Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/4e6866b64c7ab3df9535d530979027d1eddcf3c0.roa
File:                     4e6866b64c7ab3df9535d530979027d1eddcf3c0.roa (raw, json)
Hash identifier:          Qna2Ov5Nzuo6HcpOSY85Wk+ZlonjDYXiQ6PIUoFya0k=
Subject key identifier:   76:2C:73:A4:C2:17:2F:A4:34:BF:D1:0E:BA:54:C3:3E:BD:4A:A4:21
Certificate issuer:       /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial:       275D63
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/4e6866b64c7ab3df9535d530979027d1eddcf3c0.roa
Signing time:             Tue 27 Feb 2024 01:19:48 +0000
ROA not before:           Tue 27 Feb 2024 01:19:48 +0000
ROA not after:            Fri 27 Feb 2026 01:19:48 +0000
asID:                     262168
IP address blocks:        200.115.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579811 (0x275d63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Validity
            Not Before: Feb 27 01:19:48 2024 GMT
            Not After : Feb 27 01:19:48 2026 GMT
        Subject: CN=4e6866b64c7ab3df9535d530979027d1eddcf3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:27:19:b3:07:0e:58:05:35:53:55:ee:3a:1c:
                    de:ca:84:ab:45:53:62:9d:84:b4:fe:52:e3:c5:14:
                    df:3e:7a:6b:93:9e:60:1b:50:58:c3:9c:d0:02:7f:
                    c7:ef:17:37:a2:05:76:17:59:23:62:bc:c0:9f:b1:
                    d3:6e:1f:06:92:2f:4f:3a:40:13:66:21:63:dd:ab:
                    89:f9:a3:1f:04:0a:bf:a6:52:d8:fb:62:15:64:c9:
                    09:0b:1f:30:6e:e5:8c:e5:e8:53:70:f0:4c:4a:69:
                    84:23:9a:37:4a:dc:72:33:fd:5c:2b:c2:86:8a:83:
                    72:28:dd:2d:dd:62:cb:7b:25:c7:14:fe:98:25:be:
                    5a:89:63:54:f6:89:ba:dd:03:21:dd:fc:61:a5:f3:
                    f1:47:45:7e:3e:3f:0a:4f:c6:7e:a3:31:11:a4:f8:
                    06:97:7c:8d:f3:43:09:ed:f4:a2:ca:6d:d9:75:fc:
                    d4:cf:e9:e2:ce:69:cb:a2:e0:f8:eb:34:d5:7b:1f:
                    6a:40:e8:57:e1:d1:bb:72:0e:da:3f:ec:d3:06:0a:
                    4e:4e:f9:74:37:9b:42:b3:e2:08:b7:4f:3a:43:1b:
                    9d:d2:c6:b4:64:cc:72:e1:97:8d:c5:68:97:d8:fc:
                    a5:42:c9:da:4f:48:f5:ec:00:71:c5:91:56:64:47:
                    75:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2C:73:A4:C2:17:2F:A4:34:BF:D1:0E:BA:54:C3:3E:BD:4A:A4:21
            X509v3 Authority Key Identifier:
                keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/4e6866b64c7ab3df9535d530979027d1eddcf3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:b1:a8:d2:6e:a4:8c:62:34:b8:bb:92:8c:c1:73:0b:ba:76:
         92:40:51:f4:65:59:d9:6e:c7:fe:29:41:78:cc:fe:4d:d4:c9:
         c1:81:d7:ea:a3:8d:1a:d2:79:a6:24:e6:34:e6:df:0d:8e:30:
         5a:fc:97:f3:5b:66:d3:ce:a7:b3:67:bb:59:41:00:01:2d:54:
         f5:04:e6:31:3e:67:d9:22:2a:f9:1c:8b:63:26:10:5b:bf:65:
         6b:29:c4:93:22:35:50:34:72:05:94:c9:84:93:49:c2:aa:24:
         3d:6f:b4:de:54:94:e3:2d:48:e9:ce:60:38:56:db:14:49:69:
         93:3a:af:61:50:ab:47:d5:b5:98:65:f6:73:b6:21:97:65:28:
         a2:c2:38:03:4e:d0:ce:35:3d:34:ba:8b:33:3b:d1:04:d8:f1:
         15:a9:3c:74:c1:dd:75:9b:17:92:10:aa:ca:71:85:42:d3:9f:
         4c:14:e0:34:f5:52:1a:51:2d:41:bf:c2:2d:d7:4c:49:ff:6d:
         b3:3b:fb:75:bf:78:ce:de:1a:19:85:74:5b:e9:4e:b4:fe:37:
         73:d7:4b:0f:b0:11:af:0e:c1:1e:3e:a6:43:5c:bd:31:9d:66:
         1f:8b:13:7e:fd:19:f1:1b:68:6f:60:44:94:16:f8:da:7a:ec:
         d9:20:a0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org