Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/3b78eae9f5e237ba0df9643c9696744344d22a03.roa
File:                     3b78eae9f5e237ba0df9643c9696744344d22a03.roa (raw, json)
Hash identifier:          IvnMUVu1tMxRBlbEdM89UbGDSW7WYUuiqxcm7Rechl4=
Subject key identifier:   6D:F1:67:2F:17:89:5E:97:25:30:24:EE:51:99:AB:FD:B1:B4:8B:82
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20AF47
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/3b78eae9f5e237ba0df9643c9696744344d22a03.roa
Signing time:             Mon 03 Jul 2023 13:26:18 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2142023 (0x20af47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=3b78eae9f5e237ba0df9643c9696744344d22a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2e:22:8f:6c:b5:9c:0a:e5:66:51:d3:2f:be:
                    e1:ca:18:82:62:5e:d7:99:d3:aa:d8:28:89:45:9d:
                    51:d1:6c:a6:fb:bc:3f:53:b0:e3:2c:5f:06:a9:8e:
                    e6:a4:93:f6:64:1a:ce:4d:ed:0c:8e:2e:76:c4:e9:
                    77:d8:7b:c7:43:b5:75:53:16:4e:92:d8:0a:5d:ac:
                    18:ec:1f:b5:2d:97:25:8a:5d:3e:ef:d9:9d:88:5c:
                    5d:73:7c:cc:11:fb:50:f1:d4:76:00:63:a0:1d:99:
                    60:b7:2e:5b:9a:14:a4:f6:d8:e3:bc:c7:d4:f9:4c:
                    53:12:c4:36:be:26:e8:96:d9:b8:24:eb:0d:f7:a8:
                    19:70:6a:1d:4e:0f:3e:4f:dc:00:b2:33:5f:e9:b0:
                    da:d0:cd:c1:fd:18:5e:e9:ae:b3:33:4c:17:50:22:
                    96:53:b5:fb:bf:9c:26:06:17:73:6b:8d:89:13:bb:
                    d2:86:3c:ef:29:1a:f6:42:ac:ba:62:4e:83:3f:b9:
                    03:8b:84:9d:6b:f3:dd:4f:4b:f8:13:d7:35:5f:c1:
                    55:aa:16:e2:60:58:f9:65:0d:25:68:cf:53:b5:1c:
                    4f:cd:61:fb:ee:ea:df:a1:13:ed:73:23:c2:04:95:
                    60:88:ae:8e:1a:13:6c:2d:2c:aa:3d:30:1d:38:a3:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:67:2F:17:89:5E:97:25:30:24:EE:51:99:AB:FD:B1:B4:8B:82
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/3b78eae9f5e237ba0df9643c9696744344d22a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:50:4f:52:a5:f9:c4:c3:3e:dc:12:da:75:c7:6d:9f:36:b1:
         96:0a:ed:94:1e:36:fb:43:d7:52:c1:28:de:21:32:4a:57:e9:
         98:e2:94:2c:aa:3d:9a:db:29:ad:6e:d3:d0:ae:42:0d:f7:8f:
         8a:16:97:24:2d:f0:39:50:a3:4e:d4:5e:5e:6e:2a:8a:fc:d5:
         e8:53:80:36:5a:b1:52:b7:b9:02:ae:fa:01:b4:d2:b5:73:18:
         d3:71:54:d8:b3:e2:2d:44:86:bb:ca:77:8c:f7:2e:33:fc:a1:
         41:dd:ae:be:7a:88:68:81:96:08:99:cb:cc:23:7f:f7:a9:b8:
         36:66:7f:7d:0b:28:53:f8:94:4e:60:e0:b8:d3:ce:9a:9a:d9:
         26:99:71:e8:bb:fb:17:31:85:ec:db:03:a4:90:b9:84:f4:6e:
         69:0b:bb:10:9d:1f:90:44:02:bd:22:11:06:03:3e:c1:94:a6:
         93:b9:b8:30:58:53:2d:5f:cb:3a:e1:e2:e9:e0:c1:30:f2:83:
         5e:70:a4:96:45:34:5c:36:62:e0:63:b9:22:63:29:59:9e:4b:
         f4:46:a3:ef:02:cf:c9:f3:6b:fb:7d:9b:c3:b1:00:2d:45:7f:
         57:8e:c8:d1:aa:70:c9:6d:18:d2:aa:f7:f8:12:85:96:36:b7:
         26:96:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org