Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/c249e8155d29d68e3e7b961453265e53042b3fc2.roa
File:                     c249e8155d29d68e3e7b961453265e53042b3fc2.roa (raw, json)
Hash identifier:          HoyJaKBO5BWVNLcgpSw+Go8j3RLm5H0eFkEIr+89VyY=
Subject key identifier:   B4:5A:A8:B0:3B:BD:37:3D:54:27:8D:BD:6B:A1:81:8F:17:12:B3:6D
Certificate issuer:       /CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
Certificate serial:       276AC5
Authority key identifier: AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/c249e8155d29d68e3e7b961453265e53042b3fc2.roa
Signing time:             Mon 19 Feb 2024 16:33:34 +0000
ROA not before:           Mon 19 Feb 2024 16:33:34 +0000
ROA not after:            Thu 19 Feb 2026 16:33:34 +0000
asID:                     27784
IP address blocks:        200.115.42.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583237 (0x276ac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
        Validity
            Not Before: Feb 19 16:33:34 2024 GMT
            Not After : Feb 19 16:33:34 2026 GMT
        Subject: CN=c249e8155d29d68e3e7b961453265e53042b3fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:61:1d:da:02:2f:cf:c1:ad:b7:d3:af:c7:
                    95:ce:1f:ec:c3:6a:23:4b:d9:29:86:c5:c9:22:c3:
                    af:79:2d:f0:db:76:77:b0:b8:8a:2c:00:49:61:8c:
                    94:a1:36:d1:0a:f9:ae:42:ef:14:7e:08:ba:a9:c5:
                    94:36:90:97:48:78:67:58:0d:ad:4b:77:43:7b:f3:
                    65:45:bf:65:ad:d9:e3:30:de:65:b4:9d:59:b7:99:
                    13:d0:25:bb:00:44:8b:14:55:0a:26:8e:1e:94:d4:
                    37:28:62:5e:fd:aa:8f:4a:7b:73:4f:a4:51:75:d6:
                    73:f6:d6:29:b0:37:87:fe:1b:4e:c1:48:34:0d:85:
                    0c:b4:0c:0b:d1:1f:44:dd:af:be:e9:42:32:db:ea:
                    f4:e0:3a:5f:07:68:6d:6c:74:10:f1:27:a0:2c:cc:
                    1c:a0:2b:58:81:8f:3a:1d:4e:4c:4f:83:e4:c3:36:
                    35:90:06:92:36:91:a0:7c:2d:98:68:f3:df:b8:5f:
                    a6:37:61:89:72:e3:ce:07:9b:de:4a:8f:5f:2c:e5:
                    41:7a:ca:78:ab:40:4f:ab:e1:11:92:6d:65:67:60:
                    0d:14:4e:65:a0:fc:91:62:87:61:6c:7a:7a:c3:69:
                    ec:00:fd:ff:82:97:78:1c:05:ae:32:65:63:ec:d2:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5A:A8:B0:3B:BD:37:3D:54:27:8D:BD:6B:A1:81:8F:17:12:B3:6D
            X509v3 Authority Key Identifier:
                keyid:AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/c249e8155d29d68e3e7b961453265e53042b3fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:6f:0a:50:99:da:0d:d6:b6:74:f1:75:9b:87:a5:62:d9:
         a6:bc:91:47:08:8f:38:79:b3:87:54:77:4b:33:cc:b1:50:18:
         3c:31:ef:b3:ce:24:f9:69:7e:11:52:82:45:d7:6c:21:85:4b:
         ed:7b:65:06:d6:82:7f:ad:3b:d0:91:8c:07:ad:28:c7:83:e5:
         c4:4d:96:bd:94:de:15:73:de:38:24:d8:4d:39:27:6a:7a:17:
         0b:75:02:2b:74:8a:e8:73:6a:30:9c:74:2c:5f:f4:23:c0:3f:
         af:ba:36:03:ef:f7:f0:81:e1:6c:7a:c0:9e:ba:37:4e:bf:47:
         38:93:0d:b7:5d:93:41:10:89:4c:fe:2e:b7:e5:69:60:1b:6f:
         32:58:6e:cf:e6:43:5f:1a:48:18:8a:ad:40:b8:65:1f:75:00:
         1e:1c:49:ec:73:8a:1a:39:17:a7:cb:5c:0e:02:77:52:59:61:
         1c:ff:15:5e:d1:36:d8:3d:5b:fb:19:72:00:3a:db:42:bd:5a:
         7f:a6:d6:f3:2d:85:eb:ce:98:09:3b:cc:13:46:e7:00:09:e2:
         92:12:57:33:58:9b:2a:2b:02:2b:64:f0:46:51:1d:5a:47:55:
         6d:14:61:e3:cd:81:09:e1:99:dd:15:53:3a:7e:b2:b4:87:e6:
         2b:50:54:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org