Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/b475338c2ff064aa4fbe2cb7e38f50f065cbe32c.roa
File:                     b475338c2ff064aa4fbe2cb7e38f50f065cbe32c.roa (raw, json)
Hash identifier:          IHxcohWMnQZ9WnBEWxrqHUMBa9SvUsbjfevB/uRl2d0=
Subject key identifier:   4B:70:1D:B0:1D:C8:9D:39:22:AA:74:04:1C:DD:A2:31:9E:24:78:DA
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       212D78
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/b475338c2ff064aa4fbe2cb7e38f50f065cbe32c.roa
Signing time:             Wed 19 Jul 2023 15:26:56 +0000
ROA not before:           Tue 18 Jul 2023 15:26:56 +0000
ROA not after:            Sat 19 Jul 2025 15:26:56 +0000
asID:                     26593
IP address blocks:        200.108.84.0/24 maxlen: 24
                          200.108.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174328 (0x212d78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul 18 15:26:56 2023 GMT
            Not After : Jul 19 15:26:56 2025 GMT
        Subject: CN=b475338c2ff064aa4fbe2cb7e38f50f065cbe32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:71:b6:bc:3e:9b:f5:a9:43:18:28:8c:dd:
                    32:fa:3e:5d:0c:eb:ad:27:14:82:71:62:c0:dc:12:
                    c8:bb:73:92:d3:02:41:c7:8a:20:2b:40:a6:6b:47:
                    02:8d:d7:b7:20:94:9d:49:c4:cd:92:3a:93:58:c2:
                    8c:4e:ec:c0:3c:e6:9e:51:e3:3b:fe:6d:4b:18:da:
                    e6:34:cc:e9:d9:10:62:ae:0c:d2:ca:e3:9f:c2:84:
                    aa:3c:9d:d8:59:b7:fc:4d:a9:f3:7a:f1:df:75:e8:
                    72:10:af:41:47:b2:85:ed:91:dd:d5:1f:33:67:72:
                    7f:af:84:a9:94:a9:ea:33:65:af:80:cd:7e:3b:eb:
                    d9:7a:7f:18:c6:e4:66:0e:2c:13:f2:bc:a6:92:6f:
                    e4:a1:df:8b:c4:6c:8b:7b:a5:49:54:8c:30:c4:4d:
                    2b:04:55:1c:d9:a7:e7:9f:24:71:21:df:ce:6b:5b:
                    4b:34:66:86:a3:72:f7:ef:59:cb:a5:c6:c1:d4:fc:
                    d9:03:0d:2f:42:48:7a:b4:42:86:42:c5:50:17:87:
                    3d:9c:65:93:1a:c7:bc:57:5a:25:d3:b5:a5:41:55:
                    47:2c:4a:e9:25:ab:26:35:f5:02:6f:94:11:22:98:
                    d5:b4:3d:93:a6:7c:7e:ca:aa:80:cd:de:67:09:c7:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:70:1D:B0:1D:C8:9D:39:22:AA:74:04:1C:DD:A2:31:9E:24:78:DA
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/b475338c2ff064aa4fbe2cb7e38f50f065cbe32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:2b:f8:59:30:2e:54:e4:de:cd:4a:4b:cf:28:a8:ad:d0:
         72:63:69:98:e3:37:96:11:10:26:ea:41:11:09:fe:37:74:b8:
         30:35:50:04:56:78:37:84:2a:ee:30:a5:ad:eb:13:9a:ca:d8:
         95:17:d1:40:8c:8d:a4:55:15:d8:75:30:75:d4:db:0d:77:28:
         21:08:e9:33:f3:d6:8d:eb:e2:39:bf:15:b2:f4:76:15:94:f8:
         35:cd:d5:65:fc:48:56:3b:72:fe:2e:aa:db:ed:f5:90:da:e6:
         d9:4c:7a:bc:fd:cf:c5:66:4c:a6:c3:26:e3:96:a5:87:e5:9e:
         5f:f1:14:b6:e9:d7:6b:80:20:23:e8:36:ad:40:08:a6:dd:2a:
         36:ed:5d:21:99:a6:6f:90:bf:87:65:5f:04:3d:3b:ef:b4:29:
         da:f1:5c:01:86:03:12:f6:75:16:16:d5:a2:f2:5b:7d:14:9b:
         16:50:bd:a6:64:44:da:79:03:95:63:5b:03:23:36:5b:6c:8e:
         72:3f:08:8c:3a:09:f8:cc:9b:42:97:39:84:de:81:68:a3:be:
         54:16:ab:dd:38:1e:11:23:60:02:36:86:34:ce:75:85:90:79:
         4a:ea:ae:c7:eb:a6:b5:8d:f7:b6:b9:c7:88:1e:4c:e1:6f:c9:
         34:e9:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org