Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/3b80f2fe9164b6b67c5b55798bc76770546c2f3e.roa
File:                     3b80f2fe9164b6b67c5b55798bc76770546c2f3e.roa (raw, json)
Hash identifier:          WYg9PvHD2ajpOoNRWrkvje1yiAKRnfRpOD4v4UfrOQI=
Subject key identifier:   21:24:F1:E9:6D:8F:B4:BF:99:26:35:B2:E7:97:24:BB:2B:FE:F8:38
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       092E12
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/3b80f2fe9164b6b67c5b55798bc76770546c2f3e.roa
Signing time:             Fri 15 Mar 2024 12:47:36 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     28545
IP address blocks:        200.33.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601618 (0x92e12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=3b80f2fe9164b6b67c5b55798bc76770546c2f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0d:23:a7:2f:48:1c:46:05:c7:48:e1:bc:4d:
                    cc:d3:9b:9f:61:7b:37:9d:73:83:0b:20:de:04:81:
                    32:c6:99:a9:44:70:17:4c:b0:fe:a3:0e:16:54:8b:
                    c3:94:52:50:cf:d6:72:e9:6e:e8:c2:b8:db:ba:28:
                    2b:fa:24:35:34:18:c9:e1:c2:44:dd:2f:bf:6f:fa:
                    67:95:f5:63:e2:9b:a9:71:85:fc:f1:69:5f:a4:41:
                    a6:b9:3f:a2:a6:61:a1:b3:7f:7d:ff:05:b3:90:e8:
                    41:fe:08:5b:53:31:e8:ac:de:ee:1f:47:50:a3:54:
                    01:09:86:c0:83:06:46:38:68:fc:c0:ee:36:43:9d:
                    c6:9d:b6:00:db:10:89:c2:1f:d0:f4:d3:98:3b:58:
                    20:2f:fb:e2:ca:88:97:47:a4:53:5c:c0:91:f9:b4:
                    57:c7:84:47:f1:7a:b0:da:00:83:9c:8a:ed:cc:80:
                    e8:69:f4:ae:dc:7d:48:61:5c:d8:23:83:ce:8a:9c:
                    1c:9a:40:ea:9c:09:cd:02:0d:55:a4:08:b2:f0:6b:
                    48:13:d1:92:5b:ba:07:7e:c9:aa:ee:fa:ce:52:33:
                    14:b3:8f:06:87:b4:f5:61:f9:72:b4:b8:d2:37:11:
                    32:e1:64:4e:25:2a:4f:23:56:05:c0:ea:e0:f0:f7:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:24:F1:E9:6D:8F:B4:BF:99:26:35:B2:E7:97:24:BB:2B:FE:F8:38
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/3b80f2fe9164b6b67c5b55798bc76770546c2f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:63:68:2b:68:fb:a6:69:70:e8:a3:f3:3d:66:d1:a2:48:
         19:0f:e9:61:c9:d5:64:19:e1:59:cc:7b:94:1c:c5:2e:a8:8b:
         91:85:1a:15:65:e9:0f:5e:c4:9d:d4:d5:80:e4:88:f2:81:98:
         8f:73:38:0f:b0:08:26:3b:d1:fc:6e:d1:b8:05:e2:f4:7d:c9:
         d9:de:f9:b6:4c:30:57:75:47:47:8e:45:2a:d4:cf:f3:d0:00:
         8d:32:87:e6:83:1b:d5:04:7d:04:a2:d1:96:36:ba:56:33:f7:
         c6:e9:09:d2:db:c2:08:e9:0a:71:44:18:39:f7:f9:43:53:6a:
         f5:08:f2:39:5a:11:f8:96:bc:01:ed:86:23:ad:b6:57:10:0d:
         70:ba:cb:b6:36:c5:03:0a:a6:a5:5e:ea:57:9a:ef:a2:78:72:
         ed:20:6c:03:8d:ba:e5:4c:87:de:cc:c6:c0:40:c9:f2:80:7f:
         8a:6c:f8:c5:81:02:b8:df:f2:27:1c:23:11:55:f6:d9:de:35:
         85:3c:74:78:ea:91:dc:b9:fc:bf:06:3f:b2:74:dd:6e:a9:e8:
         4e:70:32:57:64:e5:92:1d:ef:24:2e:43:94:3e:8d:e1:73:ec:
         0c:06:45:22:0c:6e:4d:48:cc:a2:a5:a1:d6:d1:85:d5:d4:c3:
         5a:46:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org