Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/776863e424d79fb80d48ab69879de8f0218c382d.roa
File:                     776863e424d79fb80d48ab69879de8f0218c382d.roa (raw, json)
Hash identifier:          MZvtAN6pcO7QmLKAokY7AvhwVZBDUle2FcyXjhgjEvA=
Subject key identifier:   F3:5E:D0:25:7B:F2:CF:E6:8C:18:AF:D4:9A:23:42:5D:D1:46:24:3D
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       278BDB
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/776863e424d79fb80d48ab69879de8f0218c382d.roa
Signing time:             Tue 13 Feb 2024 16:46:55 +0000
ROA not before:           Tue 13 Feb 2024 16:46:55 +0000
ROA not after:            Fri 13 Feb 2026 16:46:55 +0000
asID:                     6471
IP address blocks:        200.111.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591707 (0x278bdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Feb 13 16:46:55 2024 GMT
            Not After : Feb 13 16:46:55 2026 GMT
        Subject: CN=776863e424d79fb80d48ab69879de8f0218c382d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:4f:d9:bf:76:d0:0f:91:ff:55:5a:fa:c0:
                    a5:b7:4f:7e:4c:12:0b:36:ee:3a:18:56:ac:c0:2e:
                    b4:db:7b:26:5f:b8:e9:5b:d4:ca:44:69:69:3e:41:
                    46:e4:b8:ae:7a:58:04:c2:5f:e5:4d:2f:a9:01:4f:
                    ff:91:ae:70:08:05:4a:fb:00:5d:91:24:9b:e0:21:
                    47:76:72:09:4d:93:0f:24:9b:fa:f1:9a:0c:a3:2f:
                    d9:51:d3:e7:13:9d:fd:ed:ce:88:2f:c2:5d:ad:d8:
                    6a:b9:8a:16:f8:94:ee:7d:04:2b:74:0a:4d:59:77:
                    cf:bd:a3:c4:5b:54:8f:99:bd:c3:af:34:fa:56:d9:
                    a7:10:6a:04:e1:40:b4:8c:ee:a4:d8:e2:9a:13:8b:
                    01:53:a2:b3:c9:c1:00:7a:42:90:e5:64:b3:14:97:
                    4e:75:2a:82:b2:06:98:08:ed:f6:28:2d:99:59:67:
                    39:bf:9b:3b:d5:69:e3:72:39:db:d9:ff:55:09:99:
                    a4:8e:e2:3f:9a:33:fa:d4:ad:a3:f2:6c:5c:dc:44:
                    ab:29:8d:f8:b3:c8:a4:b5:26:69:dd:75:87:43:f8:
                    ab:cd:c4:9f:81:6e:e2:66:2f:d2:35:02:50:bb:e3:
                    8b:1a:f4:de:9a:a0:11:d8:b8:a7:59:9b:d4:8d:43:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:D0:25:7B:F2:CF:E6:8C:18:AF:D4:9A:23:42:5D:D1:46:24:3D
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/776863e424d79fb80d48ab69879de8f0218c382d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.111.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:09:d3:19:8a:a7:6e:21:7a:cc:57:13:54:33:67:c8:a3:50:
         80:b8:92:3d:e1:06:b2:7f:aa:9c:0a:8a:7b:07:42:d1:37:d7:
         9c:33:e3:eb:c6:6c:d1:8a:d8:74:a2:b9:f0:bc:c2:69:6c:fb:
         dc:c5:8b:33:0f:52:fd:c0:f4:ed:b6:e2:c8:c8:a9:5a:4f:6e:
         64:b4:49:af:b2:fb:5b:6c:9f:1e:00:b2:91:38:9e:e8:fd:bd:
         39:69:75:9c:af:d0:4e:8a:66:f6:30:77:d3:ef:c7:81:d4:a3:
         ec:f7:9c:02:71:fa:ad:7e:8a:b0:16:13:65:bd:71:2b:ff:d9:
         41:8d:3f:be:68:12:f6:4d:8b:ea:f7:e0:69:6f:94:98:58:5b:
         7f:51:2b:a1:c5:cb:02:4f:82:de:1e:4e:18:0c:64:bf:04:9e:
         fb:71:52:2c:ec:88:af:df:67:0b:34:d7:17:85:a8:6a:60:78:
         d1:e7:21:40:1c:d1:68:a8:4f:3f:ce:ea:cf:03:d2:82:be:95:
         a9:99:6a:e2:6c:ce:d7:69:1d:9d:a5:b9:27:9c:6e:09:a3:19:
         2b:ef:ef:12:06:b4:49:1a:2e:6c:df:88:9c:10:a0:05:86:bb:
         fb:0a:73:40:10:62:b4:7e:f2:e0:fa:ac:6e:47:91:24:9e:1e:
         ec:d3:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org