Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/114cdb193493ad3fda9ab18266b3dbd8f4667b56.roa
File:                     114cdb193493ad3fda9ab18266b3dbd8f4667b56.roa (raw, json)
Hash identifier:          IbXqc6sTxIVBrJzQ1Zx8vJigcIBLOJjVCzR4ePTw5os=
Subject key identifier:   2C:64:C0:31:53:58:DE:5E:AE:AB:82:38:4B:DE:3B:C7:68:87:11:73
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24E834
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/114cdb193493ad3fda9ab18266b3dbd8f4667b56.roa
Signing time:             Mon 30 Oct 2023 12:07:22 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52404
IP address blocks:        200.115.83.0/24 maxlen: 24
                          138.219.2.0/24 maxlen: 24
                          2001:13c7:6013::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418740 (0x24e834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=114cdb193493ad3fda9ab18266b3dbd8f4667b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:d1:00:42:9c:0d:1b:1f:b7:0c:64:b3:c3:
                    c3:99:8d:64:7a:5d:dc:40:24:a9:b0:74:d5:d5:31:
                    9a:b5:a1:dd:b5:93:ce:32:2b:67:f0:8f:fd:8b:52:
                    94:9f:ff:a9:f3:33:5f:ff:ea:29:2f:53:a4:3b:d9:
                    11:36:66:11:cb:be:3c:31:a3:b1:96:03:89:06:17:
                    12:46:e6:aa:b1:1e:b8:1e:07:ef:01:35:0d:8e:20:
                    ec:cc:fb:5b:0c:b1:6d:4d:4c:6a:39:c8:c4:4c:77:
                    59:95:e3:90:d4:eb:ab:cb:1f:f4:91:14:96:c8:b2:
                    fe:0d:54:8f:df:07:9d:9f:a8:90:b4:bb:ed:16:1b:
                    f8:e7:de:f3:37:04:18:b6:49:0f:08:15:70:b1:02:
                    ac:0a:8c:a4:1a:8b:af:6f:4d:4e:b2:d3:bb:5e:45:
                    65:23:36:85:eb:0f:12:6e:6a:15:9e:8d:f7:30:e6:
                    e6:3a:f7:13:e5:5e:d6:e0:47:64:72:a3:50:6b:01:
                    db:9a:dd:c7:aa:da:95:ba:bf:8e:dc:aa:a8:b0:71:
                    4e:ac:b0:39:9c:8b:f5:dc:a2:79:00:3c:70:63:63:
                    c0:e3:28:ca:30:c9:8e:5a:db:bc:70:db:17:83:c1:
                    4f:c4:17:98:17:c4:38:68:b7:23:7d:43:fa:02:5e:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:64:C0:31:53:58:DE:5E:AE:AB:82:38:4B:DE:3B:C7:68:87:11:73
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/114cdb193493ad3fda9ab18266b3dbd8f4667b56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.2.0/24
                  200.115.83.0/24
                IPv6:
                  2001:13c7:6013::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:57:46:89:71:f3:e9:50:22:5f:4d:b3:87:b4:04:00:01:d4:
         b5:be:8d:da:29:1c:eb:20:cc:75:05:d3:7c:95:db:fc:ee:36:
         2e:05:1f:a1:fd:ad:c8:95:b5:c8:80:26:8f:11:6b:b6:fe:1e:
         88:9a:ec:32:4c:1b:f8:15:ff:2b:8c:d7:90:f4:f6:d8:58:52:
         19:2b:a8:78:ad:27:b7:6a:f1:68:5d:9e:6f:ef:e0:00:b6:e1:
         34:e4:0c:39:31:57:5d:b5:64:a2:f8:d2:3d:cc:52:5c:e7:a9:
         b9:4e:1d:f7:2c:a4:8b:96:48:9a:98:c4:cf:9f:52:7b:ad:ae:
         e8:63:14:74:71:e1:10:64:c1:db:63:8f:63:46:d0:2e:70:0f:
         b2:56:a4:f8:9d:25:0b:d1:41:d3:1c:a5:51:fa:e4:00:0c:cf:
         a6:0c:c4:b2:a3:b3:4b:eb:97:16:b0:a1:bb:57:32:06:47:e3:
         f5:cf:80:5b:bb:42:1a:ca:ab:bd:2f:c3:8f:8f:51:8f:16:17:
         89:70:02:13:c6:4f:2f:f6:c9:1e:eb:19:84:d2:f8:38:20:d0:
         69:7c:a2:c3:23:12:20:b0:e8:78:62:00:49:b5:74:d9:a7:d3:
         f9:16:ff:c6:c4:26:2d:91:c2:5b:a8:61:08:56:95:51:cb:b4:
         80:f0:d2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org