Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/40a829edb72cccbdccb07d213efe91cc17b372dd.roa
File:                     40a829edb72cccbdccb07d213efe91cc17b372dd.roa (raw, json)
Hash identifier:          9+8XEkennkOlHmBJB+dBZ6As4Svg5HBctLrMVBYeL2w=
Subject key identifier:   F4:E7:9B:D3:9E:5A:8A:84:AE:7B:F7:57:B1:D9:BB:DC:6E:B0:56:9B
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20B682
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/40a829edb72cccbdccb07d213efe91cc17b372dd.roa
Signing time:             Mon 03 Jul 2023 13:26:21 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2143874 (0x20b682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=40a829edb72cccbdccb07d213efe91cc17b372dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:7d:30:9d:98:38:f2:85:b9:24:61:6c:8b:
                    fd:8a:84:30:34:6b:61:c6:4f:62:22:ee:52:0a:d0:
                    8d:f2:b3:58:ab:48:d6:38:88:57:49:d3:41:71:c9:
                    d4:f7:0b:32:c7:d4:05:5f:cb:ca:0f:68:4d:a0:23:
                    6b:a1:1c:31:37:cb:2b:69:c5:5b:c6:85:99:3f:50:
                    bf:9e:f7:36:6f:2e:55:43:de:6a:2c:87:ac:62:31:
                    78:bb:6b:ec:14:a2:3e:c7:b2:1a:3c:68:7f:ad:0d:
                    71:aa:27:a6:57:4c:ac:2e:3b:ae:b4:ac:95:02:40:
                    3e:f0:fc:2a:4e:32:6f:23:4b:ea:9f:d1:b1:31:52:
                    4c:da:22:cf:c4:b8:31:12:96:4c:82:8f:27:1d:2e:
                    7e:35:92:5a:87:c8:f8:a0:e9:ea:9f:98:25:49:a0:
                    96:de:98:93:20:d5:17:8d:b4:42:ae:94:bd:d7:28:
                    1b:9c:ae:5e:67:a3:cd:1f:d4:69:9d:9e:a3:92:6c:
                    5d:b9:fc:a4:ce:a5:f4:de:34:b3:12:ef:66:af:fc:
                    24:ab:dd:c9:90:67:fc:eb:bc:2e:4a:70:cc:df:33:
                    23:c7:5d:09:97:ea:c0:11:24:3b:3c:f0:97:af:1e:
                    bf:9d:8c:b4:49:ab:db:f9:a8:c7:38:3f:db:44:c9:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E7:9B:D3:9E:5A:8A:84:AE:7B:F7:57:B1:D9:BB:DC:6E:B0:56:9B
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/40a829edb72cccbdccb07d213efe91cc17b372dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:af:cd:59:b8:d9:b1:6b:9b:cb:4e:bd:c6:a1:b6:20:f2:06:
         2d:e8:a0:a6:00:95:e0:f3:7c:06:8e:47:ea:a6:47:e1:71:30:
         f0:e4:13:d6:5a:83:af:5a:a1:5e:b3:14:85:67:49:87:6f:c2:
         55:12:ed:1b:46:7b:8a:6c:97:b5:71:42:cf:b3:2e:0d:25:7e:
         55:7e:c7:9f:e6:c4:79:a2:96:23:2a:0a:c4:26:c8:99:fc:cd:
         f5:04:95:25:2f:f6:c7:24:39:37:5b:99:d6:34:2b:80:47:52:
         f1:64:71:5e:e0:c7:f3:d6:df:c9:55:a5:c7:be:1b:05:25:bc:
         15:08:35:d4:be:c5:2a:79:a0:ec:67:61:6f:10:4c:d8:49:45:
         d7:64:22:9d:1b:27:0c:a8:fa:6b:f6:9e:d7:9f:90:2a:28:ad:
         91:30:4b:fc:a7:9d:4c:1a:d0:c0:6f:96:60:d5:04:a2:ee:e3:
         44:6c:58:cf:62:22:15:53:d7:87:9e:2c:6b:00:a5:17:4e:1b:
         c9:62:42:ea:f6:59:c4:ec:22:65:b8:57:89:3c:bd:17:36:b1:
         d1:fc:2d:50:2f:75:f6:4d:5f:ae:4c:38:a1:27:37:0c:72:57:
         07:95:f1:6e:51:19:de:e4:8f:58:fb:df:fb:d5:56:05:81:98:
         65:c8:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org