Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/645cc77f-169a-486a-a78d-52de3cada025/ec267a606c8a0149566e2e31611374ec6702b6d2.roa
File:                     ec267a606c8a0149566e2e31611374ec6702b6d2.roa (raw, json)
Hash identifier:          Kri/dmKB8kOGL7GeC1vpGAtEe35cujYXfsA+tcSKxpk=
Subject key identifier:   D5:4C:50:00:2E:CC:9A:E8:70:6D:1F:CD:11:16:70:BC:E3:A4:CF:70
Certificate issuer:       /CN=140081bd0d1930baf841c16a512632854d6bc45d
Certificate serial:       119113
Authority key identifier: A0:77:2B:15:A5:E5:D4:65:15:38:A3:16:3E:55:75:00:A5:CC:1F:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/140081bd0d1930baf841c16a512632854d6bc45d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/645cc77f-169a-486a-a78d-52de3cada025/ec267a606c8a0149566e2e31611374ec6702b6d2.roa
Signing time:             Tue 25 Jul 2023 08:30:02 +0000
ROA not before:           Mon 24 Jul 2023 08:30:02 +0000
ROA not after:            Wed 23 Jul 2025 08:30:02 +0000
asID:                     28055
IP address blocks:        200.107.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151251 (0x119113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140081bd0d1930baf841c16a512632854d6bc45d
        Validity
            Not Before: Jul 24 08:30:02 2023 GMT
            Not After : Jul 23 08:30:02 2025 GMT
        Subject: CN=ec267a606c8a0149566e2e31611374ec6702b6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:28:57:5d:fa:4c:b8:cd:16:99:3b:75:66:dc:
                    74:8d:27:f0:0b:05:c1:7c:b6:05:47:75:dc:b2:8d:
                    74:07:ef:53:97:4e:e1:c8:f1:7c:7d:99:40:6e:8c:
                    2e:35:45:4e:36:81:26:3e:73:bb:a9:d6:5f:48:e6:
                    2f:fb:b5:da:76:71:d2:b6:1b:91:41:a1:72:6a:58:
                    be:31:00:70:82:ec:4f:c9:ba:f1:e1:b6:50:df:59:
                    38:b5:42:e8:72:8e:27:47:b3:48:ab:ec:b1:e5:66:
                    d1:1b:3e:9a:5e:7a:fd:b8:86:86:e2:9f:0b:72:df:
                    7b:e6:f8:83:20:4a:9b:8d:50:4c:ed:11:7d:f8:bd:
                    c0:31:5c:bc:50:29:de:a1:64:3f:f4:42:16:3c:ff:
                    31:52:e9:c1:8f:b6:5b:b1:40:69:a3:12:d9:06:b7:
                    19:2c:bf:8b:39:c1:5c:57:31:fa:2f:91:63:d9:ca:
                    7e:d8:2b:82:3e:c1:5c:f2:14:54:c8:fd:97:3b:50:
                    d9:ee:b3:a0:08:b1:cf:19:9b:03:2a:ae:f5:01:c7:
                    29:20:66:31:bd:3b:6e:e5:2a:2d:d1:d6:48:2b:e2:
                    41:21:3e:9e:3e:2e:4b:28:a3:b8:dd:69:c0:4c:f2:
                    91:ea:45:59:e5:80:93:92:62:62:55:26:83:9d:f5:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4C:50:00:2E:CC:9A:E8:70:6D:1F:CD:11:16:70:BC:E3:A4:CF:70
            X509v3 Authority Key Identifier:
                keyid:A0:77:2B:15:A5:E5:D4:65:15:38:A3:16:3E:55:75:00:A5:CC:1F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/140081bd0d1930baf841c16a512632854d6bc45d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/645cc77f-169a-486a-a78d-52de3cada025/ec267a606c8a0149566e2e31611374ec6702b6d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/645cc77f-169a-486a-a78d-52de3cada025/140081bd0d1930baf841c16a512632854d6bc45d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1f:2f:91:b4:fc:d3:9b:8b:57:7a:f5:02:25:56:1f:c1:a0:
         ee:f3:8c:8a:28:0c:53:91:2a:07:46:44:f1:17:1d:70:cc:ae:
         05:a6:fc:78:6b:94:53:71:a8:d7:1b:df:ae:9c:27:c2:19:95:
         9e:06:f5:f1:73:d0:6c:ef:7b:6c:37:78:32:b9:30:50:5b:74:
         af:3b:23:5c:9f:71:0a:c1:38:17:75:f3:2c:4a:4e:90:19:e5:
         d2:06:67:4d:a2:c7:ee:52:ad:b8:f5:71:3c:0b:f8:5c:26:9b:
         db:7b:38:87:a7:5f:3a:91:ba:70:38:a5:a5:94:53:bd:d2:cc:
         e2:2f:03:08:71:d3:4e:71:3a:35:9f:7c:61:de:2b:1d:a3:40:
         d6:6a:e9:17:51:2a:1b:87:fe:b2:b3:dd:2d:48:40:a9:a7:6b:
         02:aa:ed:e9:6e:11:5c:fe:13:5d:6f:53:30:74:b8:79:c4:b1:
         da:cd:7f:7f:6d:f0:eb:d6:eb:6d:7f:82:1a:eb:f0:1f:ed:4c:
         b0:25:6c:6c:44:b1:b7:47:3d:98:88:e6:8e:3b:23:88:54:4f:
         25:e9:c4:42:b0:8f:56:c7:90:04:8a:21:41:af:42:ab:a9:39:
         d8:73:ae:22:0a:57:2c:81:c5:59:32:14:a2:57:76:f0:62:2c:
         36:92:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org