Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/35a26e0ed098ca8496878933ed50b715247df039.roa
File:                     35a26e0ed098ca8496878933ed50b715247df039.roa (raw, json)
Hash identifier:          Z7YGR0lNkllvheZBbxvXXURCXZzFDEi8PvBkyjBV3ZA=
Subject key identifier:   EA:97:18:22:EE:4A:78:59:55:7B:BD:D5:75:5C:B3:05:40:BA:83:B5
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20CF36
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/35a26e0ed098ca8496878933ed50b715247df039.roa
Signing time:             Mon 03 Jul 2023 13:26:32 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     265515
IP address blocks:        200.108.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150198 (0x20cf36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=35a26e0ed098ca8496878933ed50b715247df039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:7e:2c:8b:62:1b:f6:1a:ff:29:1d:54:5c:
                    ab:29:d8:b4:81:a5:8e:ce:ac:de:58:e5:1d:f0:fc:
                    69:89:9a:10:e7:57:02:0b:76:60:b3:b5:a5:15:8d:
                    9c:c7:c8:11:c0:3d:50:95:8d:18:3f:0c:59:4f:1c:
                    a8:c5:6c:cf:29:a6:31:5e:9e:69:91:68:4a:01:9e:
                    b4:f8:56:89:ad:70:e6:a9:ad:44:21:15:8b:1b:ab:
                    a1:3e:d9:9c:ff:98:b0:29:19:d6:06:5a:07:f1:96:
                    e0:a5:9e:c6:f8:4f:2d:70:ad:6b:b7:26:db:e8:e2:
                    8c:10:a0:54:20:6f:65:50:e5:3f:27:b9:ab:b5:c1:
                    d8:bb:16:b2:d1:ab:c4:a6:7f:eb:f4:f6:0a:e3:17:
                    09:d4:69:c6:7c:bb:83:a2:96:8f:59:75:05:40:ec:
                    88:32:1d:61:6f:77:21:83:78:ee:c4:e6:11:04:9f:
                    60:5b:07:1c:2e:86:47:5b:ec:7d:ac:cf:9e:10:2c:
                    78:b8:3a:1c:82:ac:f1:1b:33:14:ad:a1:ba:61:5a:
                    cd:e9:8b:48:70:fa:a1:2d:5f:10:ef:5e:b7:68:53:
                    3a:68:4d:cf:bc:40:15:dc:97:6d:3f:a2:4d:8f:ca:
                    c0:34:56:93:40:69:03:4a:4f:42:61:02:bb:1a:08:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:97:18:22:EE:4A:78:59:55:7B:BD:D5:75:5C:B3:05:40:BA:83:B5
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/35a26e0ed098ca8496878933ed50b715247df039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:e1:ea:9e:4f:62:8b:a1:85:05:75:0a:19:bc:d7:f4:27:
         36:51:26:3b:d8:1f:20:39:73:aa:94:53:96:d0:0e:a1:f4:30:
         4a:0c:b8:3c:a1:b2:bd:fb:90:fd:91:4d:f8:b1:03:7e:fe:a9:
         82:cf:7b:68:2c:92:c2:f9:e6:f1:d2:52:6a:ce:d6:f9:a1:f6:
         f7:8b:8e:5a:71:f5:10:12:23:29:d8:50:63:94:33:f6:b0:32:
         6b:5d:b7:28:d5:bb:53:19:30:4d:ca:3f:86:28:9d:e0:bf:49:
         81:59:53:e0:51:0a:29:9e:93:8d:94:20:52:3c:d5:bb:e8:d9:
         a2:50:fe:77:9c:49:76:04:8e:30:3f:1e:6e:9a:63:4e:bc:3e:
         ce:1d:34:69:74:45:59:da:b9:2a:96:fa:fd:c3:52:4b:d5:ee:
         cf:13:6f:1e:4a:d3:25:95:7a:59:a1:0b:0e:c9:3a:aa:b5:65:
         32:23:82:db:44:33:0e:2b:4e:42:4a:3e:b9:45:07:de:bf:23:
         1b:7c:ec:14:65:6e:11:34:97:cc:9b:e4:1c:f8:e7:ec:23:ff:
         0c:4a:7b:15:b2:19:c8:1a:ec:1d:97:ea:43:94:01:98:ab:bf:
         ef:86:01:90:06:cb:0b:ed:b9:0f:e5:86:22:81:af:4f:66:7f:
         77:be:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org