Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/07684954833b07ba8e37ef8baa9119b35a0636db.roa
File:                     07684954833b07ba8e37ef8baa9119b35a0636db.roa (raw, json)
Hash identifier:          5n9nDy5nggd7TFsj3Zpnz91RUaxmInNXfLwGS4toniI=
Subject key identifier:   90:DB:88:73:94:C9:47:59:AB:71:E9:20:2B:90:47:8A:0B:98:72:47
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       091D51
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/07684954833b07ba8e37ef8baa9119b35a0636db.roa
Signing time:             Fri 15 Mar 2024 12:47:31 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     6503
IP address blocks:        200.23.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597329 (0x91d51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=07684954833b07ba8e37ef8baa9119b35a0636db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:b0:e1:f5:d9:ef:1d:dd:6a:c4:83:5a:bf:
                    a3:3d:25:06:af:a1:92:f8:78:92:38:f0:fe:22:d3:
                    88:fb:2b:1c:1b:6f:a3:15:e9:68:25:7b:80:49:de:
                    1b:dd:61:3d:af:a8:52:25:80:0b:7a:ca:38:bf:44:
                    34:cf:71:b0:63:be:c7:73:1e:cc:35:c5:68:1b:5c:
                    a0:f7:68:2b:7c:a8:5d:cc:b7:30:bb:ae:b0:7a:31:
                    02:e3:49:ae:8c:d8:e1:5d:66:23:81:99:f5:1d:de:
                    8b:4f:27:46:27:be:10:55:79:3f:c9:31:10:95:41:
                    b3:9a:c6:9b:69:f1:df:83:29:2a:2a:eb:76:14:ea:
                    b0:27:0d:f4:6c:c6:1a:68:fa:f6:ae:80:34:e4:45:
                    63:a8:c3:d5:b7:4d:fd:bf:49:ac:c2:d2:a5:f2:81:
                    d8:9d:6f:60:d1:be:a3:af:ee:9f:a5:50:17:4f:8a:
                    61:54:1b:d2:ff:05:71:a5:7a:b8:df:7e:7b:b0:c3:
                    c8:ca:8c:ab:30:08:f5:d5:e8:ad:40:76:7d:89:3c:
                    a8:df:6b:0a:ea:2a:7e:e4:21:35:36:25:2b:d6:48:
                    92:66:11:f2:b3:73:b5:03:e4:f9:4c:44:e5:4a:9d:
                    2d:8f:49:85:4e:8a:3e:00:ad:ac:9e:b2:54:d5:ef:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DB:88:73:94:C9:47:59:AB:71:E9:20:2B:90:47:8A:0B:98:72:47
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/07684954833b07ba8e37ef8baa9119b35a0636db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:d1:d2:5d:8f:4f:16:e3:9b:05:b8:c6:27:5d:0c:46:4c:
         d9:b8:57:5e:15:eb:45:29:d1:c8:50:00:75:b6:e6:f6:fb:97:
         5d:22:e9:e4:de:1f:f0:7b:b5:ed:b8:55:47:bc:65:d9:fd:d7:
         4c:f6:ef:8c:b2:25:17:6a:f5:71:1f:d0:ee:3a:69:53:42:da:
         d7:5a:95:c7:03:8e:78:7a:9f:25:23:f7:36:64:c4:8b:dc:1c:
         65:24:2d:ce:cf:c5:00:a7:ac:76:b6:1b:43:f0:7d:61:31:d6:
         04:35:49:57:f4:f3:5a:bd:72:50:02:c4:2b:68:e5:9a:66:f8:
         20:14:c0:fb:97:9e:a4:f0:66:25:63:d0:bf:d0:7e:b0:3c:71:
         d8:47:d0:e5:a2:e8:36:5b:66:e1:5f:29:13:34:5f:80:d8:79:
         99:a9:23:90:7d:37:70:92:77:70:ba:71:a7:c8:17:66:15:c1:
         1c:02:80:d6:2f:ac:c1:bb:ee:be:a6:a6:d7:5a:83:78:ba:c4:
         b0:eb:a4:af:34:ef:c8:35:8d:47:4f:fc:3f:8c:23:7d:56:d0:
         c2:dd:40:8b:f8:6c:12:c9:04:85:a9:4f:c5:02:16:99:d5:b5:
         b9:b2:b1:35:f3:d2:17:f0:c7:0a:11:b2:7c:d4:17:63:8c:6c:
         ff:72:7a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org