Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/917604db5432f7d500d8425536cf50623a21d78b.roa
File:                     917604db5432f7d500d8425536cf50623a21d78b.roa (raw, json)
Hash identifier:          XbL/oFvmyccLKoA911u+9yBFdKcBpAp0irCLUno6hto=
Subject key identifier:   4F:27:01:D9:67:EB:6B:ED:47:45:BD:C7:81:B1:33:07:63:61:B5:21
Certificate issuer:       /CN=24b432c17b9178d531eefe49147c81e1af1b6784
Certificate serial:       24F708
Authority key identifier: 8C:D5:D1:14:8A:7F:1A:D0:BC:2C:81:F4:8D:DC:41:B4:D8:93:F9:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b432c17b9178d531eefe49147c81e1af1b6784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/917604db5432f7d500d8425536cf50623a21d78b.roa
Signing time:             Fri 05 Jan 2024 17:10:52 +0000
ROA not before:           Fri 05 Jan 2024 17:10:52 +0000
ROA not after:            Mon 05 Jan 2026 17:10:52 +0000
asID:                     27947
IP address blocks:        200.9.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2422536 (0x24f708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b432c17b9178d531eefe49147c81e1af1b6784
        Validity
            Not Before: Jan  5 17:10:52 2024 GMT
            Not After : Jan  5 17:10:52 2026 GMT
        Subject: CN=917604db5432f7d500d8425536cf50623a21d78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:ed:7d:a7:63:0e:c3:44:11:b5:2e:3d:b3:
                    ad:fd:40:19:86:72:53:db:b9:a4:25:b6:02:e9:fa:
                    63:8d:49:33:66:7e:ce:e7:79:0a:f7:f8:28:12:ed:
                    a4:87:49:25:69:ee:20:12:0a:b1:66:c8:aa:24:ae:
                    69:d4:48:d9:c1:c4:25:52:c8:9b:04:81:6a:34:75:
                    e3:eb:90:9f:e8:64:87:0d:8a:dc:16:38:5d:c9:14:
                    c8:68:87:b9:bf:b9:d8:50:45:2e:a5:dc:ab:3d:12:
                    dd:5b:10:68:0e:80:37:cc:e4:20:a9:fa:2a:65:d9:
                    76:8b:0e:af:4b:fe:2e:a0:be:63:9c:40:41:77:76:
                    43:c3:93:91:b9:25:cb:9c:51:7f:23:02:13:6d:e8:
                    42:07:ff:6c:42:1a:09:db:5e:be:c2:9f:be:bf:0d:
                    54:58:39:78:2d:cb:08:0c:10:5a:e9:c8:7e:79:38:
                    fc:14:a1:8d:b5:55:6c:c6:d4:78:2a:56:65:00:6a:
                    44:2a:df:e4:d7:18:85:87:05:cf:ad:2f:dd:d7:eb:
                    f7:82:6a:8b:a2:97:d7:e7:de:11:45:9e:cc:eb:bc:
                    b3:41:54:22:de:a4:ab:7f:59:79:b5:c0:8c:52:54:
                    c4:e2:01:16:58:35:8c:b2:4e:67:2d:61:0d:0c:e0:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:01:D9:67:EB:6B:ED:47:45:BD:C7:81:B1:33:07:63:61:B5:21
            X509v3 Authority Key Identifier:
                keyid:8C:D5:D1:14:8A:7F:1A:D0:BC:2C:81:F4:8D:DC:41:B4:D8:93:F9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b432c17b9178d531eefe49147c81e1af1b6784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/917604db5432f7d500d8425536cf50623a21d78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/24b432c17b9178d531eefe49147c81e1af1b6784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:db:ed:a4:91:49:7c:fa:5e:71:1f:bc:70:44:e2:a6:bd:e4:
         b7:2a:0f:34:37:af:22:8d:af:09:2e:fa:d3:7c:4e:3e:b5:ab:
         fb:0f:52:41:d7:ab:34:07:79:24:fd:24:a1:cb:80:89:f2:9f:
         b5:f0:6d:2e:77:9f:85:db:1d:b9:d4:22:83:47:0e:66:ab:4e:
         1b:e9:38:e1:6d:23:2c:05:8a:e9:7f:41:61:9a:70:49:32:7a:
         c3:83:88:45:fe:25:d5:2d:73:50:3b:96:5a:d5:14:5b:c9:8e:
         34:ac:97:a4:27:ee:b3:ae:d8:e8:8f:e3:0f:4a:76:96:e5:db:
         b5:4a:f2:0e:84:6e:eb:05:68:ad:b2:82:7d:34:90:02:ea:c9:
         ff:50:55:90:40:73:85:77:2d:4d:98:20:10:24:f3:1c:9a:d1:
         c6:e7:90:30:82:d4:c4:23:3b:5a:a7:ec:32:6b:fe:23:5f:74:
         74:76:f9:84:35:be:70:e8:ba:15:81:33:91:34:e5:1c:31:90:
         23:7a:19:f4:5f:d0:c0:c3:80:73:8a:94:0a:f2:a0:e2:71:49:
         4c:c3:d7:20:f9:1e:e9:2d:73:c4:93:b4:48:3f:55:84:0b:47:
         c9:d1:55:bc:4b:f4:c8:61:f8:6d:9a:71:63:08:7c:7a:ab:0e:
         f9:c0:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org