Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/1dddd14df22f0b8ee093ce4cdac7b75145635aff.roa
File:                     1dddd14df22f0b8ee093ce4cdac7b75145635aff.roa (raw, json)
Hash identifier:          LXvToga5qPzTHYpoUWQTiR2X08LDcEaypfbGkgl+5fk=
Subject key identifier:   27:38:2A:4D:1C:91:41:FA:7F:C9:70:0B:F8:F2:32:F5:7C:2A:50:CE
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20996A
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/1dddd14df22f0b8ee093ce4cdac7b75145635aff.roa
Signing time:             Mon 03 Jul 2023 13:26:09 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136426 (0x20996a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=1dddd14df22f0b8ee093ce4cdac7b75145635aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:aa:48:9a:f1:b3:8c:b0:1e:93:9b:5d:b2:
                    7e:d2:2d:d0:82:92:42:f9:67:91:c5:b9:e6:3a:18:
                    d2:5e:16:42:5c:28:73:b4:eb:45:76:81:ba:cf:d0:
                    63:bb:6e:90:57:84:e6:5a:2f:f2:cc:96:c4:66:16:
                    b8:2d:de:e3:38:01:88:18:b9:73:33:b3:3d:79:85:
                    48:a0:05:86:9c:ed:8d:bf:65:d7:4b:48:55:93:55:
                    b4:34:2e:70:49:04:e0:53:58:40:94:37:aa:6c:ab:
                    f0:d8:68:00:3a:36:9e:ed:9f:a0:29:bd:e9:89:0f:
                    20:56:7f:59:b2:97:37:64:af:32:5d:df:55:4f:45:
                    14:21:7a:6f:91:ec:6d:52:f2:6f:fe:29:71:3f:c2:
                    93:13:5a:e0:3b:de:ae:b2:1f:f4:a2:f1:b7:c3:f5:
                    a8:b3:70:33:6d:b2:80:e8:74:3d:a7:9e:1e:eb:a4:
                    14:af:83:82:fe:1d:53:7a:c9:81:ed:31:0d:5e:33:
                    5d:29:d7:8f:49:a8:2d:51:82:c0:19:c5:57:d2:92:
                    81:12:35:70:03:bc:29:11:1d:44:52:0c:c5:85:43:
                    24:92:84:4f:07:69:7f:fd:00:58:9b:f5:67:12:bd:
                    32:ec:d2:d2:49:0c:3c:fc:3e:0a:1c:de:28:91:93:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:38:2A:4D:1C:91:41:FA:7F:C9:70:0B:F8:F2:32:F5:7C:2A:50:CE
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/1dddd14df22f0b8ee093ce4cdac7b75145635aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:bc:e8:5b:ee:13:f4:1f:96:73:36:63:39:44:f0:55:e5:
         a4:98:88:6d:b5:5d:bb:26:40:f6:b5:89:00:3e:85:d2:06:9e:
         21:fd:da:60:66:b9:9c:e9:ac:b0:37:e5:09:3f:ab:4b:e0:ad:
         d2:c9:83:e4:b4:56:15:c7:25:07:af:b1:d1:8f:28:2c:07:10:
         0f:e5:f8:86:7b:33:fa:b3:f2:20:81:f5:c3:36:1c:b3:13:76:
         50:c3:c2:23:2f:e1:2b:dd:e4:40:32:59:f2:f3:8f:0c:95:be:
         30:ad:e3:64:1a:45:d7:ea:8e:db:5e:43:45:c5:f0:b9:ac:b5:
         0a:69:da:ad:80:7b:1c:c3:fd:8b:8c:6b:70:55:b8:6e:12:1f:
         0e:b0:b0:c1:46:3a:78:83:c3:92:e7:4d:96:ae:21:fe:03:49:
         dd:bc:7c:17:b7:ec:c0:80:f4:3f:03:64:aa:a7:08:53:12:60:
         c3:8e:ce:fe:df:97:15:8e:6e:66:0f:fa:d5:17:19:5d:98:e2:
         69:45:f6:a3:8c:cb:67:49:e5:4e:b4:8d:a6:ef:cd:6d:a6:30:
         53:a4:4d:c3:9c:82:14:70:55:77:d1:25:c6:99:d6:dd:0f:fc:
         95:70:0e:17:e1:fb:19:de:c8:89:8c:95:10:bb:05:3e:a6:be:
         3f:78:d8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org