Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/9b3ba6ef217574bc728d24e6bc47caad8a8af807.roa
File:                     9b3ba6ef217574bc728d24e6bc47caad8a8af807.roa (raw, json)
Hash identifier:          RWXOBn+pUYXOLieVEi9j0bZZK9KWqHsBKrmj+9vKYoA=
Subject key identifier:   7E:C9:99:DB:91:34:AE:90:38:CC:B2:77:19:35:3F:C8:A0:CD:13:63
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       22056F
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/9b3ba6ef217574bc728d24e6bc47caad8a8af807.roa
Signing time:             Tue 25 Apr 2023 15:04:46 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     28061
IP address blocks:        200.46.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229615 (0x22056f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=9b3ba6ef217574bc728d24e6bc47caad8a8af807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:9a:04:22:3f:ac:63:3d:d6:b4:93:b3:b4:
                    c3:07:f3:f6:59:1d:bc:aa:c4:b6:a0:e3:2e:52:87:
                    3d:91:46:a7:74:6d:c5:3f:d8:40:84:9d:9b:21:08:
                    50:bb:ff:59:62:18:a5:84:63:56:78:96:85:02:3c:
                    45:47:f9:44:95:1a:f3:8c:44:b0:50:d4:61:a5:55:
                    d4:94:10:5a:9a:63:dd:0b:35:39:4a:69:2e:9c:7c:
                    c7:75:72:03:38:5d:a1:b9:10:67:52:d2:c8:69:d1:
                    65:4f:26:0a:af:f6:39:11:c1:8e:e4:72:07:93:bf:
                    da:8f:66:31:f8:5d:62:72:70:a1:1a:f5:a3:0a:3e:
                    59:34:87:c6:ec:2d:71:81:70:ed:05:c4:0f:34:7a:
                    d9:d6:62:ab:d1:1c:3d:24:cd:8e:d1:80:35:8c:28:
                    35:c7:d6:ad:fa:c2:b7:a8:c2:d7:df:f3:d2:c6:0f:
                    32:03:15:2c:4e:86:ab:0c:6f:57:3e:41:af:c3:91:
                    40:b5:bd:6c:7d:eb:26:c0:26:e1:dd:48:b3:42:51:
                    cb:43:07:18:d7:5e:89:7c:4e:52:cc:1f:09:d0:0b:
                    9f:a2:77:07:07:e9:5e:f5:78:c8:67:51:2b:70:97:
                    cf:42:91:91:43:4c:d4:96:70:6e:91:9c:c0:23:f2:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C9:99:DB:91:34:AE:90:38:CC:B2:77:19:35:3F:C8:A0:CD:13:63
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/9b3ba6ef217574bc728d24e6bc47caad8a8af807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:59:81:74:ce:70:0c:9e:c9:98:0d:a6:3e:e6:a4:3d:84:
         2a:f6:fd:71:53:6f:b1:28:81:f9:43:7b:0c:f0:0f:ff:4b:fe:
         5c:c0:36:f7:f6:a5:3b:3d:b6:4c:33:17:39:99:f9:28:b3:9c:
         fd:0a:ea:d6:a1:4a:ee:59:40:4f:da:58:c5:52:10:a7:a4:c6:
         e1:df:6a:a5:ca:c4:c5:e8:63:d3:f6:bc:43:d0:44:03:ee:11:
         63:4e:8e:b7:23:e4:b2:2d:7a:1e:27:56:ad:b1:a7:51:da:1a:
         37:8d:3e:43:43:94:8f:32:d4:bc:af:52:4d:f9:d4:b7:10:8d:
         e1:46:1a:65:8c:b2:eb:12:61:57:8f:c4:30:34:e7:ad:86:70:
         9c:7a:4e:51:14:af:26:21:bb:37:97:25:99:e0:ae:a2:37:a4:
         c6:d6:97:46:11:15:55:45:93:ee:d5:64:86:04:a8:7a:e9:73:
         ab:30:07:00:c8:96:25:25:8f:da:2b:76:72:73:26:07:1a:ba:
         48:f3:5f:0b:5d:53:2d:d5:c0:60:59:1d:8c:60:49:f0:1b:36:
         e0:01:06:fa:7b:ae:c3:76:44:2b:fc:49:26:14:3a:62:78:e6:
         b4:08:a7:28:80:1b:19:3d:20:7c:a4:1d:dc:01:33:46:69:83:
         c1:1b:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org