Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/4eef8700e288cff16d0a1abe23cff7ba3dfd824a.roa
File:                     4eef8700e288cff16d0a1abe23cff7ba3dfd824a.roa (raw, json)
Hash identifier:          6wm6VI5R1vZlptRMa9sWaFQoS8emIC79uK/5hzVEKD4=
Subject key identifier:   D1:0C:9E:9F:48:DA:69:EC:81:71:80:14:11:DF:A1:D3:4E:53:7B:B3
Certificate issuer:       /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial:       042366
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/4eef8700e288cff16d0a1abe23cff7ba3dfd824a.roa
Signing time:             Fri 20 Oct 2023 12:16:04 +0000
ROA not before:           Fri 20 Oct 2023 12:16:04 +0000
ROA not after:            Mon 20 Oct 2025 12:16:04 +0000
asID:                     7004
IP address blocks:        200.91.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271206 (0x42366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
        Validity
            Not Before: Oct 20 12:16:04 2023 GMT
            Not After : Oct 20 12:16:04 2025 GMT
        Subject: CN=4eef8700e288cff16d0a1abe23cff7ba3dfd824a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:a6:92:0e:bc:c4:84:b1:0a:ae:a5:16:59:
                    04:b4:cf:8a:bb:62:22:4e:d8:fe:d1:10:ee:0d:d5:
                    bf:96:a5:b6:60:72:bc:1b:1f:b5:96:16:34:10:e0:
                    35:3c:64:c9:10:34:b4:02:68:c8:d3:f0:98:79:c1:
                    58:46:47:e7:fb:7e:6f:2f:ee:c0:dd:dd:71:fe:f3:
                    be:d4:87:61:e8:95:39:1d:ca:03:7b:92:ba:77:2d:
                    a4:a5:7c:04:1f:f2:51:f0:1b:30:43:1a:3d:71:ac:
                    33:51:3c:3f:d3:7f:ec:c3:c7:2e:21:bc:b4:25:10:
                    74:e4:45:76:73:58:8d:e1:58:f4:6d:31:c4:bb:52:
                    ee:79:77:8b:37:bc:86:cb:f2:08:db:a1:fa:48:17:
                    76:51:ab:ee:8d:2c:2f:fd:35:5c:c0:44:bd:9a:6c:
                    59:d3:02:88:a4:b8:24:bd:a2:bc:b6:24:6a:0e:72:
                    d8:0a:04:01:d8:97:10:9c:d7:f7:23:25:6c:3e:9e:
                    3c:10:5d:8c:eb:cf:d8:00:80:bb:18:68:5d:88:b8:
                    8c:50:8e:39:e8:1e:f3:92:82:1a:e5:4f:ef:cc:6a:
                    90:55:01:66:9f:1e:a2:dd:36:be:05:ac:22:86:83:
                    71:26:d2:30:ea:49:73:a8:10:a9:12:6a:76:23:fb:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0C:9E:9F:48:DA:69:EC:81:71:80:14:11:DF:A1:D3:4E:53:7B:B3
            X509v3 Authority Key Identifier:
                keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/4eef8700e288cff16d0a1abe23cff7ba3dfd824a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:cd:fa:ca:8d:fe:4b:6a:1c:a8:24:5f:20:83:b4:f0:b3:d6:
         f8:f4:b8:de:8e:f2:f0:c0:42:82:76:2a:ea:b3:69:dc:4d:7a:
         6f:f2:c0:cd:d0:80:c2:0f:c3:06:d4:64:09:1b:24:04:f4:6c:
         03:3f:c1:55:83:3b:1b:08:bd:09:2d:56:7d:f2:aa:f4:ef:d8:
         61:51:6d:50:28:09:8d:71:8d:a6:46:ac:e1:83:de:69:6f:fc:
         80:f8:4d:81:19:70:9c:22:c8:38:05:32:93:51:82:b8:15:a2:
         aa:81:48:e0:4c:81:77:cf:fd:9e:82:64:06:fe:b1:0a:61:15:
         11:9c:7c:46:5e:78:53:31:fa:f9:c5:4a:92:4e:67:41:ee:ef:
         6b:6b:7e:cb:f3:a8:34:ad:02:63:1e:82:38:c5:e4:e9:5c:72:
         71:91:14:5f:ae:81:e5:06:da:83:85:07:99:f5:8d:0d:a8:10:
         90:8b:c0:d1:c5:ea:5f:e5:ca:54:bb:bd:e7:ef:7a:ae:23:a5:
         3f:80:ac:22:af:5d:f2:e1:e8:97:54:7b:43:bb:5c:a0:bf:cd:
         1c:4c:aa:a6:2e:69:04:08:70:00:91:9b:23:65:a5:d4:18:98:
         14:14:d9:bb:d5:48:3c:fd:91:86:d0:45:4b:c8:6f:a6:e9:0a:
         78:fe:8f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org