Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/d946b3e07d9c6bd9f70a2759ccd9ca09ccc24b39.roa
File:                     d946b3e07d9c6bd9f70a2759ccd9ca09ccc24b39.roa (raw, json)
Hash identifier:          aw8390ftccygIaOc84h5uFkzSYfsswX3nqnfTd5nXBE=
Subject key identifier:   74:A3:44:D1:63:71:56:85:B0:7E:C3:1E:F9:23:C0:55:95:6B:12:06
Certificate issuer:       /CN=c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f
Certificate serial:       1677B6
Authority key identifier: 78:C8:8F:7F:6E:E8:D6:93:1C:0D:C6:18:92:23:9B:F8:65:9B:B2:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/d946b3e07d9c6bd9f70a2759ccd9ca09ccc24b39.roa
Signing time:             Sat 09 Sep 2023 08:30:02 +0000
ROA not before:           Fri 08 Sep 2023 08:30:01 +0000
ROA not after:            Sun 07 Sep 2025 08:30:01 +0000
asID:                     271866
IP address blocks:        200.36.157.0/24 maxlen: 24
                          200.36.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472438 (0x1677b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f
        Validity
            Not Before: Sep  8 08:30:01 2023 GMT
            Not After : Sep  7 08:30:01 2025 GMT
        Subject: CN=d946b3e07d9c6bd9f70a2759ccd9ca09ccc24b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:49:16:78:fb:2f:8d:a9:b2:40:02:eb:96:c7:
                    bd:30:22:9e:20:80:66:5c:fa:cf:d3:9d:6e:29:79:
                    eb:c1:b4:f0:ab:32:cd:7f:92:2f:c2:df:10:b5:92:
                    be:79:a8:4a:79:29:af:39:d3:88:fa:11:d3:db:f9:
                    4b:67:90:94:1a:0d:15:61:d0:9d:f8:36:9c:06:b5:
                    96:8f:3f:6c:67:b4:6d:20:53:87:3f:34:f6:3b:dc:
                    d5:e8:fc:46:f3:41:6f:88:ec:a6:b0:13:a8:47:ce:
                    76:ac:fa:2f:82:72:34:b1:86:10:71:f8:57:ab:bc:
                    1d:0c:ae:80:30:1d:38:f6:ac:85:c8:00:36:ff:9d:
                    61:57:af:d1:79:1b:e9:32:f7:57:2f:24:03:e7:45:
                    4d:01:05:d2:8f:36:31:e7:d6:44:f0:71:35:d5:8a:
                    36:ad:06:7f:64:57:ac:bd:08:73:c7:a7:b3:8f:0c:
                    94:61:f7:51:59:f9:41:e4:3e:39:a3:a6:15:ad:7d:
                    b8:02:01:db:f5:38:e6:7a:28:f0:5a:6b:d4:34:63:
                    8f:59:cf:ab:f1:98:6d:af:25:40:30:05:77:60:c1:
                    05:36:7c:d0:7b:58:08:04:a0:af:4d:46:69:9d:2a:
                    be:f2:da:a6:3e:48:89:11:c6:52:e4:dc:41:81:97:
                    2b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:44:D1:63:71:56:85:B0:7E:C3:1E:F9:23:C0:55:95:6B:12:06
            X509v3 Authority Key Identifier:
                keyid:78:C8:8F:7F:6E:E8:D6:93:1C:0D:C6:18:92:23:9B:F8:65:9B:B2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/d946b3e07d9c6bd9f70a2759ccd9ca09ccc24b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:46:c2:55:c9:20:ea:bc:7e:ac:b2:b4:50:99:0d:b1:2d:
         59:8e:0e:ca:f9:fc:0d:da:eb:fa:03:83:ba:ed:7f:18:75:f9:
         1c:6b:89:12:78:5b:bf:16:b6:67:7b:19:93:f7:21:4e:91:82:
         30:ac:04:41:ce:fe:f9:65:f7:17:e7:f4:37:f0:29:b1:8b:0f:
         9e:b1:c3:aa:3f:52:fa:62:97:e0:3f:16:d0:26:de:da:73:a0:
         61:a6:e0:65:7b:18:86:40:e4:d1:d3:30:9a:49:cd:cf:60:f8:
         75:ff:af:b6:03:1d:fc:6c:d5:ed:67:bc:fe:37:fd:15:20:fb:
         2e:a0:e4:68:d4:ac:ca:69:93:bf:e0:e3:82:05:76:31:85:39:
         0d:21:41:56:42:14:0b:9b:63:23:c4:8b:ca:a1:1e:95:85:df:
         3a:8a:7a:1f:06:f8:bb:4a:27:d5:7c:ef:fd:fb:ed:7e:02:e3:
         90:48:e4:c3:a6:c0:cd:af:43:31:90:ea:42:c5:2b:1e:f8:07:
         9b:cf:98:44:6b:60:69:15:12:d9:30:9d:d4:d8:22:ca:41:e0:
         56:50:6d:be:1d:9d:63:4a:c4:6e:10:d4:ab:c6:c9:9d:62:c4:
         1d:08:d5:c5:41:dd:ef:cf:8b:4b:3f:86:50:df:c5:3a:41:cd:
         39:44:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org