Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/1b9b073ec4ff032f90eb4c1afcfbdbf8fb9d66a9.roa
File:                     1b9b073ec4ff032f90eb4c1afcfbdbf8fb9d66a9.roa (raw, json)
Hash identifier:          lj8G9mwLBD1HySHAyoAtdJMwstcsC58whQxy9PBi8Io=
Subject key identifier:   EE:95:65:6F:16:A8:93:87:BD:4B:57:F8:52:1A:22:CD:6E:EA:BA:76
Certificate issuer:       /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial:       12D92C
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/1b9b073ec4ff032f90eb4c1afcfbdbf8fb9d66a9.roa
Signing time:             Thu 22 Jun 2023 19:16:20 +0000
ROA not before:           Wed 21 Jun 2023 19:16:20 +0000
ROA not after:            Sun 22 Jun 2025 19:16:20 +0000
asID:                     198949
IP address blocks:        200.1.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235244 (0x12d92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
        Validity
            Not Before: Jun 21 19:16:20 2023 GMT
            Not After : Jun 22 19:16:20 2025 GMT
        Subject: CN=1b9b073ec4ff032f90eb4c1afcfbdbf8fb9d66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:0c:de:95:1c:0c:db:9e:f4:a1:68:3f:79:
                    31:f3:48:78:86:05:1f:97:cc:ff:ea:6a:01:28:b5:
                    03:54:41:18:db:19:5e:45:93:8a:6d:d8:09:c6:2c:
                    4d:de:97:b4:2d:d3:05:96:ef:5b:4e:3e:ce:1f:e5:
                    31:8a:35:83:93:87:e9:53:86:f2:ef:3f:f5:6d:68:
                    1a:d9:ce:29:d7:e9:62:bd:0b:9a:a7:4a:54:a9:cf:
                    ec:b8:e9:d7:99:61:76:8e:9c:11:46:00:bd:14:4e:
                    f0:03:3b:1c:ab:66:6b:83:72:7f:33:18:72:8e:fe:
                    fe:f4:f4:2f:1e:c2:fa:3e:f7:43:ef:93:93:a8:a4:
                    d5:a4:5f:b7:9a:e2:95:e8:8e:10:d5:b7:1d:30:32:
                    c5:ae:fb:6f:dd:f6:6a:cb:71:c1:18:4f:2e:3b:42:
                    63:2b:a4:bd:4f:a4:a0:af:96:29:7d:50:b1:b4:97:
                    9f:69:f5:cb:db:07:73:d0:8f:67:7a:95:3d:39:8b:
                    66:49:64:99:39:9c:cf:f8:04:7b:c7:40:2b:02:dd:
                    ba:25:b1:92:ed:c0:da:ad:68:a2:81:ed:b1:15:7f:
                    b6:ff:72:39:31:50:1d:27:5f:41:64:4d:f5:14:9c:
                    26:e1:c6:a6:a3:9b:85:17:b8:ac:e3:b2:fc:69:d8:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:95:65:6F:16:A8:93:87:BD:4B:57:F8:52:1A:22:CD:6E:EA:BA:76
            X509v3 Authority Key Identifier:
                keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/1b9b073ec4ff032f90eb4c1afcfbdbf8fb9d66a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:92:a6:39:4f:a0:39:e2:e5:9f:4e:9f:ab:2f:1e:f2:7b:cc:
         32:f3:18:a6:cd:e9:33:0f:0f:18:38:b0:92:91:18:74:05:15:
         aa:76:4e:9c:95:9b:88:4c:99:f0:af:17:2d:c2:c9:92:ec:52:
         ef:a5:78:ae:52:b2:5d:19:52:b0:28:52:10:30:f4:37:fe:0b:
         96:f2:c7:ce:d5:35:ad:92:53:5b:1e:bc:8c:91:74:84:80:1e:
         38:e0:ad:e1:9b:0b:f8:6d:ef:4a:2f:3d:0a:2e:b1:4d:64:70:
         89:a5:af:e9:5a:ca:14:9a:a8:3a:b2:20:d1:ee:30:ea:59:b2:
         15:0b:4f:e5:fa:89:3f:3e:ac:7b:4f:22:a8:18:de:7d:e0:80:
         18:98:4c:8f:ab:4f:0a:1c:49:47:fa:e5:f9:1f:65:19:70:65:
         43:aa:4a:de:c9:41:38:ff:aa:4b:de:8c:8f:b8:69:ad:93:17:
         27:9c:9a:69:7c:03:d0:ab:6d:36:98:12:8c:e1:50:a5:fd:a7:
         4d:a8:86:d9:5b:aa:43:96:93:8e:64:c2:5f:11:57:e7:a4:5c:
         8b:6d:84:ac:0a:5f:c2:11:fe:2b:93:3a:99:5a:eb:29:8e:ed:
         1f:0d:a2:f3:2a:a4:c9:03:f5:ac:d5:7b:6d:86:0f:bb:1a:48:
         9d:70:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org