Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/2f4f78d4d20d96830657cf0d77fa967d992fa779.roa
File:                     2f4f78d4d20d96830657cf0d77fa967d992fa779.roa (raw, json)
Hash identifier:          7ObC2AwdpXo+wcJao7ZkTsQeriysGnI1YFYAZ2W+bmU=
Subject key identifier:   33:C5:81:6F:44:7B:49:EE:17:A5:80:9D:0B:C5:33:F1:4D:84:F4:79
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       20BE7C
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/2f4f78d4d20d96830657cf0d77fa967d992fa779.roa
Signing time:             Wed 03 May 2023 13:50:57 +0000
ROA not before:           Tue 02 May 2023 13:50:57 +0000
ROA not after:            Sat 03 May 2025 13:50:57 +0000
asID:                     27717
IP address blocks:        186.167.0.0/16 maxlen: 24
                          200.71.240.0/21 maxlen: 24
                          190.121.224.0/20 maxlen: 24
                          2800:930::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145916 (0x20be7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: May  2 13:50:57 2023 GMT
            Not After : May  3 13:50:57 2025 GMT
        Subject: CN=2f4f78d4d20d96830657cf0d77fa967d992fa779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:8e:62:15:49:a8:37:b6:47:95:96:98:44:
                    39:78:3f:b3:73:e9:99:22:04:dd:e8:87:7f:39:fe:
                    de:66:8a:9a:37:da:11:51:4f:de:ed:2e:1c:e9:7d:
                    ba:a9:63:fc:8b:b4:1d:a8:d2:4a:2c:41:13:38:9f:
                    e4:f4:88:fc:2a:2a:bc:0c:2b:51:ab:b4:0a:a9:34:
                    2f:72:96:c3:6d:50:8c:26:55:81:fc:19:70:f0:fc:
                    99:a2:f9:f8:62:41:c3:39:c4:4c:d4:84:03:07:71:
                    af:95:e0:44:d1:c6:13:1d:82:83:04:cb:32:d1:8b:
                    7a:24:9f:70:da:e3:49:24:30:55:f4:a3:74:35:e7:
                    4b:fe:49:cb:15:74:b8:cf:54:79:5f:ff:f6:d0:70:
                    0e:8d:78:a7:ad:bd:b8:1e:24:81:e2:e2:60:37:75:
                    cd:18:fa:f0:b6:a9:92:58:1a:13:73:11:6a:8f:29:
                    7f:ec:75:61:8b:3c:8e:40:38:dc:9f:3a:2d:d3:de:
                    d4:c0:f6:5c:16:59:0c:e3:58:6c:06:83:92:df:82:
                    be:c0:4d:ad:23:9b:44:3b:1c:de:ab:a4:86:3a:3e:
                    0d:5e:ef:27:39:15:89:ca:ed:c1:ed:36:ad:a1:4e:
                    a7:8f:d2:fa:2a:19:35:15:d3:26:3c:0b:a7:e2:82:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C5:81:6F:44:7B:49:EE:17:A5:80:9D:0B:C5:33:F1:4D:84:F4:79
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/2f4f78d4d20d96830657cf0d77fa967d992fa779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.0.0/16
                  190.121.224.0/20
                  200.71.240.0/21
                IPv6:
                  2800:930::/29

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:46:91:55:17:e2:36:6a:f7:ff:48:82:83:0b:8c:c2:4d:
         f9:d3:22:93:7d:81:33:56:9e:3b:78:ad:98:e4:18:69:ad:fe:
         2c:90:53:dc:f9:62:15:a0:7e:22:39:a9:5a:e3:62:66:98:bd:
         7e:b9:94:9b:2c:82:2e:05:97:fd:b7:f5:18:84:44:00:10:d0:
         10:7f:51:3f:fa:c3:5d:79:93:8b:5c:99:e0:fa:3c:be:92:f0:
         13:55:44:1e:83:97:f7:eb:2a:bb:ff:7b:b9:b0:6c:3d:d8:83:
         10:d0:cf:ee:85:86:93:eb:40:da:e7:57:77:90:aa:a3:a9:f5:
         bc:aa:9c:48:89:25:96:46:21:6c:3a:cb:ad:d2:9b:12:63:3d:
         e6:85:df:38:0c:d3:2f:17:2d:2f:4a:1e:69:65:9d:f1:f8:43:
         db:0d:e3:87:93:29:64:14:c1:0e:79:dd:45:5d:4e:a6:ec:f3:
         74:8a:67:dc:de:50:83:b6:b7:25:6f:dc:fa:61:0e:49:b6:a3:
         29:03:50:9c:e2:b2:2e:76:87:26:88:01:4d:7c:7d:57:66:f5:
         b0:d3:51:cf:23:49:1a:b2:05:bb:f2:52:df:47:4e:01:9c:66:
         d9:4d:a6:bc:e6:82:c1:a2:41:dc:e1:78:5d:a5:57:d3:ef:dd:
         39:d2:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org