Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/49fd3577bae26e3d54b70594a0bd09a1238551c9.roa
File:                     49fd3577bae26e3d54b70594a0bd09a1238551c9.roa (raw, json)
Hash identifier:          RuF9p0kB+qTzFP+Kxo8QkY2V+JCinhmtkhdnTNUUDSA=
Subject key identifier:   BE:1A:C1:3F:7B:40:2B:F6:F4:2C:53:30:4C:5C:13:F5:54:92:BF:82
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       279EB3
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/49fd3577bae26e3d54b70594a0bd09a1238551c9.roa
Signing time:             Mon 17 Apr 2023 13:01:50 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     27827
IP address blocks:        200.43.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2596531 (0x279eb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=49fd3577bae26e3d54b70594a0bd09a1238551c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:f9:c9:30:1e:b9:62:fc:b2:50:79:ae:70:
                    be:d4:9c:a5:56:26:68:3d:b8:6a:ac:e3:d0:8a:b8:
                    75:0a:e9:e6:a0:2b:4d:52:ec:c9:a1:10:66:1e:9a:
                    12:bd:b4:9e:16:ec:01:af:11:83:2e:15:77:e8:65:
                    cc:23:e1:dc:e0:59:a4:cf:ab:e0:c1:11:a9:6c:85:
                    51:69:a1:ef:2b:d3:dd:c7:56:3e:df:7c:29:e0:02:
                    b9:be:63:b8:93:3d:b1:00:71:71:e5:82:7a:d7:c5:
                    53:70:86:ba:b6:1e:42:85:c6:0b:13:20:bc:f8:c0:
                    06:e1:e3:ad:a3:c6:ca:e2:dc:a9:34:4d:74:ec:99:
                    46:cd:98:44:64:8a:79:3f:34:f2:53:6b:92:40:d1:
                    cf:4c:fa:b1:01:38:c8:7d:d6:27:4b:13:33:19:d1:
                    59:2d:f5:60:fd:a6:4c:a2:50:e9:c5:e4:70:57:06:
                    de:6d:24:3c:6c:aa:fe:7b:3b:50:b7:c9:04:95:25:
                    ed:98:ca:3f:6c:99:40:ef:97:35:5a:13:29:ba:9a:
                    4c:62:0b:11:6b:70:b1:01:6c:6a:af:38:56:bc:00:
                    6f:b4:63:bc:e5:0f:c9:bf:6f:d2:7b:03:db:00:4c:
                    1f:f0:da:e1:15:43:65:77:96:51:d6:26:90:72:53:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1A:C1:3F:7B:40:2B:F6:F4:2C:53:30:4C:5C:13:F5:54:92:BF:82
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/49fd3577bae26e3d54b70594a0bd09a1238551c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:31:29:6c:06:7d:53:54:e8:67:fe:a9:0e:d0:32:12:cc:f1:
         87:52:29:2f:22:04:1c:7a:8f:7d:1a:78:87:18:e6:6f:7e:c9:
         40:b6:4e:e4:b2:8c:f0:fb:a5:c2:b6:76:34:23:6b:12:56:77:
         0b:a9:b7:2e:d5:0f:fa:a7:d8:fd:cc:58:5a:0d:1a:34:4f:52:
         83:3b:d9:8b:ea:58:fa:d6:57:f1:6b:44:e2:d4:49:fd:b3:61:
         a8:2e:d9:f3:e8:62:43:27:1e:6e:82:dd:85:c7:6d:ab:14:5f:
         db:21:33:38:1d:b0:f8:58:9e:9b:7b:71:1e:bc:cb:10:c3:6a:
         44:65:a9:5d:c1:88:a5:68:cf:55:2e:d7:98:44:94:f8:5e:63:
         30:45:fd:b0:4e:aa:39:41:13:2b:b3:64:54:ea:40:61:6b:61:
         11:0e:08:0a:f5:d4:cf:b8:da:fc:8e:75:bf:ae:b3:85:35:e8:
         5b:d8:ee:15:88:5c:a4:e0:a9:43:53:2c:86:0b:3c:17:68:c2:
         d3:fd:d9:bc:2f:a7:66:75:ec:3e:89:5e:6a:bc:a0:37:3d:b5:
         aa:cb:12:e2:d8:9b:8d:cc:88:87:59:cc:50:f2:d5:a7:dc:7a:
         14:a6:bc:e7:2a:c3:56:cb:0a:8b:0c:13:5f:30:11:7f:67:20:
         fe:4f:b7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org