Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/13ac6cca01c82679deaeab377459a980dda8a719.roa
File:                     13ac6cca01c82679deaeab377459a980dda8a719.roa (raw, json)
Hash identifier:          WNoiJY7G0w3PuBEnLdNud3oxTYvRS777xGhwg0cvQSc=
Subject key identifier:   64:3C:BB:A3:52:B4:08:94:39:6E:BC:21:CA:B2:E9:4F:10:33:C4:64
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E6DD7
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/13ac6cca01c82679deaeab377459a980dda8a719.roa
Signing time:             Thu 07 Dec 2023 13:01:27 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     27827
IP address blocks:        200.43.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3042775 (0x2e6dd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=13ac6cca01c82679deaeab377459a980dda8a719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:93:73:b6:2d:1e:16:8f:56:39:22:50:0d:
                    c0:4a:e8:f0:01:50:48:fe:87:96:3e:e2:34:68:bf:
                    08:69:29:54:50:f5:50:0f:ae:52:d1:70:7f:77:f9:
                    52:43:c7:cb:f4:fa:73:0a:a9:90:9f:cc:bf:07:96:
                    92:a9:72:c5:b9:95:cf:35:a1:20:7a:c5:e0:b8:c4:
                    0f:d8:80:2c:6e:23:1b:d5:d3:80:d0:f7:5d:f1:79:
                    aa:29:8a:e5:6a:ac:e6:6a:d1:6a:57:48:60:0c:48:
                    00:16:95:88:10:2c:eb:7e:9a:59:ea:9c:2c:bd:4b:
                    8e:90:36:17:fb:ea:0d:0c:60:89:99:ff:42:a5:a3:
                    47:f1:c6:d1:34:7b:72:bf:ba:f2:41:75:0e:aa:6e:
                    93:7b:8d:de:d3:81:c5:52:17:53:1e:75:a5:7e:95:
                    3a:74:81:a1:cc:9c:7d:53:d6:bf:34:6e:4a:25:f5:
                    f5:5e:7a:e5:0e:0d:6e:50:30:b4:24:30:8d:dd:4f:
                    26:59:27:a1:0e:e3:f5:6d:9e:80:ac:b4:f1:1f:74:
                    33:80:fe:c3:62:55:30:13:e6:f3:c5:60:60:80:3a:
                    cb:8c:df:27:c7:46:9b:57:d5:41:7d:59:28:7d:a8:
                    62:de:b6:5f:fe:86:e3:03:80:6c:3c:eb:71:8d:5f:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3C:BB:A3:52:B4:08:94:39:6E:BC:21:CA:B2:E9:4F:10:33:C4:64
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/13ac6cca01c82679deaeab377459a980dda8a719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2a:2d:3f:ba:e1:83:6a:74:5f:9b:0f:39:b0:c4:08:61:0d:
         b6:d5:6e:b4:fe:c2:04:68:fa:4b:c7:09:9a:d0:da:07:fe:11:
         9d:b0:7e:15:67:26:85:12:c4:93:58:59:c2:71:b4:1f:d8:4b:
         ad:32:1a:c1:7e:00:60:8b:61:b9:1a:55:ef:69:45:be:ad:30:
         be:a6:99:d7:78:97:de:17:72:64:6f:bb:07:d4:d6:d3:e7:4a:
         26:4a:57:e4:a2:4b:77:82:06:25:df:13:4c:35:69:f8:70:aa:
         f8:a6:58:10:84:dc:6a:46:e8:95:b0:50:80:0c:1e:69:bc:cc:
         39:87:04:98:6f:99:67:dd:4f:44:26:c6:56:eb:b4:55:e6:d3:
         3a:d4:04:90:1b:1a:9b:21:dd:67:6d:2a:db:56:6e:45:29:72:
         43:0b:7b:95:7c:61:8d:e7:83:c2:a2:2f:78:21:d6:0c:c3:27:
         19:b1:9a:ec:77:b4:18:6d:20:c7:5f:13:3b:60:cf:2d:95:2a:
         28:7e:19:34:70:91:48:33:39:ae:c5:d4:92:68:37:80:64:71:
         47:2c:4a:7c:15:18:94:b9:5a:3a:da:53:17:0e:81:7d:8c:ca:
         e7:cf:0b:e6:2b:e0:fe:71:cb:bf:3f:90:a5:21:7c:19:45:cc:
         92:1a:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org