Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b5bb7bf-1fa2-4966-9ec7-c6de645e1020/efa9ff5b759dda846f3e0e79a32daca638f8e2f7.roa
File:                     efa9ff5b759dda846f3e0e79a32daca638f8e2f7.roa (raw, json)
Hash identifier:          wZb7RoP02t4CUQNANBm8fqLCCJotPxwaTGkwG/BM1jI=
Subject key identifier:   C8:EA:54:EB:01:48:CD:05:74:A3:0C:9C:99:14:5F:62:86:EE:67:95
Certificate issuer:       /CN=abd2921dc0451a5cf31ec24fa6addc81bd86fef3
Certificate serial:       38CE
Authority key identifier: CC:80:81:70:12:8A:5B:C7:B0:E1:8D:9E:C6:AA:46:45:11:2F:F0:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abd2921dc0451a5cf31ec24fa6addc81bd86fef3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b5bb7bf-1fa2-4966-9ec7-c6de645e1020/efa9ff5b759dda846f3e0e79a32daca638f8e2f7.roa
Signing time:             Fri 07 Oct 2022 18:26:23 +0000
ROA not before:           Fri 07 Oct 2022 18:26:08 +0000
ROA not after:            Mon 07 Oct 2024 18:26:08 +0000
asID:                     23201
IP address blocks:        200.9.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14542 (0x38ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd2921dc0451a5cf31ec24fa6addc81bd86fef3
        Validity
            Not Before: Oct  7 18:26:08 2022 GMT
            Not After : Oct  7 18:26:08 2024 GMT
        Subject: CN=efa9ff5b759dda846f3e0e79a32daca638f8e2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:58:59:e8:db:98:47:30:22:ba:b9:1f:07:
                    4a:83:8f:1c:84:af:50:3e:94:a7:f4:48:0e:e2:0e:
                    cd:4a:58:94:fb:c9:2f:1d:5d:6d:b3:ab:d0:16:ec:
                    94:7c:ce:bd:bd:af:3d:91:2c:13:2e:6b:8b:c1:63:
                    da:d4:9a:0b:8b:6a:56:e9:08:d6:03:95:22:76:ea:
                    db:38:d8:d0:14:92:33:6c:0d:b2:5e:83:b1:d8:2b:
                    71:8b:06:eb:40:75:1d:ee:05:1c:96:d5:f9:86:63:
                    13:85:10:93:a5:74:ca:14:fa:90:ff:0c:b0:33:98:
                    2d:b4:61:68:6a:3a:c3:19:d1:04:dd:9e:14:c4:7f:
                    0f:21:d8:54:75:f5:79:12:a7:43:4a:ae:e1:65:cc:
                    1a:23:69:22:56:5c:b5:73:af:03:ce:c8:a8:10:38:
                    db:03:09:36:1f:f2:e7:a4:7b:75:58:b4:95:79:d6:
                    15:fe:46:84:e1:cb:75:66:4c:13:43:a4:ae:f1:06:
                    d9:7b:8d:5c:c3:68:95:d3:f2:d8:5b:66:9e:13:c9:
                    36:05:31:a7:01:d6:4e:9e:b3:37:1a:b2:97:a2:18:
                    2a:83:96:d7:e3:de:4e:71:03:b4:af:40:a4:a2:b0:
                    95:38:96:a4:33:a0:bc:e3:68:63:f1:35:57:09:f9:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:54:EB:01:48:CD:05:74:A3:0C:9C:99:14:5F:62:86:EE:67:95
            X509v3 Authority Key Identifier:
                keyid:CC:80:81:70:12:8A:5B:C7:B0:E1:8D:9E:C6:AA:46:45:11:2F:F0:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abd2921dc0451a5cf31ec24fa6addc81bd86fef3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b5bb7bf-1fa2-4966-9ec7-c6de645e1020/efa9ff5b759dda846f3e0e79a32daca638f8e2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b5bb7bf-1fa2-4966-9ec7-c6de645e1020/abd2921dc0451a5cf31ec24fa6addc81bd86fef3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:20:75:9f:79:62:a3:f0:12:ed:1d:15:11:00:ed:5b:7d:5e:
         41:77:ff:33:c6:d0:11:c5:52:96:0c:51:8f:b0:23:9b:60:d9:
         59:20:71:bf:1c:cf:27:9f:ea:60:6b:01:ec:2d:6a:ac:c3:3c:
         c6:cc:ae:c4:90:2f:d4:a3:5f:e9:ac:6f:c7:45:5e:02:56:14:
         2c:b9:d7:2d:e5:2b:93:17:5d:cf:92:a7:90:e1:af:de:f8:00:
         db:b3:17:2d:90:d2:9d:d1:78:46:31:3b:b4:89:9d:79:59:c9:
         47:4e:ac:88:63:85:86:7a:a4:27:77:61:98:e8:f6:98:eb:c5:
         ff:d0:43:68:9b:91:cc:44:24:94:a2:f0:d7:1a:83:07:59:43:
         a2:65:ff:7e:62:72:b3:67:f9:d0:56:5b:17:15:b6:69:bf:51:
         5f:a2:38:d8:38:2f:0b:1a:4f:18:38:cc:a3:64:f7:26:8a:c3:
         92:00:cd:bd:05:cb:e7:8a:6e:e4:44:f2:19:7b:ea:5d:fa:62:
         23:f0:aa:2a:e8:86:e8:72:7c:4b:00:50:eb:0e:0a:ea:c5:83:
         b3:f1:05:c6:4e:68:1c:6b:8a:c0:b3:4a:8d:b4:53:33:af:bb:
         c9:06:8a:fe:e1:cd:bb:53:0e:bf:78:09:0b:0b:d9:93:5a:07:
         24:11:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org