Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/f40b3f1003200a8e80fd86d8a8c4d7be8007cbce.roa
File:                     f40b3f1003200a8e80fd86d8a8c4d7be8007cbce.roa (raw, json)
Hash identifier:          qny9KEqr8VTiSTPtmFMD1ai7UpYvCQamA0l9HcJ6IYc=
Subject key identifier:   C9:55:FF:70:F3:1E:63:E3:06:28:B8:A0:17:D1:5D:2C:26:B8:44:2A
Certificate issuer:       /CN=893407337be5ac09529c27b6e17d4d0664581246
Certificate serial:       201253
Authority key identifier: 1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/f40b3f1003200a8e80fd86d8a8c4d7be8007cbce.roa
Signing time:             Tue 27 Jun 2023 21:39:16 +0000
ROA not before:           Mon 26 Jun 2023 21:39:16 +0000
ROA not after:            Fri 27 Jun 2025 21:39:16 +0000
asID:                     26593
IP address blocks:        200.108.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101843 (0x201253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893407337be5ac09529c27b6e17d4d0664581246
        Validity
            Not Before: Jun 26 21:39:16 2023 GMT
            Not After : Jun 27 21:39:16 2025 GMT
        Subject: CN=f40b3f1003200a8e80fd86d8a8c4d7be8007cbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:30:8d:51:f9:cf:37:5b:0a:45:c0:6a:6b:
                    ab:e7:ac:2d:3f:c2:eb:58:b8:2c:25:90:4a:27:18:
                    3a:d7:6c:6f:f9:52:cc:8d:6b:c0:75:ee:ce:08:2b:
                    60:fc:4e:1b:54:69:72:ff:66:47:90:8b:0d:ea:e4:
                    9a:32:ca:2e:9c:f2:2b:7b:88:c9:88:7b:a4:bd:e4:
                    2e:19:00:8d:78:6c:16:0b:03:78:9a:98:ff:4b:a4:
                    55:9d:e1:90:c7:db:49:dd:1d:18:02:68:6a:9a:e5:
                    d7:8e:79:3b:14:86:4e:7a:96:2f:50:cc:6a:46:2f:
                    d8:38:66:bc:da:06:8f:fa:6b:f8:fc:78:39:81:13:
                    73:f3:ce:56:ef:e5:5d:e4:49:f2:42:a7:f8:0b:dd:
                    16:78:4a:de:0b:5a:1c:7f:55:d5:50:40:ec:f0:c4:
                    9e:8b:35:38:60:2c:b3:a1:d9:cf:de:b3:2f:99:53:
                    21:f1:3f:7a:df:e2:dc:05:0a:c3:c4:a3:f4:74:75:
                    9a:77:86:9c:db:9c:87:c6:42:bc:1c:69:8a:0f:5e:
                    83:f5:f6:9c:15:65:bf:15:ef:68:2a:5a:df:5e:b0:
                    64:8e:79:49:f5:76:37:89:5d:fe:16:1f:4a:a2:93:
                    f2:ff:1b:46:48:b8:7d:16:86:c1:88:7f:c8:3c:79:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:55:FF:70:F3:1E:63:E3:06:28:B8:A0:17:D1:5D:2C:26:B8:44:2A
            X509v3 Authority Key Identifier:
                keyid:1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/f40b3f1003200a8e80fd86d8a8c4d7be8007cbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/893407337be5ac09529c27b6e17d4d0664581246.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a9:db:1b:93:d3:b5:16:d7:a9:6f:fa:b2:73:2c:f2:50:6e:
         a1:5a:82:cd:16:2a:2e:51:86:83:67:2c:d7:7a:56:ec:1b:fd:
         cd:c6:b2:17:24:3e:b3:ed:d0:e4:ef:ee:14:6c:15:d4:bb:71:
         ac:fe:77:0d:58:4c:36:95:09:7f:e2:54:c0:9f:1d:8c:62:a9:
         64:d7:9b:13:9f:c9:5c:e0:c6:a4:2e:16:0d:96:25:87:7c:30:
         a7:84:61:1e:07:f3:67:93:87:ea:96:31:f8:b0:18:18:b5:c3:
         f8:d4:65:f7:89:9e:39:c4:1d:aa:d8:da:53:ec:c6:1b:48:55:
         b4:c2:b3:65:1e:65:bf:93:7d:05:e6:df:aa:d5:cf:dc:8e:34:
         00:48:11:ce:d8:e4:7e:45:99:2d:33:8f:12:3e:80:cc:27:d7:
         8b:c5:e1:3c:81:67:69:76:e3:14:e6:83:d8:14:c2:b0:55:5d:
         ff:04:95:63:76:4e:99:d7:45:0e:2a:a4:c6:62:ce:33:27:5b:
         7c:00:ee:b6:ff:88:ad:17:2d:bd:a3:93:ba:0f:ee:d2:f9:6e:
         75:e1:11:7e:a0:6a:7e:69:5b:db:b7:61:ae:14:47:b5:cd:6a:
         34:cf:0f:2a:5f:00:27:70:17:d6:3b:a5:db:f8:f1:62:83:65:
         f9:66:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org