Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/0bfd847b54c7161d6732c6c470094542ef04475d.roa
File:                     0bfd847b54c7161d6732c6c470094542ef04475d.roa (raw, json)
Hash identifier:          EhktZxObQM42xPNxwoTnwqwHxzlglEWM8ma2KSVB4e4=
Subject key identifier:   E7:F4:60:7B:2E:10:B4:15:84:C9:21:00:24:CD:A3:77:2E:81:2D:CD
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       2089CB
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/0bfd847b54c7161d6732c6c470094542ef04475d.roa
Signing time:             Mon 03 Jul 2023 13:26:06 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132427 (0x2089cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=0bfd847b54c7161d6732c6c470094542ef04475d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:98:05:57:68:fe:28:a1:f4:a3:8a:e8:8a:
                    ab:96:22:13:0d:96:eb:3d:dc:b0:58:72:30:f4:cd:
                    4e:76:14:05:61:ad:da:61:a1:cb:d6:e2:df:73:e9:
                    f3:2d:ac:59:fc:d9:bc:95:bc:42:0f:de:d4:a3:e7:
                    75:33:d3:53:73:dc:de:bb:ea:6d:1d:7b:62:43:dd:
                    6a:e4:9c:a3:4c:cd:d8:b3:36:76:d8:6e:90:38:c8:
                    ec:54:57:2b:58:82:2a:5d:d3:ff:76:8e:7e:ce:68:
                    d6:46:4f:6a:05:82:39:a8:f7:93:ff:61:14:1e:f6:
                    e9:b8:93:7e:6e:bb:49:fc:26:70:8a:3d:b7:e3:0f:
                    17:cd:9f:0e:e9:ff:6e:69:26:32:29:28:c8:9b:34:
                    ca:3f:e7:c8:21:1f:39:bd:cd:1c:65:70:7b:a4:62:
                    13:a7:7c:ca:c8:b5:6f:f2:84:3a:38:9b:b9:e3:39:
                    82:7d:9c:db:f7:da:10:4f:7e:bd:6e:51:d3:99:37:
                    7d:8f:58:36:cd:60:66:96:46:b6:5b:d6:11:5a:58:
                    2d:bb:3e:d1:67:b1:fb:31:6f:0a:32:ca:fa:0a:04:
                    c8:ce:10:c5:1a:b4:b6:96:46:4c:eb:8b:52:08:91:
                    e4:aa:77:d5:7f:35:35:bb:81:f8:85:42:07:11:28:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:60:7B:2E:10:B4:15:84:C9:21:00:24:CD:A3:77:2E:81:2D:CD
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/0bfd847b54c7161d6732c6c470094542ef04475d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4a:4f:14:a8:c4:9d:ca:2e:b8:05:b3:16:0c:67:63:51:53:
         29:f1:23:7c:22:b5:c7:2f:d2:02:09:fd:d1:28:71:43:2e:0c:
         50:5a:94:c9:54:06:03:2f:23:ed:57:31:19:1c:78:aa:64:be:
         60:f0:fe:b1:3b:59:3f:6a:f0:56:66:d4:b5:2c:fe:70:00:6a:
         fb:a4:22:5b:7b:b3:9b:14:bf:0f:91:cf:43:3c:a2:8f:32:60:
         05:39:76:95:34:33:8b:78:8c:d5:48:9c:94:bb:1c:e3:b2:86:
         db:1f:ea:24:1e:af:5a:ed:1c:50:6d:bf:b7:91:a2:92:c5:16:
         d7:9e:c3:08:4e:25:67:e7:c7:b2:7d:4f:f2:58:0e:2b:f8:95:
         af:f3:5a:6e:23:48:7f:50:c1:26:d6:f8:c8:3e:0c:66:c2:62:
         a2:e7:cb:33:bf:d2:6c:5c:f9:98:ca:8d:3a:07:e1:d6:8d:12:
         a4:70:f0:dd:0c:40:f3:06:21:07:79:5c:d4:9a:dd:ef:e3:5a:
         49:c3:f9:d5:6a:6b:10:e3:31:56:e0:39:d1:46:7d:bf:92:e2:
         50:8c:f6:81:bd:74:6c:5f:b1:13:db:1d:62:52:49:51:2a:0b:
         b3:11:20:77:ae:ca:db:4f:70:3d:03:11:c2:e3:a6:e2:fe:3a:
         91:84:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org