Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/34811ab62daa4d7c7976e73a7ec807ae6b81d363.roa
File:                     34811ab62daa4d7c7976e73a7ec807ae6b81d363.roa (raw, json)
Hash identifier:          GIu5ikEQhgYlOZxVEJ0/Em4X83co2TnLlDTUAST5ybk=
Subject key identifier:   0C:59:5E:E6:8B:62:05:EE:38:AC:BF:5E:D4:BA:38:BA:50:B0:53:C8
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20CA0F
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/34811ab62daa4d7c7976e73a7ec807ae6b81d363.roa
Signing time:             Mon 03 Jul 2023 13:26:30 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     269781
IP address blocks:        200.108.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148879 (0x20ca0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=34811ab62daa4d7c7976e73a7ec807ae6b81d363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:23:7e:9e:1e:c4:87:f9:48:aa:b4:0d:bf:
                    20:f0:01:5d:df:10:1c:04:5e:20:e0:91:14:ba:eb:
                    c6:c5:86:be:37:13:44:78:53:08:aa:d0:65:49:17:
                    31:62:ab:eb:53:52:6f:94:83:3c:47:9d:ff:fe:7c:
                    ee:e8:d1:43:6b:b6:af:23:4d:a7:bb:cc:39:9c:37:
                    d0:7e:dc:78:aa:9c:df:3c:85:8d:75:53:08:f5:38:
                    34:3a:b0:47:ee:16:e2:c3:f5:7d:f0:ec:45:ef:d9:
                    db:1f:9e:61:f4:56:d7:ca:55:7e:21:e8:7d:bf:ec:
                    b5:84:87:ce:9c:69:84:38:35:22:06:82:bc:33:a4:
                    a7:54:5e:3c:c7:15:35:73:af:5e:38:37:d9:78:f4:
                    89:72:b0:11:26:0b:78:34:80:58:1c:95:ed:47:20:
                    60:76:1b:d5:26:43:e7:7f:b6:46:68:25:cf:0b:af:
                    88:de:a9:8f:fb:12:f5:84:f7:01:0e:cc:78:67:54:
                    07:30:39:0a:ad:91:d2:23:06:f2:58:e0:b8:a8:da:
                    d7:e6:b1:08:b0:75:97:cf:31:7c:35:75:42:65:f0:
                    11:4e:ef:5e:86:f1:51:d9:9d:af:17:dd:04:f0:9c:
                    f7:77:62:8f:34:b7:ca:05:0d:68:bb:f7:2d:37:a6:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:5E:E6:8B:62:05:EE:38:AC:BF:5E:D4:BA:38:BA:50:B0:53:C8
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/34811ab62daa4d7c7976e73a7ec807ae6b81d363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:75:d7:f3:ec:06:52:e4:ef:4a:a7:57:5f:33:6c:63:9c:f9:
         f5:28:20:6e:cc:66:7d:57:8e:aa:30:1b:07:5e:71:aa:16:e9:
         cb:8f:80:12:11:3a:47:51:0a:f1:5b:d3:5b:f5:67:93:ad:42:
         e4:8d:44:e7:10:09:8d:26:b5:58:fd:f6:4c:70:c0:0a:2f:77:
         53:86:6d:53:85:cc:63:64:55:62:c5:b8:7d:47:67:8c:f8:87:
         6a:63:56:f6:fa:1f:fa:fa:36:a9:93:cc:43:4e:7c:3f:1b:3f:
         4a:3b:dd:77:ad:bb:fc:53:a0:bc:df:ab:ee:51:13:0c:92:25:
         33:4c:3f:fe:df:78:c4:18:32:ad:d2:fa:47:cc:01:57:20:d7:
         41:8a:9e:5c:77:dc:ee:d9:9a:1f:ac:0a:01:30:5c:af:da:93:
         d4:a9:05:ad:94:df:6e:fc:18:46:7f:4f:6a:5c:5a:0c:5f:f0:
         d8:6a:08:24:8b:fe:4c:bc:a2:af:f5:9a:b5:69:30:44:db:9d:
         a4:bf:46:7a:cf:c2:e6:74:5d:86:97:15:4f:1a:39:10:d5:2f:
         83:dc:22:0b:3a:24:9e:d6:8a:b6:d4:e1:1a:6c:36:15:65:30:
         a8:ca:5e:fd:39:24:40:c7:36:be:f4:b8:1f:67:53:47:0a:8b:
         03:e8:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org