Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35544fac-be2e-40f8-a414-0dca8e9f619a/3ac34174327c508c13a8cd0581b372f206aa1aa0.roa
File:                     3ac34174327c508c13a8cd0581b372f206aa1aa0.roa (raw, json)
Hash identifier:          0aAJ/57kZAexMmgxsUaGhH/qMjoC3R2o2gTuzbcVCU8=
Subject key identifier:   BA:2F:2C:FE:61:0A:D4:E6:C1:A0:FE:A2:D2:2C:F1:FE:38:32:8D:7A
Certificate issuer:       /CN=a6813bdcd58e19805901bea439d6984387aad3c5
Certificate serial:       250A
Authority key identifier: FB:5C:5F:DC:80:B8:B0:EB:1C:97:EA:E2:1D:0E:C3:1F:47:2D:60:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6813bdcd58e19805901bea439d6984387aad3c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35544fac-be2e-40f8-a414-0dca8e9f619a/3ac34174327c508c13a8cd0581b372f206aa1aa0.roa
Signing time:             Tue 11 Apr 2023 21:00:39 +0000
ROA not before:           Sat 08 Apr 2023 20:55:35 +0000
ROA not after:            Thu 10 Apr 2025 20:55:35 +0000
asID:                     8048
IP address blocks:        200.1.148.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9482 (0x250a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6813bdcd58e19805901bea439d6984387aad3c5
        Validity
            Not Before: Apr  8 20:55:35 2023 GMT
            Not After : Apr 10 20:55:35 2025 GMT
        Subject: CN=3ac34174327c508c13a8cd0581b372f206aa1aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:f3:d8:b9:bb:29:25:6c:37:ae:a1:51:ad:
                    0d:ea:6d:6f:89:36:69:a0:f1:d3:4d:b0:50:4d:f3:
                    34:9f:0e:6a:21:2e:81:2f:4e:ef:5e:e5:be:94:55:
                    6b:63:a8:12:e6:2b:bc:bc:83:0e:1d:a3:91:58:de:
                    5d:76:97:44:52:8c:58:48:2e:41:8a:ea:47:50:3e:
                    bf:68:73:14:6c:19:38:47:2b:47:76:2e:e7:de:42:
                    e8:ae:f4:71:15:26:d4:be:16:91:41:8c:28:cd:55:
                    a5:c5:ab:ce:6a:f9:27:4b:40:3e:5e:93:cb:ca:4d:
                    49:47:12:a7:6a:61:2f:fa:f2:c9:b3:4c:fb:30:c1:
                    57:25:2b:4e:93:b7:21:fa:a5:d2:54:ad:69:60:82:
                    46:c9:77:37:ea:56:41:58:be:67:e9:e2:88:7e:0f:
                    b4:09:72:b1:de:32:80:39:44:ee:98:34:9a:0f:c1:
                    07:ee:4e:02:18:9d:b2:87:d2:03:c6:35:8f:fe:fa:
                    a7:75:92:5d:ce:9b:37:c8:26:eb:39:de:66:9c:60:
                    12:9f:7c:f8:63:2c:1c:f1:1a:71:87:d9:b0:17:ea:
                    0b:fe:a7:92:9e:cd:8c:45:af:17:14:81:08:ef:e3:
                    c2:71:82:86:93:37:ed:1a:44:a5:8b:52:db:5c:ee:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:2C:FE:61:0A:D4:E6:C1:A0:FE:A2:D2:2C:F1:FE:38:32:8D:7A
            X509v3 Authority Key Identifier:
                keyid:FB:5C:5F:DC:80:B8:B0:EB:1C:97:EA:E2:1D:0E:C3:1F:47:2D:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6813bdcd58e19805901bea439d6984387aad3c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35544fac-be2e-40f8-a414-0dca8e9f619a/3ac34174327c508c13a8cd0581b372f206aa1aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35544fac-be2e-40f8-a414-0dca8e9f619a/a6813bdcd58e19805901bea439d6984387aad3c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:42:cf:34:32:a6:a8:fa:26:b7:a1:2e:bd:11:9a:b5:02:b1:
         01:eb:09:2b:6b:3f:6e:54:df:dc:91:1e:b0:56:a3:ec:45:ff:
         15:06:80:06:9f:2b:7d:41:09:2a:7f:d8:65:5d:89:3a:71:25:
         73:6c:2e:d6:c1:4c:b7:4a:54:30:b2:ed:37:8c:3b:76:f1:0c:
         bd:d3:bd:3a:50:20:84:b6:5d:bd:b7:f2:2d:03:05:ed:dd:92:
         f3:34:e5:e7:dc:6f:f5:80:fb:58:ae:b0:f5:db:9b:fe:b6:c3:
         fb:57:33:9b:f7:17:0b:d8:33:d3:9b:07:92:47:75:92:30:8e:
         2a:ba:5e:0b:08:1f:7f:2f:8a:59:bb:2c:08:e6:c7:b8:fd:13:
         41:ac:f7:00:1a:cd:46:90:25:4f:6a:03:22:a8:63:6f:21:67:
         9e:7a:cb:c8:3f:71:3d:f3:f8:70:fc:61:bc:2f:5c:81:e9:fa:
         8a:d0:42:b7:d9:a4:db:70:13:81:35:7f:26:b8:01:46:94:41:
         af:26:d3:01:ff:00:d6:97:b4:6e:6d:ef:d2:97:f8:a5:ce:42:
         9b:15:43:b0:1e:80:14:e9:db:eb:8f:da:1a:27:a0:69:c6:2b:
         77:df:b8:52:5f:c5:3d:7b:6e:bc:a1:79:6d:61:95:2f:37:aa:
         5d:a1:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org