Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ebe69e4ff302d0c9c4621afbaf2d18cabb23ef66.roa
File:                     ebe69e4ff302d0c9c4621afbaf2d18cabb23ef66.roa (raw, json)
Hash identifier:          8IFzegGbruldZsVeEguMxyEcvwrcwSVF9wSc69//J9w=
Subject key identifier:   48:9D:F6:57:6B:CC:A4:18:DC:D0:08:BA:CB:32:67:49:6F:78:7A:52
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       21F30E
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ebe69e4ff302d0c9c4621afbaf2d18cabb23ef66.roa
Signing time:             Tue 25 Apr 2023 15:04:38 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     27783
IP address blocks:        200.46.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224910 (0x21f30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=ebe69e4ff302d0c9c4621afbaf2d18cabb23ef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:14:a3:c0:8e:d2:af:f2:b7:a1:5e:2f:a6:
                    eb:e2:06:77:df:d6:85:ae:b7:b0:0a:e7:48:04:88:
                    44:8d:6f:f1:d8:cf:a5:5c:af:f7:40:20:f2:30:7a:
                    c8:4a:98:42:f5:7d:d1:d7:46:b7:36:9a:9a:a6:30:
                    97:1b:e6:7c:18:43:e5:c6:a2:ec:93:fd:73:48:36:
                    61:98:17:e8:24:55:c4:84:2e:51:22:62:80:4f:2f:
                    9e:17:50:b6:e7:11:e0:ad:4b:cc:47:ea:0c:42:e4:
                    1d:99:1f:07:42:c7:7b:ea:4d:c8:ec:c7:0f:81:28:
                    85:58:ea:4c:b5:80:b8:a9:aa:04:fd:d1:1f:53:ac:
                    7a:70:60:8d:b4:86:68:62:e4:49:13:bd:64:b4:c9:
                    b0:8c:a2:f1:40:c0:0b:7b:d9:76:d1:cf:b6:83:9c:
                    2d:11:4f:ea:06:af:f6:17:14:ca:a5:24:39:db:ee:
                    54:27:d9:b3:22:c3:f4:4b:5c:90:28:64:ba:77:e4:
                    36:08:59:e5:99:73:ba:d6:bc:9a:c8:e4:0c:5e:4e:
                    02:8d:61:c5:af:71:09:7b:51:c6:a7:65:d5:21:00:
                    1b:a4:34:c4:fb:3b:c8:e2:e2:c5:c1:36:6e:52:75:
                    6d:80:57:97:4d:cc:23:9c:2b:2d:8f:f3:cc:2e:17:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9D:F6:57:6B:CC:A4:18:DC:D0:08:BA:CB:32:67:49:6F:78:7A:52
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ebe69e4ff302d0c9c4621afbaf2d18cabb23ef66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:e6:f6:a0:92:77:68:08:ae:be:9c:8c:0f:74:2f:f7:23:
         aa:d8:31:fb:85:81:2c:ec:1d:08:f3:3b:5d:7b:5e:64:92:ba:
         8b:55:55:b7:d8:8a:65:15:10:f9:ec:87:15:e0:34:61:81:f2:
         83:88:05:ab:58:2b:f4:6c:15:5a:54:95:e2:e6:d3:4e:7d:6a:
         74:c3:4d:2c:7c:9b:41:9a:c7:6d:a1:1e:a3:c8:60:c4:a7:03:
         58:ed:62:7c:67:22:59:d4:ab:0d:72:1e:0a:ab:1f:3f:07:b8:
         31:ed:6f:48:cd:6f:61:4d:0f:86:4f:7e:55:14:6a:89:9b:a4:
         3e:21:d4:cc:9a:fe:a4:8b:b8:22:ab:4a:87:67:90:f6:cc:cd:
         c5:a3:ce:8b:db:d6:c4:dd:6f:6e:23:6c:b4:2b:f8:9d:41:e9:
         1a:f2:de:19:3d:66:61:22:1b:17:e6:01:6d:86:b3:8c:e1:fd:
         a5:8b:26:bc:12:ee:bc:55:37:e6:57:40:ee:3b:8e:8e:35:3a:
         dc:e3:15:9c:c1:8c:75:fc:97:a0:11:ce:5c:0c:04:49:a0:3f:
         69:30:2b:2e:8d:d0:77:4e:0f:10:01:53:67:2a:cb:e9:de:27:
         58:8a:30:7f:30:a3:93:43:eb:bc:20:e7:a5:d3:77:d3:9a:49:
         fa:b8:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org