Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/0e4e390531213758adce3a5cb42fc2b34a98049b.roa
File:                     0e4e390531213758adce3a5cb42fc2b34a98049b.roa (raw, json)
Hash identifier:          bb83TLIfVMVLf4SQO3Rc5AtFXXPYOjqczJibpbCjWhc=
Subject key identifier:   B7:8E:5B:67:0F:6D:82:17:CC:00:FA:25:A6:8C:8C:F9:96:74:25:84
Certificate issuer:       /CN=e023bb317eecb014b8f7048b5b30535732897c94
Certificate serial:       0792BD
Authority key identifier: B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/0e4e390531213758adce3a5cb42fc2b34a98049b.roa
Signing time:             Wed 07 Feb 2024 14:58:54 +0000
ROA not before:           Wed 07 Feb 2024 14:58:54 +0000
ROA not after:            Sat 07 Feb 2026 14:58:54 +0000
asID:                     6503
IP address blocks:        200.33.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496317 (0x792bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e023bb317eecb014b8f7048b5b30535732897c94
        Validity
            Not Before: Feb  7 14:58:54 2024 GMT
            Not After : Feb  7 14:58:54 2026 GMT
        Subject: CN=0e4e390531213758adce3a5cb42fc2b34a98049b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:fb:d1:92:06:4a:6c:c7:b6:e2:ba:af:87:
                    3b:9a:28:35:4e:a7:ab:fa:95:55:3f:e6:0b:59:e2:
                    23:79:c4:48:d4:b1:2f:f8:49:fb:9c:2e:3e:fd:3a:
                    ee:2d:24:e4:ab:e0:a3:a9:0f:23:29:5a:09:79:85:
                    6b:e4:56:0b:28:11:07:bd:ef:27:68:13:ab:87:ce:
                    5b:44:22:68:27:16:35:72:32:1c:0c:81:67:3f:d1:
                    80:5f:68:71:be:29:33:a8:15:8c:86:20:49:11:4d:
                    0e:8e:0c:d4:7f:c7:02:28:4d:b3:c0:54:20:d0:05:
                    88:85:be:0a:df:7d:b9:e3:59:ce:22:97:35:62:0a:
                    c3:64:1f:4b:bb:5e:23:cb:01:da:09:82:52:d1:6e:
                    0d:0c:ca:02:14:dc:16:22:de:e8:6a:a8:6e:7e:3a:
                    f2:5d:3d:8c:9e:0a:40:5a:11:a6:40:3b:fc:6d:2d:
                    71:cb:ff:68:fe:24:57:54:87:58:48:d2:f8:d2:58:
                    47:79:2f:e5:48:f9:dc:d3:99:02:41:37:cb:21:ec:
                    a1:76:c8:32:26:10:d2:11:60:4f:52:7f:9b:ce:f0:
                    18:13:30:05:55:1e:92:1b:c0:eb:a9:49:81:5a:03:
                    19:17:ec:af:f3:9c:3e:c8:3c:f7:12:e8:c7:91:28:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:5B:67:0F:6D:82:17:CC:00:FA:25:A6:8C:8C:F9:96:74:25:84
            X509v3 Authority Key Identifier:
                keyid:B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/0e4e390531213758adce3a5cb42fc2b34a98049b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:ce:00:7c:72:17:a7:6c:b1:c3:c6:b9:31:3b:34:6f:10:72:
         f7:e9:20:83:4b:7f:c8:67:05:a2:12:bc:b1:f4:f8:3a:0f:9f:
         03:ec:3b:a0:9f:bf:ba:6c:08:d6:22:c9:24:84:09:6a:e4:ff:
         79:2a:0d:12:78:73:e5:50:38:4d:72:1d:bb:ce:16:ed:df:65:
         92:82:f1:d4:f0:f3:90:f5:25:ea:cb:a6:cb:2b:9f:ab:23:7f:
         53:2b:3d:a5:ac:b4:80:59:cf:dc:0d:a7:22:70:b6:6c:97:15:
         34:07:88:a4:80:8f:98:cd:6e:50:d4:6a:4e:b2:c8:1e:82:0a:
         9d:28:44:e2:05:aa:9f:ab:59:97:2b:f6:dd:ac:16:2c:53:fc:
         96:25:c7:16:26:ef:0d:3f:e5:00:52:13:be:f7:3e:96:3d:1e:
         b8:22:2f:9a:a0:c4:a4:ce:8d:6b:17:e1:82:66:ea:cb:4f:65:
         dd:e9:bc:f7:1d:2c:74:77:22:71:f9:20:b7:69:57:de:dd:70:
         f7:51:c8:97:56:03:01:76:b2:77:06:97:08:64:d6:f8:80:75:
         fd:39:3a:5e:ca:58:ee:07:a9:c2:80:74:db:09:51:9a:9a:c3:
         da:61:e6:7c:6f:72:e1:ae:78:8d:53:75:60:f8:b2:2c:0f:22:
         ea:0b:62:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 04:43:41 2024 by rpki-client on console-fra.rpki-client.org