Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27.roa
File:                     9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27.roa (raw, json)
Hash identifier:          3xfrpa+6GZucNTQ2fSZzZvF6ztF/qJXKHTE9a1ejbqc=
Subject key identifier:   CF:C9:E3:B9:A2:28:5C:04:40:34:A7:E8:BB:8A:C1:E9:11:E9:73:8B
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       2482E6
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27.roa
Signing time:             Mon 30 Oct 2023 12:06:38 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52294
IP address blocks:        200.115.93.0/24 maxlen: 24
                          200.0.19.0/24 maxlen: 24
                          2001:13c7:6007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392806 (0x2482e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:f7:74:a8:e3:ea:9a:e7:e1:b9:d1:e0:57:
                    51:87:90:c2:6e:90:a6:d8:ea:78:b4:b2:63:d5:1b:
                    22:df:16:ec:d2:1e:22:70:12:a7:f0:4b:1d:59:f5:
                    04:2c:6e:58:ab:90:cf:e4:ec:e8:d3:5a:bf:05:f7:
                    f4:48:17:49:d4:78:52:ed:0f:fb:a9:58:e0:7d:ca:
                    11:1e:86:ff:bf:29:19:fb:21:53:c7:96:b9:fc:12:
                    da:91:55:f2:04:5f:ac:20:62:76:7c:67:b1:fe:c3:
                    ed:2c:dd:99:e5:fd:3a:f1:b6:f3:12:c0:0a:42:bc:
                    76:5f:45:88:c0:c0:07:2b:1d:12:a3:b0:ac:9e:37:
                    ad:81:49:dd:35:e9:1c:1e:43:98:ae:12:e9:f2:93:
                    03:cb:85:8a:7c:3c:1e:53:23:ec:f3:5b:eb:b8:2f:
                    3f:68:cc:14:6c:0e:b7:dd:b2:28:af:1a:99:97:0d:
                    42:9b:4c:b3:8d:0b:7c:37:ce:9f:b3:89:e2:5e:af:
                    8c:1b:00:20:69:3f:2b:9d:9d:bf:e5:19:16:79:0e:
                    6b:27:1b:65:19:63:f5:e8:b4:72:ff:b4:72:33:28:
                    16:db:92:d1:83:53:f5:fb:63:c0:c1:66:8b:2d:28:
                    49:a7:df:83:c0:b3:88:f4:25:40:96:2e:d9:90:4e:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C9:E3:B9:A2:28:5C:04:40:34:A7:E8:BB:8A:C1:E9:11:E9:73:8B
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf9e0f73f4aef4147dd2c1e393cc1d166cf6f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.19.0/24
                  200.115.93.0/24
                IPv6:
                  2001:13c7:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:de:40:7b:b6:e3:d0:4c:66:64:32:a3:a5:8d:26:b4:79:
         25:85:5b:cf:75:2f:31:cf:ad:3b:c1:69:43:08:6e:1e:af:85:
         93:9d:34:ce:f2:ba:f9:98:a6:8a:51:1a:83:43:65:16:1a:34:
         27:6b:c8:d2:a8:d2:45:63:9a:66:52:05:83:62:bb:38:92:f2:
         2f:e6:0e:64:24:17:c6:1c:3c:54:4e:38:10:97:74:67:01:39:
         2a:39:b7:bf:90:df:f8:58:39:97:c7:f7:e8:93:91:81:6f:9f:
         f3:c7:dd:13:2c:6e:e2:ae:ae:c2:cf:56:af:a1:5a:e0:a0:6a:
         36:3f:40:62:87:aa:7b:1f:d0:af:24:f2:c5:68:cf:7e:b6:84:
         f1:d1:7f:90:8d:fa:ab:14:74:94:b6:13:55:ef:eb:57:68:af:
         4f:a1:17:67:e0:92:38:a6:b9:a5:10:cb:12:f1:de:10:a6:1a:
         6e:5c:49:12:65:a4:90:50:a5:36:1b:25:9f:ff:72:ee:0a:c8:
         f2:13:3c:bf:99:a8:59:6e:34:05:92:7f:61:74:80:bc:5f:80:
         02:44:94:ec:80:1b:a6:91:65:83:48:15:25:dd:d5:10:ce:f6:
         2d:1b:74:b9:9c:37:96:70:01:79:1c:74:1b:57:12:4e:19:f7:
         7b:21:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org