Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/6ef0307578207f5f9961db3fbdb84e5e59df0091.roa
File:                     6ef0307578207f5f9961db3fbdb84e5e59df0091.roa (raw, json)
Hash identifier:          CPRtEvbp0ujK2Dq0/Wp9mQcDhwbFX9wJqsiO1whivIk=
Subject key identifier:   30:0D:C4:33:54:18:19:0E:10:B0:37:E2:E9:71:4F:EB:1F:F7:6E:39
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       27859C
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/6ef0307578207f5f9961db3fbdb84e5e59df0091.roa
Signing time:             Tue 13 Feb 2024 16:40:39 +0000
ROA not before:           Tue 13 Feb 2024 16:40:39 +0000
ROA not after:            Fri 13 Feb 2026 16:40:39 +0000
asID:                     6471
IP address blocks:        200.72.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2590108 (0x27859c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Feb 13 16:40:39 2024 GMT
            Not After : Feb 13 16:40:39 2026 GMT
        Subject: CN=6ef0307578207f5f9961db3fbdb84e5e59df0091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:0a:41:c5:18:90:f6:10:46:9d:d0:a3:c1:
                    d0:0b:d0:43:4b:e1:70:16:06:b7:d6:7f:1a:af:38:
                    66:97:c5:d9:1a:ea:2a:59:a4:37:38:a1:a8:48:20:
                    a4:66:57:c0:16:2f:5e:b5:a6:7b:b5:3c:71:06:d2:
                    4e:5e:3b:27:58:e1:57:8f:ff:69:65:90:a9:fa:71:
                    42:82:66:10:24:23:5f:1a:9b:d3:60:64:b2:28:58:
                    54:d6:29:3c:54:74:25:2f:65:c5:8f:09:53:c4:c3:
                    42:4b:69:77:b4:e1:51:14:1b:21:86:5e:a3:ec:a6:
                    a7:8f:42:f5:f4:b3:37:69:13:17:9e:f7:96:47:ca:
                    d3:c5:27:ed:c0:8a:ee:2f:b9:e9:48:d2:cb:fa:62:
                    56:4d:0f:15:7d:0c:d3:a5:f2:ef:50:2a:a0:d3:ec:
                    da:8d:b7:27:72:d1:7b:d5:f2:8d:d4:c2:44:cf:de:
                    5c:14:27:45:ad:e5:b6:3a:b3:bc:14:9b:80:bd:7e:
                    52:99:7a:f2:12:b9:26:ba:a5:8a:70:39:bc:11:ce:
                    a2:29:1b:4d:f6:c3:73:fd:83:fc:85:a0:b9:82:bd:
                    53:c9:fb:7e:43:0f:a1:97:da:eb:b7:e2:e0:6d:da:
                    42:3c:c2:47:ac:e3:e2:9f:73:d4:84:5b:1a:5c:ea:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0D:C4:33:54:18:19:0E:10:B0:37:E2:E9:71:4F:EB:1F:F7:6E:39
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/6ef0307578207f5f9961db3fbdb84e5e59df0091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:df:3d:d1:a1:1a:d1:8a:bc:2e:7a:fb:f5:69:fe:52:1e:
         cc:8e:b4:6e:46:d1:b1:ca:d2:65:27:8a:e8:32:ba:fe:fc:9b:
         93:09:4d:4a:3e:33:70:55:a8:90:3a:f7:40:cc:c1:8d:2d:a5:
         ac:2a:e8:f4:6c:09:8f:3f:94:e0:5c:b6:a4:23:1c:5b:d9:af:
         6f:db:83:be:9c:d0:64:3c:ef:67:29:e8:cc:21:41:dd:58:d9:
         69:e3:ae:61:fb:7b:4d:51:47:35:27:98:41:84:e5:1a:13:82:
         90:eb:18:3d:5c:d5:d4:e3:ad:0b:8f:15:90:03:c3:98:c1:77:
         96:84:61:90:18:86:6b:a8:51:6a:b3:42:bb:96:f8:84:7b:42:
         33:c1:f6:67:64:1e:04:74:5e:22:1e:ff:7b:39:91:3f:03:5b:
         59:8f:70:20:a6:97:58:51:03:e2:7d:50:c1:b3:0a:b9:a3:22:
         bb:4e:cf:ca:07:a2:69:0e:79:fb:a3:1a:aa:30:17:b4:bd:6e:
         24:fc:4e:51:a1:55:6f:ca:88:76:11:48:8d:e6:ec:9b:3c:0b:
         e1:f6:c5:d4:3e:04:4a:39:63:61:cb:fd:75:c1:ab:f3:24:d3:
         1c:8d:43:6e:5a:9d:45:73:af:df:48:6b:33:af:00:55:2d:54:
         58:d3:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org