Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/7356d4ce6c5427fc0dbb667352f1ac4525147b13.roa
File:                     7356d4ce6c5427fc0dbb667352f1ac4525147b13.roa (raw, json)
Hash identifier:          h5R/2Wp6d1HBGuJZ+Apf3BA03iED8/Q2gbW/PTvjVPM=
Subject key identifier:   57:FC:2B:A1:A8:1B:C4:58:D4:AE:6E:34:A4:70:2B:D3:ED:15:F2:78
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20AA18
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/7356d4ce6c5427fc0dbb667352f1ac4525147b13.roa
Signing time:             Mon 03 Jul 2023 13:26:17 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140696 (0x20aa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=7356d4ce6c5427fc0dbb667352f1ac4525147b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e5:3c:db:ed:d3:e1:ca:e5:cf:0e:41:53:71:
                    65:f5:ab:64:8b:b6:58:97:cd:ba:5c:20:44:6a:4a:
                    29:fd:d2:99:eb:fe:c2:8c:a6:22:f1:f5:3a:01:13:
                    8e:c0:d1:51:e0:78:c5:5e:a8:98:9e:cf:57:05:b6:
                    35:cd:78:52:e3:8e:40:67:58:d9:41:62:52:0a:35:
                    d2:18:b1:d8:7b:10:18:58:a8:58:80:59:d2:3b:00:
                    c1:d6:d3:45:3a:ec:00:09:a5:d9:9a:46:96:88:2f:
                    9b:45:fe:1b:a9:16:e6:9b:53:bd:59:03:cd:ba:e9:
                    99:64:da:7f:52:d5:d4:d1:e4:77:dd:56:73:e6:5b:
                    50:2a:f3:f0:c6:01:d5:d7:41:3f:a5:a3:eb:82:ca:
                    e0:8e:2c:ea:be:8f:8d:95:2e:f1:be:53:44:91:98:
                    0a:07:c3:68:da:92:db:94:ce:73:84:06:f2:84:d2:
                    2b:50:66:87:54:d6:3d:c6:51:db:e6:b8:d3:e1:15:
                    cd:e4:f5:6e:ab:5b:34:c9:22:95:25:9f:ae:f4:68:
                    1e:4b:ab:8e:8d:88:f6:ed:c2:9f:5a:01:b6:0b:40:
                    10:80:31:89:0d:d2:43:4d:0a:f3:94:7d:d1:7e:30:
                    bb:33:ae:66:f3:39:e8:af:3b:3c:fe:20:f8:20:8d:
                    9f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:2B:A1:A8:1B:C4:58:D4:AE:6E:34:A4:70:2B:D3:ED:15:F2:78
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/7356d4ce6c5427fc0dbb667352f1ac4525147b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:9f:1e:38:e2:9e:15:52:05:df:af:b8:ab:ae:68:b0:8b:9e:
         2f:c4:c5:6c:bc:2b:06:1a:3b:e8:f6:82:00:34:d0:cc:47:2a:
         4b:7c:6c:71:62:02:92:40:15:21:47:2f:09:54:96:45:cb:ff:
         84:65:ab:e9:0f:16:73:96:6e:52:2e:22:99:19:d6:8d:1f:e0:
         44:ce:4c:0d:bc:af:fc:a0:24:e8:74:24:cb:76:3c:ba:f4:c7:
         b6:a6:89:4d:e8:6d:4d:86:9f:e2:f5:08:c9:bd:90:1a:68:3e:
         4a:8c:a5:32:5f:fe:e8:fd:07:46:6d:50:b8:aa:dd:66:45:6a:
         7a:ce:f5:8f:09:34:ac:84:fe:1c:d8:eb:9e:f8:d9:ee:32:84:
         9d:7b:03:82:06:f5:e7:ff:99:3d:e3:bb:c0:15:1a:ee:bf:2f:
         9c:7d:ec:df:b9:2d:4d:b2:47:c1:89:63:61:1e:ea:0a:2b:8f:
         84:f7:f3:c2:49:7e:bc:b7:a8:ca:a8:d4:57:64:18:0c:d9:2b:
         3a:ae:c8:16:f5:80:00:c4:19:56:69:ef:a4:28:a6:d8:f0:86:
         33:d9:63:8d:0a:53:bb:7b:e4:8d:b4:b4:5c:d8:79:73:1b:28:
         e9:1f:4f:09:02:4d:4f:3e:2a:d8:f4:20:9e:bd:80:2c:35:e1:
         83:c9:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org