Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/313b7994fe396310bf55ab18a0f45a61df8b61d9.roa
File:                     313b7994fe396310bf55ab18a0f45a61df8b61d9.roa (raw, json)
Hash identifier:          c0KOKWmcQ5pW6hiIovjVJbTV6R3Nae/gqLUXebtvUtA=
Subject key identifier:   40:54:CA:30:B2:03:B1:03:8E:9B:B1:B3:58:AC:61:92:A3:42:81:B5
Certificate issuer:       /CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
Certificate serial:       034AD3
Authority key identifier: 0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/313b7994fe396310bf55ab18a0f45a61df8b61d9.roa
Signing time:             Thu 17 Aug 2023 02:16:53 +0000
ROA not before:           Wed 16 Aug 2023 02:16:53 +0000
ROA not after:            Sun 17 Aug 2025 02:16:53 +0000
asID:                     264690
IP address blocks:        200.10.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215763 (0x34ad3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
        Validity
            Not Before: Aug 16 02:16:53 2023 GMT
            Not After : Aug 17 02:16:53 2025 GMT
        Subject: CN=313b7994fe396310bf55ab18a0f45a61df8b61d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:a9:06:4b:8a:a0:be:84:64:e8:bd:a5:64:
                    d0:e5:6a:8f:e9:d7:0d:b0:63:d1:d7:e1:b6:03:ef:
                    3b:26:ea:4d:82:96:b9:37:02:da:7b:a9:52:d5:36:
                    e9:77:7d:17:f5:98:3b:ba:d0:75:2c:16:01:ca:92:
                    00:a8:dd:34:07:2e:af:93:a9:0b:ba:2b:25:c7:7c:
                    0d:67:d2:e5:79:ea:34:44:16:a2:4d:ac:4b:26:d9:
                    a0:2b:3c:97:8a:5a:7d:27:df:65:93:a3:4f:1f:f4:
                    ad:52:6b:f5:e8:cb:03:86:74:56:80:c0:de:17:a1:
                    c3:18:cb:e7:cd:11:6b:48:e7:46:75:10:65:ce:8d:
                    7f:fa:c3:0c:ac:68:28:c0:88:88:0a:3f:b9:fe:85:
                    a6:40:fd:a1:ba:25:17:7f:9a:22:b4:bd:4f:da:e5:
                    26:03:21:d9:83:50:a6:72:58:4b:11:c9:f7:5a:11:
                    2e:17:a8:fa:92:99:75:91:1d:0f:c2:55:a3:44:98:
                    18:2b:b1:92:d1:ff:db:0d:ec:3f:2b:b5:4d:36:50:
                    75:f4:22:28:25:9d:cd:19:3b:55:a9:db:fe:a2:5c:
                    65:3b:4f:c1:e7:b0:35:83:9d:91:85:ed:83:bc:b8:
                    76:1e:96:4d:ab:4e:0e:5c:65:a5:45:b5:a6:db:d5:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:54:CA:30:B2:03:B1:03:8E:9B:B1:B3:58:AC:61:92:A3:42:81:B5
            X509v3 Authority Key Identifier:
                keyid:0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/313b7994fe396310bf55ab18a0f45a61df8b61d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ce:09:24:fc:a3:50:28:10:55:71:03:21:32:3c:fb:42:19:
         cb:5a:f1:92:7c:ee:84:08:35:60:74:ec:de:56:36:10:97:b1:
         74:a3:bf:60:a4:e2:83:6c:af:e7:7b:d0:98:14:18:fb:01:ec:
         18:31:a9:53:0c:74:0e:b6:40:19:45:19:dd:cc:97:1a:6c:00:
         32:ec:bf:ac:be:de:ca:6c:7f:38:e7:eb:79:0b:7b:28:a0:8c:
         d3:a0:61:43:bb:b7:98:16:67:38:19:49:90:f3:b2:73:47:ca:
         05:29:96:3b:ba:e8:3f:35:51:3b:39:0b:4c:15:cc:ec:09:fd:
         ce:4a:94:a5:8c:9b:63:7b:c3:8d:be:29:25:d0:63:38:a0:0b:
         9d:3e:31:ba:de:27:d1:d0:9e:05:3b:34:5e:65:db:7e:7d:b5:
         43:a1:94:92:f3:23:e9:b1:c1:c7:ad:bd:bc:94:a7:ea:e2:71:
         44:c5:fc:79:fd:17:57:c6:fc:26:0e:b9:2c:67:1f:b5:cc:c1:
         74:a4:4b:7e:e0:15:99:2b:c5:fb:72:aa:19:6c:a4:fb:98:72:
         47:a7:88:b8:f4:12:05:13:b9:bc:10:cb:fc:9f:0a:ee:ed:86:
         76:82:d4:e3:5a:3e:9b:bf:b6:2d:7e:d2:25:0b:b0:29:84:0e:
         f0:09:8c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org