Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/96b094cfd5256d514c3c3fc92c2ffaf12435ba20.roa
File:                     96b094cfd5256d514c3c3fc92c2ffaf12435ba20.roa (raw, json)
Hash identifier:          qcaDEUP70gJFCyREMCWA31lKXUySIuq4XtAWdcp0eMw=
Subject key identifier:   20:2C:A5:74:27:FF:82:C9:6F:31:ED:D6:75:A0:C6:17:5E:69:54:06
Certificate issuer:       /CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
Certificate serial:       0D0273
Authority key identifier: AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/96b094cfd5256d514c3c3fc92c2ffaf12435ba20.roa
Signing time:             Wed 24 Mar 2021 14:39:49 +0000
ROA not before:           Wed 24 Mar 2021 14:39:47 +0000
ROA not after:            Tue 24 Mar 2026 14:39:47 +0000
asID:                     27784
IP address blocks:        200.115.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852595 (0xd0273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
        Validity
            Not Before: Mar 24 14:39:47 2021 GMT
            Not After : Mar 24 14:39:47 2026 GMT
        Subject: CN=96b094cfd5256d514c3c3fc92c2ffaf12435ba20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:60:23:5e:77:69:b0:79:f2:ed:85:65:16:a5:
                    34:a9:99:ce:32:81:69:7d:d8:9f:d4:1a:cc:8f:2b:
                    d1:5f:c3:a0:44:9b:47:75:f1:3c:d7:6e:9f:c8:de:
                    e2:c0:03:bc:6b:19:1b:fa:7c:d3:78:c5:2e:d2:e7:
                    e4:45:10:f1:b3:74:b9:b4:d9:98:a2:96:6d:ee:2e:
                    68:c3:1d:dd:0a:38:c7:f1:0e:c7:05:fe:71:c3:5f:
                    98:a3:ae:52:5c:5c:1a:62:73:96:b0:76:2f:e1:28:
                    53:d1:d6:d4:da:6a:3c:a3:f3:01:a6:2b:c9:57:a4:
                    6f:07:6b:07:7f:08:58:4b:9a:3b:40:bf:b1:f9:c7:
                    f9:92:59:14:b4:ad:8e:74:eb:27:23:f4:4c:01:c5:
                    81:ef:aa:bc:b3:78:13:b0:fd:fb:f3:67:52:e3:8e:
                    7f:21:d3:8c:85:a9:4a:74:7d:34:6f:fc:af:45:01:
                    3e:a7:a8:dd:b6:cb:e1:7d:74:7c:8f:6a:8d:32:49:
                    c4:03:eb:a0:6f:07:07:ce:2b:d5:93:13:5c:91:f6:
                    72:d6:44:fd:87:83:7b:0a:29:15:b9:34:ed:8e:4c:
                    1f:11:d6:04:a0:15:e8:67:bb:7d:f2:0a:f2:26:8c:
                    d1:d8:d2:df:5c:80:18:ec:f4:eb:06:ab:c8:09:e4:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2C:A5:74:27:FF:82:C9:6F:31:ED:D6:75:A0:C6:17:5E:69:54:06
            X509v3 Authority Key Identifier:
                keyid:AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/96b094cfd5256d514c3c3fc92c2ffaf12435ba20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:13:3a:34:4e:2c:7c:70:71:dd:a5:49:b8:86:45:c3:d3:82:
         e0:61:12:89:6d:c3:7d:f2:a6:2e:d0:d7:14:fe:64:54:cf:44:
         7d:df:42:ae:b8:01:53:6a:f4:b2:da:3f:dc:d9:62:1a:49:82:
         b1:32:30:5f:56:cd:bd:1c:81:b4:c1:f0:26:3b:7e:37:dc:b9:
         d9:64:45:ce:9f:6e:16:f3:00:f0:f9:7f:22:a2:cf:5b:74:ad:
         fc:68:25:3b:11:f4:be:b9:ed:5f:91:ee:a8:59:ba:62:0f:c7:
         e5:c0:6b:03:c0:c4:56:2c:e8:d3:d8:89:26:25:ee:1c:78:35:
         ad:01:e9:4d:a7:e2:da:bb:66:1f:37:71:be:25:cf:a0:c8:9b:
         99:8a:e4:fb:c8:4e:5b:75:ca:18:0d:4c:7f:d1:a2:2e:78:ec:
         67:16:b3:82:a1:40:83:8e:51:88:01:99:9f:56:c6:f0:51:a3:
         c9:af:03:ac:5e:05:76:e7:e5:58:9a:1e:77:07:9d:dd:a4:6a:
         6a:58:87:8a:f6:fd:dd:4a:ca:fb:68:b8:5c:f8:ce:e4:e8:be:
         25:40:8e:0e:c0:01:32:b5:43:de:f9:d6:a4:bc:cd:0e:d4:07:
         af:07:c5:90:c6:26:9c:83:8d:39:6b:1f:e4:11:71:6f:0a:c6:
         e7:da:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org