
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/71daf0cca7d00d37e0df75178fb02474e6c7a328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:17:45:a0:fa:ed:ed:2a:23:e0:6f:d8:77:6f:7d:18:98:60:
         bc:39:ee:3c:80:22:15:a1:7e:f4:cc:c0:1f:55:b6:24:51:f4:
         bd:47:37:6c:a0:ea:2a:4e:38:e7:e8:00:06:4f:eb:b8:6c:3d:
         eb:00:64:e2:9a:9a:a8:ca:a0:e5:39:39:84:5e:54:35:18:2f:
         d7:53:ec:e4:6c:2e:91:b4:c0:86:52:ec:e7:e9:56:f3:dc:a6:
         4b:94:d2:3f:3e:24:18:52:09:e8:b5:bd:74:c9:19:4b:9b:ec:
         d6:eb:d8:3f:e1:d2:ab:f7:d5:4f:6a:6b:db:71:ad:11:14:21:
         95:2a:65:c3:dd:61:d5:f2:d7:68:90:13:86:24:e9:ea:a4:bd:
         d7:9b:89:16:e6:ff:99:97:c0:7e:f0:8a:c2:3a:07:4f:d0:27:
         5f:5c:86:a1:1a:b2:38:a2:93:fc:0c:12:17:ba:fc:4e:19:9f:
         29:31:a3:4a:e0:2b:43:1c:48:d5:52:da:81:39:ef:0a:a9:1a:
         7b:0f:f0:14:61:72:aa:42:be:b7:58:89:95:86:b7:80:d4:25:
         78:52:57:63:dc:da:c4:7d:f5:30:ec:b4:52:f0:ca:d5:23:28:
         b8:97:11:de:7a:2e:20:da:8a:24:fd:31:96:a3:92:1e:cc:f3:
         45:78:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org