Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/5d92ac1a4986ca7fdb76c1bda173d69d8065e255.roa
File:                     5d92ac1a4986ca7fdb76c1bda173d69d8065e255.roa (raw, json)
Hash identifier:          SAErZKpv1HJFa6mzgxpe0/BZje0c7IRFe6svKy7C5uk=
Subject key identifier:   BF:1B:4D:FE:E0:73:01:43:5C:16:3B:87:0B:3B:2F:64:6F:1F:3F:CB
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20958D
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/5d92ac1a4986ca7fdb76c1bda173d69d8065e255.roa
Signing time:             Mon 03 Jul 2023 13:26:08 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     262182
IP address blocks:        200.108.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135437 (0x20958d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=5d92ac1a4986ca7fdb76c1bda173d69d8065e255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:f7:08:8a:63:1c:2f:eb:47:8a:3a:d4:df:
                    32:3f:2c:ae:54:0e:92:e4:c1:48:ff:fb:40:d0:92:
                    d4:d1:c7:f9:a1:aa:12:df:a2:7b:39:d4:b4:05:0a:
                    d8:c9:54:f1:5d:0e:c7:ea:b7:0f:3e:3d:14:9d:92:
                    e9:9d:bf:80:7e:bd:91:7b:7c:71:79:d3:94:37:67:
                    99:7a:ba:a3:a1:f0:dc:e4:54:a9:7e:2b:10:d5:0c:
                    dc:0c:90:1f:c3:10:a0:78:34:8b:02:88:37:68:d0:
                    e3:8c:ea:0c:0a:dd:7b:18:8b:68:61:4c:70:b5:35:
                    65:5a:2e:60:c3:ea:dc:df:c8:33:c5:2d:a5:09:4e:
                    08:f0:5c:f6:b8:34:6c:96:9e:76:dc:b9:4d:75:76:
                    d5:3c:93:f9:cc:2c:38:a2:c0:71:7e:59:80:2b:a6:
                    d6:77:32:24:05:c6:a4:dd:bd:f5:7e:38:d8:04:0a:
                    c7:b6:53:06:e9:06:d9:ea:b4:74:21:1a:30:7e:8c:
                    3a:55:cf:5a:86:9f:db:4f:4d:04:19:a8:7e:34:ad:
                    5a:83:7e:33:05:d8:a5:cb:63:0b:7b:e5:2b:04:26:
                    de:35:dc:4e:ce:c7:eb:52:d3:12:24:dc:3b:06:ab:
                    bc:bd:5d:be:a3:03:6e:7d:28:51:33:c9:92:cc:26:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1B:4D:FE:E0:73:01:43:5C:16:3B:87:0B:3B:2F:64:6F:1F:3F:CB
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/5d92ac1a4986ca7fdb76c1bda173d69d8065e255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:6d:a4:61:63:ec:39:9a:dd:ff:0b:15:ed:4e:25:fd:da:4d:
         f0:95:5b:b4:7e:ba:46:c0:65:c5:5f:c3:e8:b7:16:a0:b6:23:
         d3:33:81:0b:10:26:1a:09:4b:fb:f2:80:3a:ac:58:d1:ce:43:
         c3:e7:47:7f:c4:50:c1:1c:44:61:d1:95:aa:ed:3d:d7:6b:49:
         c0:63:2d:d7:47:98:e4:54:8f:36:e2:b4:73:01:bc:bd:9f:72:
         c3:77:b1:b1:93:17:ad:12:a4:52:92:2f:4f:4c:d7:de:64:b9:
         dc:cf:ec:f5:53:ce:d2:5a:56:71:aa:aa:ad:4c:83:96:a2:8c:
         62:51:84:6c:45:1d:85:de:0f:44:89:24:20:20:ca:87:74:e5:
         31:bb:37:04:d0:7c:7e:be:28:50:fe:d1:07:47:23:88:6d:59:
         cb:ae:50:64:0f:e1:9b:c1:06:d5:48:c0:b0:4c:9f:56:e9:bb:
         96:da:9f:4c:d3:92:59:5b:03:71:b4:16:5b:7c:e9:c6:61:ab:
         bc:e7:78:5e:1b:8f:73:5b:b9:56:d8:c4:fa:e5:1c:cd:27:2e:
         0f:f7:29:89:30:39:48:1b:cb:86:71:e4:07:ef:47:9e:a6:83:
         42:2c:9c:6f:7d:32:2a:b1:e8:3a:5c:3c:8f:8b:db:ed:1f:b5:
         77:be:60:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org