Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8e07933b30f932289ed83e4c963760d7810ed43b.roa
File:                     8e07933b30f932289ed83e4c963760d7810ed43b.roa (raw, json)
Hash identifier:          b8gq/06xWSdITEHycb8ZlRkAH8ryQqCRBcb8jTxltLg=
Subject key identifier:   07:1C:BD:43:A4:C9:49:6C:16:79:09:A8:E4:88:46:83:41:4F:D8:46
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20CFD2
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8e07933b30f932289ed83e4c963760d7810ed43b.roa
Signing time:             Mon 03 Jul 2023 13:26:34 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     262182
IP address blocks:        200.108.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150354 (0x20cfd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=8e07933b30f932289ed83e4c963760d7810ed43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:41:36:00:1a:e3:0a:6a:29:0a:7a:a8:e4:fe:
                    1f:3d:f4:cd:4f:dc:89:1b:27:d3:46:6b:39:ca:e8:
                    3c:c8:68:f0:d2:37:40:86:17:94:a6:fd:46:a5:3f:
                    be:08:58:11:05:05:2f:67:86:f1:05:5f:7d:21:e4:
                    06:4a:0c:01:78:b2:7c:07:60:1d:b2:0c:14:67:82:
                    cb:a1:69:52:34:97:52:6b:c8:2e:aa:27:b1:89:8c:
                    ce:38:c7:ed:55:fe:69:31:93:40:4e:5e:d5:93:6b:
                    2d:39:8c:22:de:9b:5d:97:9a:80:b2:96:e4:a7:91:
                    25:c2:0f:93:f5:81:c9:84:81:53:d1:f8:22:c8:22:
                    64:90:50:0c:80:79:ce:48:9f:07:e9:08:df:57:fa:
                    ff:79:70:c5:08:00:52:50:4d:17:88:9f:e0:87:03:
                    65:b7:fe:ed:72:60:7a:15:14:ed:39:ac:cf:1c:06:
                    88:0b:4d:10:76:4e:be:7a:a2:46:42:05:b3:f3:48:
                    a2:d5:ce:ef:a3:95:fd:88:e8:34:d2:d1:19:ca:7a:
                    1f:e0:51:06:35:bd:c0:b2:71:50:21:48:47:a6:72:
                    e0:28:8e:00:2b:dd:33:cf:1c:d9:f8:63:83:e7:0a:
                    a1:37:d2:5b:4c:ca:a8:bc:99:f8:e4:65:bf:a3:8f:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:BD:43:A4:C9:49:6C:16:79:09:A8:E4:88:46:83:41:4F:D8:46
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8e07933b30f932289ed83e4c963760d7810ed43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:42:88:55:f7:c6:5f:01:d5:b9:0d:07:2c:65:91:72:05:e9:
         d7:b9:2d:b5:72:ba:65:c7:26:de:79:be:51:be:1c:54:89:92:
         97:e4:c6:53:ff:be:36:0a:1e:ef:bd:1b:75:eb:70:7b:07:b3:
         56:e8:93:57:06:6e:51:5b:1d:7b:54:10:c8:de:70:89:be:11:
         c8:93:da:e0:dc:9c:a6:10:d8:48:50:a3:d3:c2:bd:b6:b2:1f:
         10:e9:5c:c4:5f:78:91:49:7d:32:db:6a:c7:b3:22:10:0f:d6:
         c3:eb:3a:50:20:3b:b4:34:85:60:9e:92:c4:6f:56:ac:5d:d7:
         bb:0b:df:79:c1:f1:f4:c1:34:f6:fb:45:c0:a6:7e:af:64:37:
         b7:bd:e1:c0:e4:12:2b:82:5c:1d:10:72:40:16:7d:b2:9c:cb:
         02:0d:16:2a:69:cb:41:ba:2f:68:05:43:c7:e6:00:bd:07:36:
         26:79:36:11:af:f2:ec:60:e5:5a:c6:42:0f:3e:a9:cc:f8:bc:
         59:ff:3a:69:20:01:6c:db:ab:25:9a:18:d8:e3:1c:b9:99:89:
         12:8b:71:dd:b1:a8:f4:91:d2:bf:57:06:e3:55:21:0f:4d:a7:
         f4:b1:c5:7a:5e:9d:f7:33:60:76:63:9b:33:50:b4:53:23:cb:
         99:33:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org