Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/1b77e64731088d24599002004515c08f8c2e177f.roa
File:                     1b77e64731088d24599002004515c08f8c2e177f.roa (raw, json)
Hash identifier:          YGc4xw4i8gKR6k/R9dvrg5WBFxJakikLBAGh7JlNSyk=
Subject key identifier:   6E:12:9A:20:98:13:9D:9F:7A:64:29:90:66:35:5F:13:AB:CF:9B:24
Certificate issuer:       /CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
Certificate serial:       1C111D
Authority key identifier: C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/1b77e64731088d24599002004515c08f8c2e177f.roa
Signing time:             Mon 17 Apr 2023 18:24:50 +0000
ROA not before:           Sun 16 Apr 2023 18:24:50 +0000
ROA not after:            Thu 17 Apr 2025 18:24:50 +0000
asID:                     272832
IP address blocks:        200.115.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1839389 (0x1c111d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
        Validity
            Not Before: Apr 16 18:24:50 2023 GMT
            Not After : Apr 17 18:24:50 2025 GMT
        Subject: CN=1b77e64731088d24599002004515c08f8c2e177f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:7d:11:27:95:7b:d5:4d:ca:6f:70:58:3d:
                    9a:6c:ae:c1:88:8e:9e:73:00:d3:c6:2a:f2:16:a0:
                    f7:a8:35:26:2d:82:15:47:27:47:fe:89:16:da:83:
                    bb:b2:7d:05:a8:71:2b:13:a1:51:b3:6b:bb:08:42:
                    cf:a5:0a:a6:88:e8:17:e5:ed:58:5d:f2:44:64:37:
                    b9:31:ac:0b:18:92:b3:87:91:93:1d:73:75:ef:05:
                    57:3d:f3:84:cd:24:91:80:aa:17:a6:e2:4a:a4:87:
                    f6:9c:36:a2:75:db:2e:b0:62:9e:f1:06:6c:93:d2:
                    d6:3d:85:b3:2e:e5:aa:4e:f7:e8:4f:5b:70:aa:b7:
                    2c:86:93:16:59:71:44:28:98:c3:66:19:da:d4:6e:
                    d6:f9:13:71:c7:08:94:38:10:47:e2:71:e8:27:5e:
                    33:91:d7:56:82:2f:41:c1:2a:91:8f:e5:63:c1:ae:
                    10:6e:f5:86:9e:5c:a8:cf:b6:b0:41:f7:e5:da:78:
                    29:26:66:db:92:9f:00:b7:74:b4:31:95:67:dc:aa:
                    e4:b9:ff:19:2b:c7:55:32:20:fc:dd:80:b7:85:2d:
                    e1:28:fa:85:c5:ea:1e:48:8f:bb:39:a8:b6:47:b7:
                    3c:23:a7:b0:ef:7f:c9:cc:a7:41:c2:3c:99:70:52:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:12:9A:20:98:13:9D:9F:7A:64:29:90:66:35:5F:13:AB:CF:9B:24
            X509v3 Authority Key Identifier:
                keyid:C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/1b77e64731088d24599002004515c08f8c2e177f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:da:60:c6:0c:97:cb:21:1e:8a:a9:07:f8:e8:1f:0b:54:
         1d:3e:7a:9a:d3:a7:9c:c5:b8:b5:28:2d:6e:52:eb:6c:3f:d3:
         10:80:85:d1:33:65:a2:7d:9d:00:06:51:fd:af:16:a2:2c:80:
         a6:11:16:46:a2:09:b2:87:8b:ff:a3:fd:ae:43:0d:2b:9e:dc:
         9d:a7:2c:f3:39:20:00:74:14:bb:3c:d8:ae:9e:96:1c:8b:eb:
         f4:99:2c:de:0d:79:ef:a8:7f:b8:8e:32:0c:6a:9e:f5:6b:1f:
         06:6b:d4:a0:5e:1e:25:20:38:7e:5d:d1:84:88:ba:f8:8e:0d:
         67:51:79:64:0f:74:c1:1e:f1:c9:f8:2f:42:90:d5:7d:fe:5d:
         fa:fe:ec:39:e6:fe:fa:df:06:74:f2:1f:28:40:cb:75:f3:b2:
         ec:04:18:8f:a3:76:7e:64:06:a6:83:20:ba:b7:b1:22:96:cb:
         2f:e3:9f:cf:b3:b9:af:cf:bd:64:7b:3e:12:80:70:6d:bd:c4:
         34:6a:f3:f5:1f:6f:20:09:c0:90:15:a3:cb:a3:90:50:39:09:
         82:92:e7:03:eb:13:df:d4:89:93:b3:b4:5d:d6:5f:7b:a0:4b:
         a0:68:e0:52:a6:8e:7c:a5:86:0a:31:62:da:92:c7:ff:b4:e1:
         7a:71:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org