Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/62d037ff810cb40f78f585e62799b6a63e3bd2f8.roa
File:                     62d037ff810cb40f78f585e62799b6a63e3bd2f8.roa (raw, json)
Hash identifier:          cTSz8j4LZybORRFPPlHfDAdcOJKgBaSFEhm35WmfaNg=
Subject key identifier:   61:DD:F1:2F:87:B5:07:B5:6A:18:FF:E1:1E:B3:57:95:CE:37:47:1E
Certificate issuer:       /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial:       090A
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/62d037ff810cb40f78f585e62799b6a63e3bd2f8.roa
Signing time:             Tue 01 Jun 2021 13:36:38 +0000
ROA not before:           Tue 01 Jun 2021 03:00:00 +0000
ROA not after:            Thu 01 Jun 2023 03:00:00 +0000
asID:                     27989
IP address blocks:        200.1.175.0/24 maxlen: 24
                          201.221.124.0/24 maxlen: 24
                          201.221.125.0/24 maxlen: 24
                          179.0.27.0/24 maxlen: 24
                          201.221.124.0/23 maxlen: 23
                          2801:15:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
        Validity
            Not Before: Jun  1 03:00:00 2021 GMT
            Not After : Jun  1 03:00:00 2023 GMT
        Subject: CN=62d037ff810cb40f78f585e62799b6a63e3bd2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:ee:47:38:03:08:d1:d3:f7:f9:0f:c7:24:
                    6a:0a:ee:b2:6f:84:6f:bc:67:ed:c1:77:0e:ee:2b:
                    97:fe:42:da:e6:4b:ea:ed:a2:a1:08:68:b2:42:38:
                    be:f9:39:8b:4a:01:a3:dc:65:80:f8:2c:e4:0d:0f:
                    42:09:8f:a5:0b:66:d5:fd:70:f9:09:43:d3:d2:88:
                    fa:69:53:0c:b0:67:7b:69:22:55:68:bf:e1:99:cf:
                    2b:b5:44:4b:80:1a:eb:4d:31:82:cb:e1:ac:97:b0:
                    5d:1b:fa:fa:96:fd:05:fb:ce:7b:0f:f0:75:32:7c:
                    80:15:47:46:04:64:7c:d1:5a:8f:8e:82:5b:02:e7:
                    5c:7e:36:a6:9e:5a:b6:a7:d5:4d:48:77:f4:e8:93:
                    08:1d:da:87:cc:f3:43:52:5c:b0:6a:4c:77:b4:f8:
                    05:31:fa:3c:e7:75:9f:1a:1d:53:a4:92:08:7b:d7:
                    16:0e:a8:7a:08:77:20:8f:a7:b2:36:26:4e:cd:b8:
                    2f:22:4d:74:db:47:f2:46:49:7a:97:b4:09:d9:ed:
                    26:03:41:87:18:81:a4:ee:9e:43:ae:8c:3f:f8:81:
                    10:48:bb:ac:ff:b2:a9:e5:c9:c9:1a:66:70:f7:f0:
                    5e:1e:e9:e1:9b:2d:b7:f4:1c:63:75:d7:96:cf:11:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DD:F1:2F:87:B5:07:B5:6A:18:FF:E1:1E:B3:57:95:CE:37:47:1E
            X509v3 Authority Key Identifier:
                keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/62d037ff810cb40f78f585e62799b6a63e3bd2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.27.0/24
                  200.1.175.0/24
                  201.221.124.0/23
                IPv6:
                  2801:15:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:02:aa:ef:b8:a7:3d:7a:ce:d4:ab:6c:c4:45:52:b5:a7:77:
         5a:06:22:99:c5:9a:76:bc:55:ce:c5:aa:8e:f6:37:94:bb:4a:
         25:3f:d0:cf:67:0e:7c:d0:d6:fa:3b:5c:b0:d7:f0:f4:3b:65:
         e1:08:6f:91:41:7f:5a:26:74:2f:d2:cc:1e:c3:a9:9e:3d:4d:
         5f:28:a1:32:c0:bf:0f:b6:27:a6:6f:60:a1:4c:88:3c:87:29:
         07:33:1e:2d:5d:be:67:5f:73:26:25:07:41:1e:8d:2a:db:ab:
         dd:f5:ad:cb:52:b0:35:1e:1b:db:50:6b:ed:20:e9:6d:d2:3d:
         52:62:31:7f:9e:d0:d3:46:4e:c2:5d:04:7d:91:fe:ac:37:2d:
         6f:78:c8:c3:19:5f:b7:ca:f6:dd:e5:da:4b:8f:06:f1:6e:a0:
         64:e0:07:4f:1e:57:cd:a6:eb:81:20:7b:69:1b:de:09:c5:bd:
         31:9b:59:12:63:ea:b9:cd:f0:16:ff:b7:05:0f:3b:18:e5:a0:
         ad:ee:28:61:26:97:25:e5:2b:b9:1b:1a:2a:09:73:49:0c:76:
         dd:f2:4b:6e:83:41:21:27:5d:eb:ed:67:44:32:d7:62:29:3f:
         c2:17:51:bd:68:8c:d9:21:21:e7:be:c4:2a:03:c6:f0:77:dc:
         14:40:a7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org