Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/e748ee5c8f8fb88dbeb24abc4699f08b75cafcb9.roa
File:                     e748ee5c8f8fb88dbeb24abc4699f08b75cafcb9.roa (raw, json)
Hash identifier:          /VQ8XC7Yl8V4j2vyWYaDlrPNp/bvaG5WhY2hUss+dyw=
Subject key identifier:   1D:A2:A7:F5:00:DC:8A:72:37:19:C2:12:AB:9D:C3:E9:38:CA:15:3A
Certificate issuer:       /CN=fcfdf1d6c55d4bb157af7c46678c6b0722dd3793
Certificate serial:       2F02
Authority key identifier: 51:C7:2C:1D:9D:BC:43:92:CB:27:02:1A:88:CD:11:98:70:EA:25:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/e748ee5c8f8fb88dbeb24abc4699f08b75cafcb9.roa
Signing time:             Tue 11 Apr 2023 20:57:36 +0000
ROA not before:           Sat 08 Apr 2023 20:33:20 +0000
ROA not after:            Thu 10 Apr 2025 20:33:20 +0000
asID:                     3496
IP address blocks:        200.1.169.0/24 maxlen: 32
                          200.1.171.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12034 (0x2f02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfdf1d6c55d4bb157af7c46678c6b0722dd3793
        Validity
            Not Before: Apr  8 20:33:20 2023 GMT
            Not After : Apr 10 20:33:20 2025 GMT
        Subject: CN=e748ee5c8f8fb88dbeb24abc4699f08b75cafcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:05:65:a3:11:e2:dc:3b:9d:61:09:d8:8c:
                    03:89:31:ed:90:bd:1b:e3:cd:b5:e5:0b:49:98:a4:
                    3f:dc:4c:32:e8:2f:20:53:e9:92:a6:b6:a7:71:d6:
                    42:53:c3:58:d6:f7:f3:36:e5:4c:2d:70:98:ae:11:
                    58:9f:b9:e0:94:e2:a8:7a:36:06:6c:d8:ab:d0:26:
                    a3:81:94:30:df:e3:21:2b:dd:d2:d1:f2:24:8e:bd:
                    b5:36:cb:0d:ac:23:e0:19:99:4a:2c:a3:61:c6:38:
                    f2:03:4b:74:f0:9c:ea:1d:46:30:88:4c:ac:c5:7b:
                    66:34:cf:ad:a8:c6:c2:85:2b:00:3f:d0:c1:4a:13:
                    20:e1:c9:b7:03:44:1e:21:02:26:58:88:e3:57:46:
                    18:cb:be:14:cd:48:f1:28:26:e2:f0:08:b8:ce:a5:
                    ba:10:4f:0a:5e:1b:6f:8f:10:d3:da:65:88:48:7d:
                    35:07:ff:6e:a3:48:40:9c:72:dd:c2:c8:c6:f0:32:
                    c9:39:d4:c6:ba:38:60:61:a7:8b:ac:91:17:0d:99:
                    43:a8:36:62:ec:ae:f0:2b:93:ec:28:8c:86:65:5d:
                    85:bd:b7:07:46:8c:bc:79:6d:a1:43:04:ae:a2:7c:
                    54:d4:3e:12:11:fa:f5:dc:30:ef:93:9f:b0:6d:68:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A2:A7:F5:00:DC:8A:72:37:19:C2:12:AB:9D:C3:E9:38:CA:15:3A
            X509v3 Authority Key Identifier:
                keyid:51:C7:2C:1D:9D:BC:43:92:CB:27:02:1A:88:CD:11:98:70:EA:25:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/e748ee5c8f8fb88dbeb24abc4699f08b75cafcb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.169.0/24
                  200.1.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:19:8e:2e:89:42:46:08:25:5c:3e:8a:0f:28:bc:86:b0:a8:
         b1:fd:bd:43:17:76:52:06:36:26:9a:8d:1f:b7:4d:43:f6:53:
         9b:33:59:e2:ca:76:e5:b4:eb:d8:1f:d3:4e:f7:58:ae:a1:66:
         f4:38:e3:d9:7f:4a:e0:57:8d:5d:3d:4e:61:5f:25:57:f4:27:
         3b:8d:ab:62:c8:cf:04:ba:5b:90:ce:fb:c0:9b:d1:b3:df:38:
         90:78:b5:f8:f8:88:b0:fb:9b:eb:72:3d:05:fb:fc:48:80:19:
         65:c6:43:7a:56:40:2d:4c:11:0e:de:b4:91:0b:a3:62:4f:93:
         ef:e0:8d:42:81:d0:92:b7:c4:31:4b:56:1c:e9:14:1e:4b:6c:
         b3:69:9f:33:2c:8b:c1:a7:e3:b9:e9:95:b8:26:7f:0d:4c:29:
         9c:92:a8:ee:6b:9e:f4:c1:3e:de:7b:52:c9:97:63:ea:29:a8:
         f5:5d:41:15:ac:69:4e:5f:47:19:24:80:88:7f:0a:d9:9a:ad:
         35:94:08:a5:2a:88:e3:0f:49:36:de:5e:42:60:0c:ea:a5:dc:
         59:89:5b:ac:87:22:b2:6c:8f:ec:d2:51:8d:fa:3b:16:23:ba:
         28:a5:e3:66:0c:7a:2b:b6:be:9f:28:68:76:77:db:cb:dc:61:
         bb:67:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org