Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/2c06e34d7d0db20af8d516349a2786bf105dfccf.roa
File:                     2c06e34d7d0db20af8d516349a2786bf105dfccf.roa (raw, json)
Hash identifier:          vhQQKDF3jj7QaG0PQQ76C7usPaKdhqR0Cng/IS6xafU=
Subject key identifier:   22:8A:4C:B9:D8:1E:B0:87:F5:E5:13:F1:F3:7F:D6:11:19:D1:89:94
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       092A26
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/2c06e34d7d0db20af8d516349a2786bf105dfccf.roa
Signing time:             Fri 15 Mar 2024 12:47:35 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     6503
IP address blocks:        200.33.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600614 (0x92a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=2c06e34d7d0db20af8d516349a2786bf105dfccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:e3:03:64:af:8c:90:d7:7b:46:6e:cc:b3:
                    5f:62:f4:44:20:d0:38:00:a4:0b:14:08:af:e4:e0:
                    22:58:f6:cc:da:bc:6c:c3:2c:8a:9e:dc:bd:d1:f3:
                    f8:92:00:18:eb:4b:88:d8:bc:8b:91:6c:f1:56:c8:
                    bb:f1:da:6c:63:67:e7:c2:20:85:1a:d4:9e:59:5e:
                    2a:ec:20:0a:bd:3e:b5:2e:b1:d5:97:3d:fd:f0:96:
                    f1:6a:65:98:55:e0:4a:24:df:dd:ff:68:13:bd:41:
                    65:4c:46:c2:bb:22:e5:ce:37:6f:15:24:16:e0:ae:
                    34:f9:af:58:4d:d3:a6:f1:a1:0f:4f:ff:8e:1c:c5:
                    7b:8f:a4:5c:71:3d:2f:cf:eb:18:2d:36:45:b6:b6:
                    72:92:87:e0:08:c1:6a:63:e8:50:96:18:60:2b:46:
                    79:f6:f9:bc:e6:9c:3f:4f:5d:fe:18:94:14:f5:70:
                    b3:e7:b8:48:1b:ef:a3:cf:f8:9d:0a:b2:a8:45:71:
                    37:30:e5:13:d5:3e:a8:8a:7e:f0:f2:df:80:a6:60:
                    60:fe:20:53:e9:92:11:c6:51:f6:31:ef:2c:66:ea:
                    06:59:4b:b3:7a:fe:64:4d:b7:b3:56:46:78:52:a7:
                    cb:af:51:18:c2:d5:1d:7c:49:36:d8:9d:72:9c:fc:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:4C:B9:D8:1E:B0:87:F5:E5:13:F1:F3:7F:D6:11:19:D1:89:94
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/2c06e34d7d0db20af8d516349a2786bf105dfccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:54:9f:e2:fb:0d:90:1e:83:67:94:50:e0:82:d8:b5:16:1e:
         ce:da:c8:55:9b:82:aa:db:fc:02:9c:6b:78:52:87:b9:7c:1d:
         aa:96:c7:37:84:7c:e7:84:f4:2d:31:0e:c7:69:86:4b:43:e4:
         fc:f6:68:8c:e0:c2:05:cb:a7:36:01:42:f1:26:9e:08:23:2d:
         ec:23:c3:f3:ab:fe:0f:74:51:e6:9b:2b:d3:0d:65:22:f2:ff:
         03:eb:c4:48:05:51:82:e8:1d:cf:ea:89:f1:e0:03:97:e4:51:
         98:cf:07:4b:42:01:d2:e6:d1:cb:40:ea:8e:2d:17:53:6d:61:
         5f:68:ec:ae:e4:52:67:d0:92:25:95:e8:3b:0a:5c:ef:4e:0c:
         31:3c:ac:eb:bc:10:d0:4e:fb:a7:d5:5b:9d:96:40:b2:ae:ec:
         15:06:97:6b:54:da:0a:02:88:d7:7a:56:c7:4a:69:99:03:89:
         a5:63:95:21:a6:af:78:7b:bd:ad:75:b9:b9:28:65:b4:6d:8e:
         97:16:d1:cb:3a:07:eb:c4:35:c6:62:3a:02:ce:9e:e8:bd:74:
         b3:8a:5f:06:12:7c:4d:23:e6:b4:8d:fe:b2:d7:e9:db:09:88:
         c3:1d:65:75:57:a9:5f:68:69:ad:39:92:a4:ef:5b:df:b0:d4:
         a7:f5:b7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org