Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/4a5254f9481b094e72b624db1a34e5fe386d21f5.roa
File:                     4a5254f9481b094e72b624db1a34e5fe386d21f5.roa (raw, json)
Hash identifier:          8iFuH6qVOJo64hQlB1Wqtmgxq4sAuWCkcijD/kUWrSg=
Subject key identifier:   04:04:F9:87:2C:9B:B8:6F:15:E3:4A:A9:4A:B6:E8:78:B0:6E:E7:C1
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E09F6
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/4a5254f9481b094e72b624db1a34e5fe386d21f5.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     15274
IP address blocks:        200.61.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920054 (0xe09f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=4a5254f9481b094e72b624db1a34e5fe386d21f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:34:15:14:63:0c:07:86:6c:2b:4b:85:c5:
                    45:16:ab:f7:94:a4:65:9d:81:ed:c3:6d:bf:7f:8a:
                    64:a0:0a:9e:ed:6e:14:3a:5f:09:22:50:29:26:9d:
                    d1:5b:36:ac:d4:86:bb:e3:9d:af:5c:3f:45:f1:99:
                    81:fa:fa:03:dd:69:93:e9:5a:83:fb:7a:45:5f:ad:
                    cc:29:42:b8:47:eb:04:e0:cc:0a:00:72:63:43:5a:
                    f2:fb:b9:6d:b9:98:a6:b8:16:0f:31:8c:53:66:8b:
                    e5:58:f0:4d:5c:d4:50:79:aa:75:96:bb:e5:02:3e:
                    9f:83:f6:81:75:86:6f:a7:f3:59:5b:d6:47:93:6d:
                    b3:f6:17:b5:1e:6b:6b:36:63:0a:0c:9f:d0:2d:69:
                    ad:18:5e:1a:b8:72:7c:c6:33:4d:a0:0b:61:6f:bb:
                    d2:18:e1:98:54:50:58:6f:c9:55:63:fe:d6:2b:84:
                    64:4e:04:f3:b4:96:a4:c3:b2:a9:39:fd:40:88:a0:
                    9e:e8:8b:71:73:46:fa:a3:74:17:32:61:7b:d3:1d:
                    77:8a:32:e5:53:b3:c6:57:5b:84:6a:fa:44:cd:36:
                    9b:3a:c8:ae:52:c4:be:e2:cc:12:fa:2e:8b:f3:f4:
                    2b:40:ec:95:82:82:f2:6c:22:62:9e:d0:6f:0d:44:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:04:F9:87:2C:9B:B8:6F:15:E3:4A:A9:4A:B6:E8:78:B0:6E:E7:C1
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/4a5254f9481b094e72b624db1a34e5fe386d21f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:ab:01:1b:e6:35:8f:4e:85:4b:a4:f8:29:ba:fa:06:f9:
         68:9d:c3:f5:f4:03:5a:da:08:a1:ae:9f:de:f8:c7:fb:2d:25:
         65:f3:69:1e:d2:76:07:4d:e5:73:f2:57:04:d8:6b:fe:54:5c:
         29:64:d3:7b:5d:95:33:00:72:3d:4c:64:5c:69:c8:a8:57:da:
         8a:d9:c7:95:9c:80:5d:90:d1:d5:10:db:ea:d3:3e:5d:b6:15:
         b4:e0:01:24:d6:ac:57:4a:a2:6d:6f:58:10:61:0d:43:6d:a3:
         c8:08:f4:4b:cf:2b:c5:47:5c:f3:96:43:01:3e:d4:20:a4:a7:
         b6:32:93:23:ce:2f:c5:c0:ef:49:91:75:dc:34:89:53:21:60:
         61:08:0b:b6:42:9f:88:1d:b8:60:29:e6:1d:47:2e:90:87:1c:
         cf:2d:a1:10:87:73:87:ee:a6:ed:dd:96:53:82:41:e5:28:80:
         fc:cd:6a:f2:56:fd:21:ab:19:7a:f9:3e:ab:26:71:0b:01:ed:
         1c:3a:c4:0c:5c:15:a6:52:89:7f:ce:22:5b:c5:87:81:99:70:
         80:80:e3:4a:bb:3b:d9:c0:40:a8:cd:db:c5:28:c7:77:c0:1a:
         66:2b:bc:e6:b4:c4:3a:25:dd:b6:f2:e4:f9:98:99:0e:d0:b6:
         b1:d7:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org