Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d9374850b6caa74ae46e83ce2c0b04bcde8b16a7.roa
File:                     d9374850b6caa74ae46e83ce2c0b04bcde8b16a7.roa (raw, json)
Hash identifier:          dmFRWD3faGtEVp4hauDBsJksEQq8miWE4M5/5Czfq3Y=
Subject key identifier:   42:AD:F2:5A:91:83:6F:6B:8F:84:02:08:77:2A:BC:24:22:48:4E:A9
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1A7ACC
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d9374850b6caa74ae46e83ce2c0b04bcde8b16a7.roa
Signing time:             Fri 22 Jul 2022 19:27:16 +0000
ROA not before:           Fri 22 Jul 2022 03:00:00 +0000
ROA not after:            Sat 22 Jul 2034 03:00:00 +0000
asID:                     265776
IP address blocks:        200.50.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735372 (0x1a7acc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jul 22 03:00:00 2022 GMT
            Not After : Jul 22 03:00:00 2034 GMT
        Subject: CN=d9374850b6caa74ae46e83ce2c0b04bcde8b16a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:aa:53:62:c6:4e:c0:14:ab:f8:57:8f:90:
                    72:5e:71:ce:47:c4:85:9a:54:61:d0:e2:5c:c5:ce:
                    8a:0b:e9:dd:0f:e0:f5:46:17:d1:de:e5:fd:2b:84:
                    86:7c:5f:83:4f:72:7d:2d:c3:52:76:60:de:a1:36:
                    21:0c:5b:0b:0e:6c:99:d8:2c:fc:a4:b0:01:23:62:
                    57:6f:ad:27:3b:d3:83:56:2c:90:0c:99:90:f3:38:
                    24:c7:a9:6c:2d:37:63:1f:6e:dc:59:5f:3c:15:98:
                    c8:d8:a1:60:c3:2a:57:37:6a:53:31:be:52:33:45:
                    ce:20:9b:db:33:73:17:05:3e:23:ed:a2:b5:ee:41:
                    58:fa:25:1a:7a:f6:9e:57:ac:de:bf:c0:8b:eb:51:
                    d2:9a:e8:16:6c:63:48:26:64:65:2a:45:9b:bd:cf:
                    13:29:f1:a0:ae:35:cd:c0:75:d2:6d:c8:99:c2:97:
                    4f:76:93:8b:74:a0:6e:1d:56:50:e6:c5:99:2d:77:
                    d6:92:1b:84:99:17:71:53:7c:31:32:d1:36:c0:55:
                    4e:b6:32:85:2e:9c:cc:0f:fe:34:84:b1:14:21:1b:
                    55:2e:75:af:f0:ca:b5:1d:ed:12:be:0c:8c:58:1e:
                    58:76:85:d2:62:51:79:9c:c6:ac:c2:ee:8c:91:b6:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AD:F2:5A:91:83:6F:6B:8F:84:02:08:77:2A:BC:24:22:48:4E:A9
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d9374850b6caa74ae46e83ce2c0b04bcde8b16a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:04:44:b5:4e:cd:10:74:7b:c2:b8:89:bf:b7:09:5e:56:
         ff:2a:77:b1:c5:43:c8:e9:67:17:28:91:4b:34:a2:98:8d:3f:
         85:b7:3d:8a:04:b2:b5:68:98:a0:5e:4c:e4:ec:ea:02:ad:ab:
         cf:6f:01:f6:b5:51:ee:a2:ef:11:3b:39:0e:81:a8:e4:84:5a:
         8d:8f:d9:5f:d4:39:ab:4a:f0:8d:70:8c:e7:c4:5b:5e:d8:55:
         49:ca:82:62:03:9d:cf:f7:52:a0:49:bc:b6:10:f0:a8:ae:7c:
         40:cf:30:28:36:00:d8:9b:de:19:a7:4c:4f:be:16:ed:5b:4a:
         1c:00:18:76:17:ed:11:dd:d4:32:05:f8:88:f4:47:f5:57:fe:
         98:9f:a2:fc:68:9c:40:ce:c7:3c:4a:58:17:de:ac:92:94:d9:
         5c:40:b2:3a:34:16:54:a8:16:bf:1b:d9:6a:79:07:0c:23:4c:
         eb:c9:fe:70:79:7f:15:44:ea:f7:8b:79:36:ed:34:06:95:4d:
         52:ac:59:0f:b1:eb:61:e3:7a:62:0c:3e:a9:1a:64:f1:68:e0:
         62:a8:a3:ad:b9:ec:b3:62:00:c9:b9:d5:57:eb:45:37:a5:99:
         b8:2d:42:cc:38:7a:5a:23:3d:4d:9d:34:5f:e5:18:cb:05:a2:
         20:84:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org