Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136302e302f32342d3234203d3e203238343033.roa
File:                     3230302e39352e3136302e302f32342d3234203d3e203238343033.roa (raw, json)
Hash identifier:          b6wdgadHsP0TDcRtaUjxJCiLIO2hRqPSu4b0X5qfUcU=
Subject key identifier:   3D:5B:04:D3:12:9B:FF:2C:CD:2B:C2:95:5C:6D:69:E0:95:A6:BD:FE
Certificate issuer:       /CN=77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F
Certificate serial:       44F0AEDF6AC47BC48EE7BC025BF41BC12A9B16CF
Authority key identifier: 77:42:6E:74:EC:7A:FB:2A:E9:4A:D7:D0:6F:73:B2:C6:ED:6E:F5:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136302e302f32342d3234203d3e203238343033.roa
Signing time:             Wed 14 Aug 2024 16:05:00 +0000
ROA not before:           Wed 14 Aug 2024 16:00:00 +0000
ROA not after:            Wed 13 Aug 2025 16:05:00 +0000
asID:                     28403
IP address blocks:        200.95.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f0:ae:df:6a:c4:7b:c4:8e:e7:bc:02:5b:f4:1b:c1:2a:9b:16:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F
        Validity
            Not Before: Aug 14 16:00:00 2024 GMT
            Not After : Aug 13 16:05:00 2025 GMT
        Subject: CN=3D5B04D3129BFF2CCD2BC2955C6D69E095A6BDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:15:7b:7f:3a:88:ba:4c:65:db:0c:d1:e3:
                    60:de:6d:30:a1:4b:4e:78:19:0b:fe:8c:65:34:a0:
                    82:fc:ee:84:c8:13:d7:da:9c:02:02:34:1d:1e:90:
                    6d:64:a4:a0:b0:9d:1f:7d:8c:0f:fd:89:63:74:ac:
                    1a:06:18:a1:a3:3e:81:c8:65:10:28:59:ba:53:e5:
                    b8:06:8f:5f:fa:13:26:8f:4c:96:a9:9f:99:0d:c3:
                    ad:be:eb:ff:52:a0:f3:10:b2:6b:7e:1c:79:38:e6:
                    27:a1:d5:84:89:2d:24:d3:90:c0:a7:ad:63:06:b0:
                    e1:4e:89:e4:94:90:9f:63:c8:b1:89:a0:e7:23:48:
                    41:53:f0:c1:08:98:00:06:bd:89:c9:bf:ad:7a:29:
                    bb:34:d1:e1:b1:08:1a:f0:fd:f2:19:4f:9a:1e:ff:
                    9b:e2:18:d2:a8:06:71:3d:70:57:d8:cd:8e:07:a4:
                    79:02:2f:9f:18:c1:4d:87:7b:ea:3b:29:c6:b0:98:
                    ed:32:7c:8a:e1:fe:09:d9:b9:41:52:f6:ad:e5:4f:
                    d0:1f:02:08:fd:f8:e9:bb:80:2e:ba:8a:9d:8c:5d:
                    41:72:10:a4:81:36:1a:f6:1a:43:f8:63:79:b1:a0:
                    08:03:83:d0:31:c6:67:29:13:13:99:62:ac:6d:9f:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5B:04:D3:12:9B:FF:2C:CD:2B:C2:95:5C:6D:69:E0:95:A6:BD:FE
            X509v3 Authority Key Identifier:
                keyid:77:42:6E:74:EC:7A:FB:2A:E9:4A:D7:D0:6F:73:B2:C6:ED:6E:F5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136302e302f32342d3234203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:2d:24:35:07:0d:15:ae:72:e5:54:7d:9a:a6:75:58:89:
         e6:17:87:b9:27:d3:ee:ee:5a:8b:1f:0f:c8:a4:6b:1c:00:14:
         27:95:be:eb:bc:7a:98:40:b0:fc:f3:03:b5:d6:65:da:4b:aa:
         e2:ca:bb:0d:cd:3f:8a:36:6a:d5:76:a9:1e:8e:ad:08:f6:75:
         81:05:af:20:25:31:1b:23:20:40:a8:fb:e8:67:4e:5a:00:0d:
         d3:c8:24:3a:fe:12:e5:f6:22:10:51:72:7f:f7:5b:ec:1f:9b:
         4b:9f:ba:e4:4a:1f:ae:52:cc:af:d4:20:f9:02:82:1e:df:b0:
         92:32:eb:e5:e4:88:82:98:ef:5b:d8:79:21:03:02:b8:81:0d:
         94:1a:6c:5f:77:20:a3:e2:d5:89:82:bf:5a:ec:bf:f9:2e:ef:
         f3:1a:dd:b2:ba:5a:c1:b6:74:ea:08:bf:8a:42:5e:57:8c:3a:
         83:08:6c:5e:25:1b:2d:43:37:5c:1d:6e:d8:f2:37:ec:a2:92:
         ea:9b:0f:2c:72:ee:2f:5b:34:38:5d:ce:a9:09:c4:5e:b4:ed:
         ff:c2:80:fc:50:17:1a:4b:53:9f:04:93:20:32:18:91:0c:3d:
         94:3a:21:7a:c3:be:85:ad:70:b2:08:75:fa:ff:fe:aa:a2:a0:
         f1:9e:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:31:56 2024 by rpki-client on console-ams.rpki-client.org