Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/621c2c60184a3fe2f65f1c6ef54e2841c568f3d6.roa
File:                     621c2c60184a3fe2f65f1c6ef54e2841c568f3d6.roa (raw, json)
Hash identifier:          yx4Zh1khc2WU4bUsC2YHhtUEbiAZ3PcDYOyQzNedduQ=
Subject key identifier:   5B:37:15:6A:EE:54:FA:3C:2F:6A:3B:58:B1:15:94:46:EC:82:8C:A3
Certificate issuer:       /CN=e023bb317eecb014b8f7048b5b30535732897c94
Certificate serial:       06140B
Authority key identifier: B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/621c2c60184a3fe2f65f1c6ef54e2841c568f3d6.roa
Signing time:             Fri 08 Dec 2023 20:00:34 +0000
ROA not before:           Fri 08 Dec 2023 20:00:34 +0000
ROA not after:            Fri 08 Dec 2028 20:00:34 +0000
asID:                     6503
IP address blocks:        200.23.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398347 (0x6140b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e023bb317eecb014b8f7048b5b30535732897c94
        Validity
            Not Before: Dec  8 20:00:34 2023 GMT
            Not After : Dec  8 20:00:34 2028 GMT
        Subject: CN=621c2c60184a3fe2f65f1c6ef54e2841c568f3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:44:3a:dd:7b:ce:5d:cb:62:85:5b:15:7e:
                    b4:5d:35:b3:7d:38:bb:a7:55:ec:ee:05:60:7c:d1:
                    6d:fe:3a:48:97:00:31:f0:64:1f:36:28:6a:49:c1:
                    f3:c2:61:c1:c4:ed:9a:f4:04:8e:ab:26:67:14:cb:
                    6a:ab:fb:2c:58:3b:bb:78:d7:a5:05:aa:f7:fd:27:
                    cf:f9:b1:8b:2f:07:74:c8:d2:be:8f:47:98:2f:cf:
                    e6:9b:0f:b5:0f:36:b0:5e:93:90:c5:8b:36:06:64:
                    92:e8:1d:55:b7:34:5f:10:ad:ad:db:a7:bc:c5:0c:
                    d6:d5:6f:f6:72:86:04:5d:e6:41:b4:32:e9:16:d9:
                    21:ad:86:19:96:df:37:e8:f2:19:98:cd:c8:43:b9:
                    f9:66:4c:68:c4:91:ca:0d:42:7a:06:c5:b8:a8:ed:
                    40:dd:00:c2:dc:4c:84:df:cf:cf:d8:1e:93:a1:5a:
                    25:09:a6:ec:ec:d5:45:ed:dc:5a:b6:df:ef:da:65:
                    3d:84:54:f9:c2:b2:a2:06:56:8b:af:71:35:68:19:
                    dc:36:03:d1:9c:6b:e2:ff:08:90:51:c2:a1:28:17:
                    9a:6f:b7:69:4e:af:a9:1f:c9:dc:84:0f:46:b6:08:
                    ea:42:0f:bb:28:07:63:33:76:11:ff:2f:53:5a:63:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:37:15:6A:EE:54:FA:3C:2F:6A:3B:58:B1:15:94:46:EC:82:8C:A3
            X509v3 Authority Key Identifier:
                keyid:B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/621c2c60184a3fe2f65f1c6ef54e2841c568f3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4e:4c:f3:d8:62:1e:37:45:5c:a8:b0:18:cc:17:e9:45:f9:
         e4:a8:4d:2a:ec:c8:fb:8e:f7:8b:87:78:92:0e:8a:87:32:b4:
         33:e1:cb:4a:ce:d9:44:9e:bf:9c:20:61:65:3e:ae:63:f2:b8:
         0c:6c:00:2c:f9:33:ea:bc:39:80:b4:89:f3:cd:71:3a:12:46:
         f0:4f:fd:99:55:9f:42:80:5b:71:d5:e4:a0:36:22:a0:0d:5e:
         e6:bd:5a:40:d2:e0:34:7a:8d:5c:3d:7c:d7:42:62:03:90:74:
         a4:23:c7:1c:27:fb:17:c5:c9:7c:b1:48:7e:dd:a1:8e:85:ba:
         cc:02:b6:9f:e7:a2:9d:5a:a3:5a:b9:1e:e3:ce:ff:eb:b1:e3:
         98:ad:c5:79:ac:27:7a:10:8a:fd:cd:63:37:0f:33:d7:2d:ae:
         63:5c:a3:e1:0b:52:d7:33:80:77:f1:5f:f1:7b:97:db:e7:5d:
         1b:5d:cd:77:fb:20:39:1c:36:be:58:33:17:f5:60:9c:75:cb:
         45:d9:b1:78:15:cc:ce:1d:17:40:7a:23:ac:20:74:11:71:8d:
         f3:78:e5:9e:d7:85:ea:cc:b9:7f:4d:f2:67:4d:eb:35:80:22:
         de:df:73:d4:6b:b1:76:62:c4:9a:7d:7b:42:74:b0:d9:11:1a:
         21:d0:56:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org