Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6a40baf8a2d4b8dba9721ed9a78a700d8b72ded9.roa
File:                     6a40baf8a2d4b8dba9721ed9a78a700d8b72ded9.roa (raw, json)
Hash identifier:          T8t+hvYghJb/DDPeBR9tozPGT+MBvmQssSnh3cNG8Q8=
Subject key identifier:   32:24:C1:2B:EC:35:3B:07:27:98:B3:F9:43:6A:7D:AB:4E:88:69:B7
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20A4AB
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6a40baf8a2d4b8dba9721ed9a78a700d8b72ded9.roa
Signing time:             Mon 03 Jul 2023 13:26:14 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139307 (0x20a4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=6a40baf8a2d4b8dba9721ed9a78a700d8b72ded9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:3a:a4:dd:55:06:20:3b:11:36:c5:4b:33:
                    54:c1:8e:13:1a:32:cd:bb:24:56:40:a9:44:5a:b4:
                    4b:16:a5:88:31:37:39:71:f3:00:5a:6e:71:97:e8:
                    26:2c:8b:fe:f0:7c:67:6d:5a:a5:07:33:30:63:76:
                    cb:92:44:ef:96:b3:22:9b:43:29:1f:5c:c9:11:97:
                    67:c8:79:2f:2a:9c:86:49:26:b0:b4:b8:01:01:24:
                    06:4b:81:9b:7b:fe:c4:ec:cd:6c:6b:41:75:5c:89:
                    ab:c3:cd:b8:28:63:25:aa:16:e6:8f:15:f6:3f:f4:
                    2e:e4:d6:c2:54:e4:31:73:e6:72:f0:07:1a:17:6b:
                    0b:52:33:2c:90:12:57:d4:64:b8:0f:60:7f:54:09:
                    cf:53:6b:48:90:66:6f:92:f8:63:9d:9d:8f:33:1d:
                    ae:b0:31:00:7a:e0:ef:4e:0b:83:41:a5:f4:3c:1a:
                    7d:02:06:6c:b0:2f:a7:5c:7c:97:73:b2:53:ca:b6:
                    26:3a:75:7e:93:dc:cf:21:b6:5f:c4:5a:c5:bc:5a:
                    b7:52:b0:4f:ea:28:3e:64:04:6d:22:7d:d8:35:ab:
                    41:4a:1c:b1:09:f6:e4:1a:45:63:82:dd:d7:b0:d8:
                    35:1b:69:8f:01:58:72:1c:61:98:39:b5:78:95:f8:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:C1:2B:EC:35:3B:07:27:98:B3:F9:43:6A:7D:AB:4E:88:69:B7
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6a40baf8a2d4b8dba9721ed9a78a700d8b72ded9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:91:6e:dd:cb:7c:0c:e4:69:30:8e:ac:6d:e7:c7:ba:e4:aa:
         4b:cd:14:72:5e:0d:6e:1a:d6:48:9c:86:2d:a1:60:c3:37:8e:
         d6:c1:f4:94:41:3c:c3:88:68:43:83:81:c3:75:3e:8a:d8:4a:
         e1:f3:a3:c5:70:f2:d3:e2:e8:d2:b9:30:f3:ed:82:65:15:04:
         7f:68:84:2f:00:31:d5:84:9d:19:75:c1:d7:f0:4b:2c:73:17:
         c0:5c:ac:f6:94:07:95:3e:8f:6b:7d:e5:ab:d4:fd:3d:16:f9:
         ae:b7:2b:90:5a:1b:3f:e7:95:94:e8:c6:d3:cc:ed:75:f9:6d:
         b9:9e:6c:1b:43:9b:24:ac:a7:a4:d9:ff:91:fc:b7:51:33:52:
         8f:3d:1c:b4:2f:88:40:72:62:4c:88:3f:93:7f:c4:92:a1:77:
         fc:7b:8c:91:bd:3a:e5:3e:26:ea:2a:19:36:12:91:3c:1f:13:
         df:c6:a8:26:4a:56:ad:a0:0b:a0:54:b2:9c:98:6a:05:45:c6:
         9c:c3:ee:b7:cc:40:a9:7a:4b:cf:42:9f:d3:98:f6:9e:4e:0e:
         74:10:98:5a:f6:5b:8b:f4:87:20:2e:e9:78:2c:5f:0f:b6:f3:
         ed:0b:a3:19:48:0e:f0:47:0d:d1:fe:4b:c2:1d:93:13:ba:3e:
         59:b4:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org