Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e4026a6e0e64179ddca1e483ff7e52c1927cc67a.roa
File:                     e4026a6e0e64179ddca1e483ff7e52c1927cc67a.roa (raw, json)
Hash identifier:          K5Sd7LQxClJYK1lWFP2XEjFVSRKngCkWawitE5dYJpg=
Subject key identifier:   AB:47:87:D4:4E:0D:4C:88:6A:68:39:25:B8:25:AD:A5:49:1E:3B:E2
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       27B221
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e4026a6e0e64179ddca1e483ff7e52c1927cc67a.roa
Signing time:             Mon 17 Apr 2023 13:02:26 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     52279
IP address blocks:        200.45.120.0/24 maxlen: 24
                          200.43.105.0/24 maxlen: 24
                          200.43.106.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601505 (0x27b221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=e4026a6e0e64179ddca1e483ff7e52c1927cc67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:14:2c:87:54:38:3b:17:68:87:db:21:96:11:
                    b2:d0:b2:78:35:ed:67:17:0f:21:b3:bf:8a:d4:d9:
                    cc:9d:37:78:64:d8:e3:46:2d:a5:78:4e:ec:d8:df:
                    fc:81:09:39:b7:7d:fe:be:48:a0:f1:4c:12:ed:2e:
                    b9:e4:11:af:cf:97:7d:f9:6e:95:1d:bf:f6:ef:b7:
                    a7:b6:33:dc:91:51:c4:6e:50:b7:19:29:cc:37:43:
                    80:b3:26:48:3d:c5:d5:b3:d1:c7:e8:ab:9c:35:ef:
                    01:88:6c:0b:f6:8e:78:1c:68:bc:03:8e:53:1d:a5:
                    a8:30:e8:5a:c6:b3:f9:13:24:48:a0:b9:32:1d:eb:
                    9c:3a:bf:78:5f:62:45:e6:88:30:cc:10:31:dd:86:
                    3b:cf:b5:19:1d:51:b3:db:50:fb:4a:41:e3:e9:7d:
                    48:4a:d3:90:d0:77:e4:c6:e2:a4:02:e2:ab:64:9e:
                    bf:f5:8b:5f:e5:71:ba:0a:83:fe:7d:de:4c:12:43:
                    42:74:87:b1:d7:ee:03:2e:2f:87:ce:c4:17:78:93:
                    63:58:b2:97:d3:a5:45:fc:8c:a0:4f:75:01:97:0f:
                    f9:b7:d2:9b:48:09:a3:c2:9a:86:36:16:61:e7:cf:
                    1b:3b:70:ca:6f:da:47:f1:67:71:b3:94:6d:59:9b:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:47:87:D4:4E:0D:4C:88:6A:68:39:25:B8:25:AD:A5:49:1E:3B:E2
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e4026a6e0e64179ddca1e483ff7e52c1927cc67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.105.0-200.43.107.255
                  200.45.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:da:f1:07:54:47:55:b0:83:ad:33:62:dc:56:ac:9b:46:37:
         b6:ec:41:27:db:4f:61:a2:2f:e9:a3:a5:1b:be:fb:36:a1:e7:
         a2:42:86:28:23:ff:c9:e9:19:cc:39:80:16:af:92:35:52:63:
         f0:4c:42:f7:85:79:f1:b3:5a:7a:62:d8:3a:d5:64:9e:fa:37:
         ec:ed:e0:fa:ed:e7:fe:1c:5c:d1:94:5a:53:fa:39:df:14:55:
         c1:ee:9d:06:9f:1c:50:74:e5:0d:7e:2d:60:06:b2:6b:19:c0:
         5f:e9:8e:f4:1f:57:b5:5f:1e:ba:e1:fd:12:04:fd:f0:ba:68:
         86:5d:4f:07:c7:b0:84:b7:83:96:eb:c2:c7:6e:c4:df:2e:1c:
         8c:12:79:25:28:5f:4f:09:ce:dc:38:e2:da:e7:19:b0:4e:fb:
         3a:53:c1:82:f9:1f:c1:fb:ab:52:6d:a7:eb:8b:3a:dc:e9:8f:
         32:8b:a6:41:a0:37:48:03:f4:3a:30:40:7b:68:00:7f:9b:4c:
         b9:d6:49:8d:61:3b:ab:20:e7:32:b2:fd:f6:fd:c0:58:66:e5:
         94:1d:4d:40:d9:b0:cb:92:f3:0e:c4:a8:93:ee:a8:5f:69:62:
         d7:f5:bd:af:9f:5c:21:dd:06:e8:fa:4f:41:fd:df:a7:01:ce:
         39:ac:a1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org