Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/833ef87d23f004f1127ad46939f887092b05b28a.roa
File:                     833ef87d23f004f1127ad46939f887092b05b28a.roa (raw, json)
Hash identifier:          6DNNteYYREiKGwWIYwJShLdl/cn5Ln+0WrM5R3cvPK8=
Subject key identifier:   DB:EF:23:E2:6F:AC:42:D2:A4:E0:05:F6:7F:47:D2:D7:EF:0E:7B:EE
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       2654DE
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/833ef87d23f004f1127ad46939f887092b05b28a.roa
Signing time:             Sun 16 Apr 2023 21:12:00 +0000
ROA not before:           Sat 15 Apr 2023 21:11:49 +0000
ROA not after:            Wed 16 Apr 2025 21:11:49 +0000
asID:                     262231
IP address blocks:        186.124.116.0/24 maxlen: 24
                          200.43.81.0/24 maxlen: 24
                          200.45.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2512094 (0x2654de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 15 21:11:49 2023 GMT
            Not After : Apr 16 21:11:49 2025 GMT
        Subject: CN=833ef87d23f004f1127ad46939f887092b05b28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:6c:f4:54:38:a8:da:0a:41:10:0a:5f:1e:
                    38:82:d1:a1:fa:83:e3:85:d1:59:06:83:c0:58:2c:
                    aa:e9:9d:09:77:7d:ad:d3:f6:85:19:9e:39:5e:a3:
                    fd:48:73:87:5c:a1:9e:46:f6:fe:7e:35:96:62:e3:
                    f9:fd:0f:ee:a8:55:3b:df:82:f2:6d:28:72:13:af:
                    6b:32:89:31:1f:ff:d6:e5:46:79:07:a4:00:1d:f2:
                    35:71:f5:cd:7e:cb:be:43:3f:fa:4c:39:79:c5:1c:
                    a8:41:ea:68:06:1f:6f:d0:dd:aa:5c:95:fb:d6:4a:
                    87:6d:4a:fe:f7:fa:72:80:3d:37:ce:3d:ae:08:d6:
                    32:8d:70:ed:5b:ce:ef:a6:54:55:d7:61:aa:fc:e3:
                    5a:dc:19:72:f0:41:2c:0d:1a:bb:2d:4e:91:7d:d4:
                    bd:05:71:cd:47:76:47:ac:34:40:af:2d:94:e7:e9:
                    67:53:c5:71:2c:60:36:67:8e:83:03:ca:86:86:5d:
                    ab:17:18:66:1f:0c:ed:97:d4:4c:82:4d:7e:1e:fc:
                    a4:da:0e:6e:73:00:84:5b:dc:b3:a6:cc:8a:e9:63:
                    79:0c:38:7a:05:65:4d:77:60:80:55:2c:17:b5:c1:
                    e5:be:5a:1b:8e:a9:c9:40:1c:a8:d0:d7:78:1d:59:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EF:23:E2:6F:AC:42:D2:A4:E0:05:F6:7F:47:D2:D7:EF:0E:7B:EE
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/833ef87d23f004f1127ad46939f887092b05b28a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.124.116.0/24
                  200.43.81.0/24
                  200.45.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:9c:a1:c5:96:80:63:c4:af:24:8e:a6:6a:ee:27:74:9a:
         c5:ef:a5:96:ff:01:6f:eb:ff:c8:41:a3:6a:39:8d:3a:2e:29:
         ea:a1:78:a6:cb:d3:ef:c5:bf:73:ff:0a:f4:9d:f8:95:98:1a:
         0c:79:2c:db:45:36:22:b7:53:3c:34:a4:b6:9d:db:1a:45:3e:
         7c:e3:ff:70:44:25:5a:13:0b:79:50:1e:25:a0:4f:3a:78:47:
         3b:3f:25:26:af:a0:83:38:05:e2:ef:fa:58:98:d1:03:ac:eb:
         63:1a:a8:51:ad:1a:d6:03:a3:7c:24:43:f2:62:ae:1c:42:ef:
         57:fc:eb:38:cf:36:0a:c7:24:0b:82:08:20:06:b6:54:9b:84:
         6f:ee:36:da:7f:26:13:a7:17:48:53:41:f4:ac:79:47:2e:29:
         3a:bd:ee:01:e2:20:18:cb:47:b1:bf:fd:83:9c:ee:01:7f:a7:
         6b:f4:e8:0a:10:81:ae:e5:4e:f1:37:c1:53:d7:9f:bf:b5:0d:
         74:e1:57:a0:0a:e7:08:c2:62:0e:9e:14:f8:f5:b6:9b:05:e0:
         70:db:16:e8:e0:5e:75:d3:9f:d2:c0:a2:54:b8:6f:a2:4b:c8:
         01:e1:e6:e5:72:dd:8c:d0:d1:ad:82:17:e7:aa:9b:05:3f:ab:
         0d:53:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org