Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/3c96e644fb75012dd3cbdf7a72ae1252056a22e7.roa
File:                     3c96e644fb75012dd3cbdf7a72ae1252056a22e7.roa (raw, json)
Hash identifier:          zn6tygUA1VF1rndtI0xCebxLVuzbiey/E4ThBGrqXOg=
Subject key identifier:   91:4E:F8:B5:FF:53:2E:FE:9B:32:65:58:91:CF:09:16:1E:D5:0F:B2
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24AB03
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/3c96e644fb75012dd3cbdf7a72ae1252056a22e7.roa
Signing time:             Mon 30 Oct 2023 12:06:49 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52375
IP address blocks:        200.115.81.0/24 maxlen: 24
                          200.115.89.0/24 maxlen: 24
                          2001:13c7:6011::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403075 (0x24ab03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=3c96e644fb75012dd3cbdf7a72ae1252056a22e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:52:13:4e:cc:16:0e:0a:b5:3c:5a:c1:39:
                    0d:d8:cf:af:6e:9d:d7:b6:db:80:1e:af:5f:27:ed:
                    6d:48:27:6e:f6:2b:fc:56:43:1e:56:5d:df:7a:db:
                    5d:13:37:5f:73:eb:2b:ab:0d:db:cc:bd:1d:53:7e:
                    43:f0:66:70:24:bb:13:6f:85:2f:16:71:f6:48:aa:
                    92:c6:a5:ae:4f:6c:b1:a0:2a:82:13:01:ba:14:9b:
                    4f:0e:61:1a:6b:d8:92:28:b2:ad:ee:3a:09:e9:2c:
                    f4:3d:20:ca:1f:36:68:fc:90:3f:c1:2d:c2:85:e3:
                    93:37:cf:b7:42:bd:3b:67:83:36:a3:f8:e9:99:f6:
                    d5:04:bf:11:25:33:be:51:42:05:ca:f6:72:ea:4d:
                    b7:da:9a:c5:45:e4:47:ab:e3:4a:dc:f2:6c:d9:17:
                    45:33:a4:8d:2a:fb:79:05:77:f3:f8:63:b5:00:86:
                    c2:3e:55:0b:83:73:b4:e6:44:43:38:c7:d6:70:4d:
                    2f:de:1a:94:e9:26:e8:4a:be:3d:a9:0b:cc:56:54:
                    66:8a:3f:8b:c4:41:b9:92:12:d7:fb:84:f5:f5:1b:
                    42:9a:97:e9:72:37:33:b2:5d:b4:82:a2:aa:bd:e1:
                    a6:88:39:19:5d:3d:6a:4f:14:de:ba:e0:9b:15:31:
                    7d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4E:F8:B5:FF:53:2E:FE:9B:32:65:58:91:CF:09:16:1E:D5:0F:B2
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/3c96e644fb75012dd3cbdf7a72ae1252056a22e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.81.0/24
                  200.115.89.0/24
                IPv6:
                  2001:13c7:6011::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:03:d3:d4:23:d0:01:3c:fd:6e:48:6a:c6:66:18:eb:a6:e6:
         6b:7c:21:b8:2f:7d:4a:08:49:99:fd:b7:dc:dd:45:af:68:c9:
         59:18:e7:9e:4a:ec:08:0d:39:6f:47:d0:8f:73:41:0c:7d:ad:
         d7:fd:62:9b:9d:44:58:37:2e:0a:45:54:aa:3d:68:7e:eb:30:
         26:05:cf:0e:c9:97:a6:6b:d7:1d:b4:4f:40:9b:4d:e3:29:20:
         cc:76:19:e1:d6:78:4e:39:bd:c8:39:65:6a:73:18:85:c9:23:
         a1:2c:5c:18:33:29:ba:9a:a5:8d:54:f1:46:45:68:96:28:11:
         00:a9:a7:b1:16:45:85:04:0d:98:4f:e6:b4:94:13:0f:8d:15:
         31:5d:59:ea:72:39:93:c0:71:5e:a0:22:b0:08:84:3d:2d:62:
         e1:0c:41:0f:d6:8e:e5:b1:25:3c:a2:35:a4:4f:6e:3f:74:45:
         05:4f:88:10:2f:b8:06:3b:ae:18:ec:8d:13:1f:08:82:75:20:
         3f:b5:a4:08:d8:59:6e:72:d7:ec:6c:a0:47:b2:e9:50:f8:27:
         21:77:03:9d:a0:fb:d0:53:3c:d8:fe:08:1f:1b:45:06:34:f5:
         38:07:10:60:00:fa:16:6d:49:ed:a4:5b:78:9f:02:1a:0b:2a:
         50:d0:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org