Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/cf4e85bb01aabab36e2a54a5f04c58908d28cdc2.roa
File:                     cf4e85bb01aabab36e2a54a5f04c58908d28cdc2.roa (raw, json)
Hash identifier:          EERbZwBFhR+uz8oCXqAt5AiLzB7PSnIaC5UP1HmrXIM=
Subject key identifier:   A3:56:CB:BB:57:7A:53:E1:93:CC:21:17:9F:8C:6A:5C:F1:5C:F6:12
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       208EFA
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/cf4e85bb01aabab36e2a54a5f04c58908d28cdc2.roa
Signing time:             Mon 03 Jul 2023 13:26:07 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133754 (0x208efa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=cf4e85bb01aabab36e2a54a5f04c58908d28cdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:11:ea:92:df:29:64:74:34:c7:89:ca:17:
                    30:4f:37:65:87:e8:48:06:d9:6c:0e:17:ec:50:d6:
                    81:42:f9:92:e3:31:32:0b:1a:6b:c7:00:ab:b6:c5:
                    f5:d8:a8:71:8a:92:56:be:64:6a:1f:13:37:8b:4e:
                    9f:3c:1b:75:7e:c1:54:78:a9:77:60:f4:ce:07:c6:
                    ee:8a:a6:f1:3e:27:ae:ac:d6:88:f2:47:78:91:a8:
                    36:01:a3:d6:21:9e:e3:22:80:2e:bd:54:19:c4:1c:
                    5d:32:51:c9:04:65:f1:10:62:56:57:35:c2:50:b2:
                    10:96:cb:e9:16:5b:b8:c4:9f:ba:b6:84:22:45:91:
                    36:30:1d:3b:3b:6e:06:5c:ff:20:94:e5:a0:af:5a:
                    e3:88:bd:90:b5:87:aa:e3:fd:60:89:e4:1e:27:51:
                    c0:25:05:4a:d7:5c:56:82:90:9e:9e:27:53:78:a3:
                    33:2f:2b:fe:f5:c2:95:62:7d:d7:f0:4d:42:55:e0:
                    03:d6:5c:1a:00:af:76:a2:81:52:ce:38:17:45:90:
                    fc:bb:70:97:5f:32:51:cb:f2:77:e8:b4:95:ab:4a:
                    eb:2d:ef:7d:86:99:a5:e4:03:43:aa:aa:83:d6:1a:
                    be:fa:f1:e1:c6:1a:b9:b6:f8:59:fa:00:8b:5b:d8:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:56:CB:BB:57:7A:53:E1:93:CC:21:17:9F:8C:6A:5C:F1:5C:F6:12
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/cf4e85bb01aabab36e2a54a5f04c58908d28cdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c4:13:a3:49:40:62:22:f3:0c:a6:52:98:c0:96:83:03:e2:
         a2:7e:2a:cc:70:1c:7b:b9:f3:e7:f6:35:5b:64:7e:70:73:37:
         53:ce:f4:0e:1e:35:d6:33:6c:3d:d8:8e:e6:75:6c:1f:9b:57:
         ea:39:02:a0:b5:73:c5:cc:c5:38:53:8f:b2:de:8f:48:75:04:
         16:b9:b1:68:8b:28:37:80:a7:54:8c:4b:00:cb:4b:a1:83:05:
         27:a6:cc:a7:17:0d:fa:b2:2c:e9:fa:cd:17:2b:06:68:83:75:
         e3:1f:a0:8b:92:94:99:7c:26:dc:14:e0:16:7c:ab:dd:e3:38:
         f3:cd:ab:54:46:29:54:2a:0a:d9:00:9c:cf:cd:ec:d7:a9:bd:
         81:cb:76:7b:bb:dd:e1:21:b2:a1:45:ae:5d:a9:d2:58:7a:52:
         a9:e3:74:6b:35:3f:16:39:10:1d:50:aa:45:af:31:91:8c:4b:
         16:3d:41:35:4f:4e:36:66:ae:7a:97:b4:de:7e:18:2c:90:6e:
         3f:8f:09:67:91:81:60:93:fd:99:5a:70:cc:f9:4b:4a:f1:1c:
         02:57:ba:45:f0:11:2d:a0:1a:92:81:d2:46:fc:83:08:f5:83:
         ec:cc:07:ef:74:b4:5c:f0:65:6e:87:c9:36:a8:38:81:9b:e3:
         12:07:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org