Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c940fa10e44652b66f1496ee75437464d035fd2f.roa
File:                     c940fa10e44652b66f1496ee75437464d035fd2f.roa (raw, json)
Hash identifier:          WSUwHoeLaavaSnEarALBGngjpzbJ3ivqioTvjIEFcBc=
Subject key identifier:   66:77:E3:EF:83:E2:CC:50:40:86:A0:54:55:98:1C:12:E1:A4:9D:6B
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E434A
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c940fa10e44652b66f1496ee75437464d035fd2f.roa
Signing time:             Thu 07 Dec 2023 13:01:01 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     265877
IP address blocks:        200.43.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3031882 (0x2e434a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=c940fa10e44652b66f1496ee75437464d035fd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:49:9f:ab:fd:e3:cd:73:d9:e1:a6:a2:db:
                    0d:24:13:bc:e9:e4:26:5a:cc:5d:e8:b9:e1:81:80:
                    f1:63:07:de:03:1c:a2:00:5d:46:ae:5c:86:86:af:
                    05:20:97:3b:38:9e:fa:04:63:d2:23:3d:e4:60:0b:
                    b5:dd:1f:2c:75:ef:ed:1d:9f:07:f2:73:66:83:af:
                    f1:3d:02:4b:50:7c:e8:d4:0e:36:8b:d0:99:69:30:
                    d0:0f:10:f1:d4:9d:9a:ad:ab:9d:a4:d2:88:7b:bf:
                    dc:aa:cd:1c:f4:93:9e:2a:d0:26:dc:ad:4e:02:15:
                    c3:3a:21:5e:5d:6e:96:e3:a0:ac:7a:d1:ff:02:e2:
                    0d:de:6b:e8:a1:22:ff:0e:87:ee:9f:a4:b3:7a:8e:
                    71:24:73:a2:41:f4:a3:01:56:45:78:98:5c:72:ed:
                    b3:f4:75:b7:65:d1:ff:2f:d5:56:25:bd:2c:38:31:
                    f3:e9:be:9a:70:58:72:ef:f2:8a:4e:26:90:56:d9:
                    8c:1a:7e:20:1e:11:cb:a0:0c:97:36:ad:56:76:98:
                    73:52:a7:73:52:09:74:16:24:67:88:5f:8e:5f:ca:
                    63:e6:5b:3f:48:fd:09:b3:5d:5d:41:48:2b:49:38:
                    16:57:0a:56:96:74:61:31:64:f5:fe:3e:e5:5d:e1:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:E3:EF:83:E2:CC:50:40:86:A0:54:55:98:1C:12:E1:A4:9D:6B
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c940fa10e44652b66f1496ee75437464d035fd2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:c0:5b:a0:16:84:93:9a:b4:92:d9:06:f4:8c:35:9b:e8:
         cf:7e:bf:a5:5f:a4:31:4e:98:ad:56:14:c4:b0:c8:7e:58:27:
         e6:ed:a1:b8:78:fd:12:d8:1f:14:0a:29:89:a9:ad:41:2d:6a:
         f0:90:41:a3:f8:26:97:21:01:4d:72:b9:d4:fd:c7:f2:ee:24:
         52:6d:da:80:df:4f:b7:a1:42:f7:8f:4b:7b:a4:fb:4d:7b:54:
         04:bc:d4:50:7a:6c:4f:8f:87:67:4c:dd:ff:03:2d:e6:7c:0f:
         09:5d:07:dd:b0:b2:14:2e:b1:72:dd:b4:bf:5f:63:89:f6:99:
         33:60:70:bc:4d:3b:2d:ac:9f:9e:9f:f4:e4:d4:08:e6:91:56:
         b6:83:a6:73:10:f6:01:44:28:28:64:d4:84:ad:92:0c:66:a6:
         d3:10:a8:d9:53:c7:9f:b9:ed:8e:d3:a5:c0:2d:dc:9c:25:a5:
         90:1d:00:c9:60:9d:b8:80:f5:ee:c9:f0:5c:75:c9:ec:40:83:
         ad:f8:c5:54:90:16:c3:7b:ba:ae:4b:84:02:73:f8:fe:54:9c:
         a8:46:c1:bc:6b:ee:2d:00:dc:55:f9:a6:8c:1d:fb:59:57:1e:
         47:1d:8a:d2:86:a1:c0:73:56:54:62:97:56:03:2d:d7:94:23:
         72:6a:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org