Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136332e302f32342d3234203d3e203238343033.roa
File:                     3230302e39352e3136332e302f32342d3234203d3e203238343033.roa (raw, json)
Hash identifier:          bZB90dEQmCzzQbsgXptTtvQUMBHOb8RVTxTN9bCnz/8=
Subject key identifier:   B1:87:EA:40:C2:CB:E3:A3:02:36:CB:E2:59:4C:21:57:9B:46:85:32
Certificate issuer:       /CN=77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F
Certificate serial:       44EC934513EB2B2CD8DDEB3283EA7FF612687308
Authority key identifier: 77:42:6E:74:EC:7A:FB:2A:E9:4A:D7:D0:6F:73:B2:C6:ED:6E:F5:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136332e302f32342d3234203d3e203238343033.roa
Signing time:             Wed 14 Aug 2024 16:05:00 +0000
ROA not before:           Wed 14 Aug 2024 16:00:00 +0000
ROA not after:            Wed 13 Aug 2025 16:05:00 +0000
asID:                     28403
IP address blocks:        200.95.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:93:45:13:eb:2b:2c:d8:dd:eb:32:83:ea:7f:f6:12:68:73:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F
        Validity
            Not Before: Aug 14 16:00:00 2024 GMT
            Not After : Aug 13 16:05:00 2025 GMT
        Subject: CN=B187EA40C2CBE3A30236CBE2594C21579B468532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:87:6e:2b:78:7a:e5:58:f4:02:fc:64:2e:
                    96:ba:f5:07:e4:30:b5:f2:44:9b:ff:45:55:75:5a:
                    8a:d4:45:03:42:4c:a6:e3:51:fc:6a:d5:96:42:79:
                    46:0e:c5:d5:16:d9:86:0a:34:5d:df:ee:58:46:23:
                    7f:e5:c2:bc:31:82:c5:bb:5d:1a:56:8c:78:93:d7:
                    d5:b7:ac:75:27:a0:ba:de:80:a6:3a:74:c3:bc:0c:
                    1a:4b:7b:25:c3:71:cb:be:8b:c0:97:07:14:37:ae:
                    e3:19:b4:a3:a0:19:c3:bf:50:73:b0:76:21:88:de:
                    e0:ec:ab:89:7e:64:44:c6:8d:c0:2c:68:8f:52:34:
                    44:f9:31:bd:b9:8b:e6:35:48:f7:ae:88:8c:16:60:
                    0e:dc:aa:e9:b7:84:03:8e:44:c3:3e:1b:7e:68:cc:
                    c3:16:c9:d0:c8:87:76:11:27:a2:b1:ff:29:58:5f:
                    7a:8c:6c:fa:54:c2:6d:bb:ef:0e:63:69:c2:d6:0c:
                    dd:8b:0f:2e:9c:b5:59:b3:01:cb:91:15:59:1e:8a:
                    d9:00:44:a0:ec:8b:8d:a7:35:c0:b7:6b:93:d2:ac:
                    74:82:ae:db:d8:d8:c0:66:8f:2c:78:ce:14:f7:a6:
                    0d:17:e8:f9:83:ea:89:e6:4c:7d:e9:e9:08:9f:bf:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:87:EA:40:C2:CB:E3:A3:02:36:CB:E2:59:4C:21:57:9B:46:85:32
            X509v3 Authority Key Identifier:
                keyid:77:42:6E:74:EC:7A:FB:2A:E9:4A:D7:D0:6F:73:B2:C6:ED:6E:F5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136332e302f32342d3234203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:95:e7:44:ca:6c:da:73:50:af:8b:7e:74:5f:36:5e:7f:
         25:87:be:ed:fa:de:26:c9:c5:d1:17:6e:47:6e:75:0a:45:64:
         76:85:0d:c6:ea:88:ac:9b:71:98:83:57:a9:f9:aa:e2:d1:86:
         91:df:86:08:a2:f1:22:b9:9f:5c:74:12:eb:b7:66:ef:c3:56:
         54:f8:96:f5:1d:dc:fc:c7:e1:10:7e:b4:62:2b:f0:db:83:0f:
         3b:43:15:38:a0:7f:a9:3c:f7:34:c9:21:47:23:c7:6c:99:62:
         ed:b8:0b:dd:2a:b3:01:01:1e:12:02:e4:6c:35:5e:c6:62:47:
         7c:1f:75:5c:88:09:71:c7:e2:9e:f4:dd:ec:2c:7a:71:ad:4b:
         11:51:12:08:32:39:1f:dd:ce:0b:97:3c:d8:c7:31:d6:6d:03:
         8e:11:48:82:41:36:6f:bd:38:be:48:be:46:89:b8:f5:99:cd:
         16:ef:94:cb:24:5f:4d:ef:49:fe:66:6b:17:4f:a2:5e:25:45:
         29:20:86:68:69:68:eb:77:c4:4d:6b:b1:3a:49:37:91:28:e5:
         19:45:fa:27:b4:38:63:cb:a8:0f:64:d2:61:1d:c1:18:51:d5:
         ba:85:91:e9:9e:8b:4b:fa:3a:8d:46:e6:7e:90:c6:c4:ca:7f:
         eb:ad:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:31:56 2024 by rpki-client on console-ams.rpki-client.org