Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/2bb9cc7d5f743a0d6557ea01235164bea67f25cb.roa
File:                     2bb9cc7d5f743a0d6557ea01235164bea67f25cb.roa (raw, json)
Hash identifier:          D/ifsUxjF2ji/SX8SYsJjJ9JIR5o8KCL1aJoogYxnaw=
Subject key identifier:   42:83:E0:77:15:36:C2:AE:27:32:64:66:D8:79:2F:B0:4A:B4:99:AF
Certificate issuer:       /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial:       12CACA
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/2bb9cc7d5f743a0d6557ea01235164bea67f25cb.roa
Signing time:             Thu 22 Jun 2023 19:12:30 +0000
ROA not before:           Wed 21 Jun 2023 19:12:29 +0000
ROA not after:            Sun 22 Jun 2025 19:12:29 +0000
asID:                     202
IP address blocks:        200.1.175.0/24 maxlen: 24
                          201.221.124.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231562 (0x12caca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
        Validity
            Not Before: Jun 21 19:12:29 2023 GMT
            Not After : Jun 22 19:12:29 2025 GMT
        Subject: CN=2bb9cc7d5f743a0d6557ea01235164bea67f25cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:89:f6:48:b9:9b:c8:84:ee:46:78:f1:c5:
                    46:24:62:e6:46:6b:fa:7f:2b:ed:f8:67:12:eb:c4:
                    28:25:32:bc:c7:51:87:34:7c:6b:a5:48:7e:2c:94:
                    d1:ae:9c:3c:1b:1e:a4:b8:09:ae:8e:37:25:da:a0:
                    16:a3:1e:d2:81:dd:0b:65:b9:ea:38:5d:e4:ea:7d:
                    39:4b:33:aa:7c:ba:a7:2b:7a:ef:cd:32:f6:43:c8:
                    bf:e3:29:ac:de:4b:96:11:92:36:8c:52:74:e9:33:
                    a3:99:6f:0f:cc:0b:bd:5e:45:97:92:31:22:c1:65:
                    c7:66:55:3e:cf:57:cf:cb:2f:67:31:85:a0:3d:32:
                    1d:71:6f:b2:cd:2f:5e:c4:46:f5:01:d2:ea:e9:d8:
                    d2:9c:49:ff:72:1f:c0:03:6e:1d:f4:5f:db:15:b1:
                    3b:66:8a:0a:02:2a:d6:85:f5:66:2d:00:e3:87:4d:
                    49:4a:0e:a9:14:58:ea:a6:d8:55:df:df:34:b2:c1:
                    0d:54:c2:ec:e4:1a:64:47:19:54:68:c5:02:57:f2:
                    c4:a8:6d:52:97:c5:6a:a7:92:d8:27:d5:35:75:e8:
                    8f:75:04:bf:b1:63:e5:93:33:2e:b0:5d:79:e7:35:
                    c7:e8:02:be:18:08:6c:13:9a:0d:16:50:4b:79:c9:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:83:E0:77:15:36:C2:AE:27:32:64:66:D8:79:2F:B0:4A:B4:99:AF
            X509v3 Authority Key Identifier:
                keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/2bb9cc7d5f743a0d6557ea01235164bea67f25cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24
                  201.221.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:7e:df:17:63:6c:fb:91:a2:fe:ed:e1:e7:fc:16:d6:31:68:
         6b:a3:5a:43:cf:7c:c9:f7:a3:69:1b:c8:f4:0a:95:71:c2:44:
         79:0a:5b:1e:72:29:bf:3d:c9:5a:61:58:1f:d2:2c:12:60:b5:
         1d:e2:29:c6:b5:17:e8:7f:49:4d:8a:09:1f:d1:6e:31:35:8e:
         1f:1e:b6:a9:87:3a:d3:04:5a:d2:2d:ba:15:f5:0c:01:7d:94:
         e6:87:71:98:fc:55:72:d9:20:c0:33:06:b3:9e:f7:de:59:13:
         67:88:33:5c:51:db:12:20:1c:24:37:7a:29:af:46:a1:6a:c1:
         35:a4:f9:14:0e:5f:9b:d4:ad:64:da:75:80:34:e3:81:9f:8b:
         c8:59:77:ae:dd:2a:b3:3c:e7:50:cb:44:23:74:2b:c2:5a:20:
         71:90:17:c5:05:48:41:0b:40:80:5a:2a:c4:43:94:d7:d7:af:
         d8:5e:7d:e0:0a:63:7e:d2:13:2d:cc:5d:09:1a:d1:f6:89:3b:
         2c:82:1c:d2:f0:c1:4d:9b:40:4f:5b:4d:6b:c4:1d:a6:0e:58:
         23:c6:a4:b2:25:68:2a:cf:2c:1f:c0:81:a2:57:47:d0:7d:98:
         11:e3:f0:47:f5:3e:a9:a7:59:07:0b:70:fc:9c:b2:27:ac:90:
         3e:0c:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org