Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/29d84d19adab728709d19accc1c4d284b8bac4ec.roa
File:                     29d84d19adab728709d19accc1c4d284b8bac4ec.roa (raw, json)
Hash identifier:          xfFGQS+rPjbOzbQu4pvKUFWO1zTxBB27JIVAT5tFUTU=
Subject key identifier:   69:8C:8E:4C:A4:BC:64:F7:02:DE:51:27:02:76:8E:ED:8E:AE:C8:7D
Certificate issuer:       /CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Certificate serial:       22A031
Authority key identifier: 8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/29d84d19adab728709d19accc1c4d284b8bac4ec.roa
Signing time:             Tue 25 Jul 2023 22:55:41 +0000
ROA not before:           Mon 24 Jul 2023 22:55:41 +0000
ROA not after:            Fri 25 Jul 2025 22:55:41 +0000
asID:                     22541
IP address blocks:        200.75.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269233 (0x22a031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
        Validity
            Not Before: Jul 24 22:55:41 2023 GMT
            Not After : Jul 25 22:55:41 2025 GMT
        Subject: CN=29d84d19adab728709d19accc1c4d284b8bac4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:97:34:ce:57:94:73:93:1d:b3:ab:c0:ff:
                    db:14:9e:e4:fc:12:ab:a2:c9:c1:86:53:c5:36:d8:
                    82:a0:8b:cc:de:83:cb:2a:29:ff:8d:f5:9c:8f:30:
                    31:2e:21:2c:44:e4:4e:83:2e:8e:68:ab:91:71:cb:
                    c3:b2:5a:de:4d:6f:c0:f6:85:f2:0a:80:3d:25:7c:
                    ae:cc:d5:34:4a:0a:b9:d6:06:6f:7a:f6:59:ec:79:
                    0c:2f:5c:dd:1c:d2:0e:21:4b:ef:b4:58:8a:48:df:
                    bb:5b:4b:e5:84:ae:d2:10:5d:3e:56:0b:2f:75:cf:
                    0c:e1:ec:53:97:af:3a:b7:22:f6:eb:10:0b:1a:a7:
                    bc:b8:fc:f6:3b:d2:ae:5c:9d:7e:39:6b:04:8b:d8:
                    8e:bd:4a:97:92:9b:e8:d8:7e:99:11:d4:f8:6f:f8:
                    d4:17:7a:a0:5f:05:eb:7d:d1:dd:16:ba:cd:8c:07:
                    02:dc:64:99:9e:94:d1:a3:05:d3:ca:59:f3:8c:eb:
                    e9:32:91:1a:69:b3:1b:4f:af:04:38:52:1d:2d:98:
                    92:b4:ed:18:9b:a2:80:b9:b1:6c:9d:ba:ad:a6:27:
                    15:b3:ce:b6:d7:36:74:ba:25:05:9c:f4:6b:df:15:
                    18:3c:ca:36:e5:b8:6a:13:31:dc:91:b0:53:8c:bf:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:8E:4C:A4:BC:64:F7:02:DE:51:27:02:76:8E:ED:8E:AE:C8:7D
            X509v3 Authority Key Identifier:
                keyid:8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/29d84d19adab728709d19accc1c4d284b8bac4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:37:56:0a:74:b4:b2:29:e7:64:fe:d5:a7:e2:ee:b5:3b:4b:
         05:78:5d:3a:fe:3e:b5:e6:42:23:aa:6b:a0:34:76:aa:03:c5:
         32:11:fc:20:c7:96:21:dc:58:53:26:37:d5:89:6f:d7:06:5e:
         5e:2f:e9:b7:d7:f0:da:40:75:e8:c1:71:dd:4e:eb:00:60:c6:
         bf:0b:cb:1b:01:34:de:73:6b:ac:69:32:ff:10:8b:b3:86:60:
         20:58:f7:27:66:8f:9a:e8:de:a9:9c:c0:be:bc:bf:19:ac:d2:
         fb:e8:0b:c5:06:56:e2:e9:48:c7:69:cf:20:2b:58:1f:ec:b0:
         95:4a:fb:07:7b:b7:d2:c8:94:51:22:87:18:93:dd:be:7a:fe:
         17:be:52:ad:9b:4a:45:21:ec:a1:7a:d9:f3:9b:b4:d2:48:be:
         2a:0b:83:ef:ee:dc:01:90:8f:fa:d8:ef:19:2a:59:a3:c7:a4:
         e6:72:ed:ae:fa:ba:e7:1c:31:2c:5f:b9:aa:97:94:58:e3:c7:
         36:c1:08:c3:91:ab:e4:1d:b5:ef:c9:2f:45:81:a1:a3:c6:b7:
         85:98:4e:20:9b:60:5d:64:b0:a1:0a:dc:92:e4:6a:ea:f7:68:
         70:6b:dd:66:e2:e6:61:a8:69:2c:8e:3e:67:55:90:31:51:86:
         c8:49:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org