Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/bcccfea1e243fb29e00fb44f721a9efc877d5332.roa
File:                     bcccfea1e243fb29e00fb44f721a9efc877d5332.roa (raw, json)
Hash identifier:          1fifFHoULjF4EabdY4XBlKih6GAcvIpeu+Yp9cx84QM=
Subject key identifier:   B6:89:EA:D7:5C:9F:8C:1D:DC:7B:AC:E6:61:50:50:E2:64:6A:A0:C1
Certificate issuer:       /CN=dde8c4431eccff427c82795998c2e957725b89e9
Certificate serial:       041B0A
Authority key identifier: AB:32:C4:DE:BA:62:CB:C0:9C:67:63:48:19:D4:44:1B:B4:C3:8C:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dde8c4431eccff427c82795998c2e957725b89e9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/bcccfea1e243fb29e00fb44f721a9efc877d5332.roa
Signing time:             Thu 05 Oct 2023 19:40:30 +0000
ROA not before:           Wed 04 Oct 2023 19:40:29 +0000
ROA not after:            Sun 05 Oct 2025 19:40:29 +0000
asID:                     27885
IP address blocks:        200.10.140.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269066 (0x41b0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde8c4431eccff427c82795998c2e957725b89e9
        Validity
            Not Before: Oct  4 19:40:29 2023 GMT
            Not After : Oct  5 19:40:29 2025 GMT
        Subject: CN=bcccfea1e243fb29e00fb44f721a9efc877d5332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:87:ca:5e:65:ba:5b:00:03:39:5b:2a:23:
                    22:d3:df:95:aa:1c:64:77:8f:a7:f8:0f:86:52:ca:
                    0e:29:18:89:08:d6:04:df:19:68:3b:30:3a:5f:af:
                    85:98:f1:03:82:2e:5f:1c:53:f8:92:53:63:96:59:
                    67:81:38:5c:e3:db:dd:c0:2e:a1:45:00:a3:cb:fb:
                    23:1f:e9:f5:2e:da:e9:94:a9:ed:af:08:73:72:64:
                    9b:f4:b9:a3:30:83:96:9e:4f:2e:1e:a4:43:b1:7e:
                    88:02:e9:15:a8:ef:28:de:5e:4b:74:bd:84:6c:20:
                    d0:93:b7:8c:25:e2:98:df:ac:09:ed:5f:83:b9:92:
                    c1:3c:50:3d:d9:a7:66:52:d0:9c:2c:6c:ee:80:91:
                    72:cc:90:2b:dc:4f:a6:b8:30:21:8c:f2:b8:be:9b:
                    4a:8a:a3:36:23:90:24:fb:13:ac:60:ea:9e:c6:5e:
                    f9:47:2f:9a:1c:f9:7a:b6:6d:63:d2:f2:24:4d:b4:
                    04:8a:d2:33:3c:0b:50:3a:64:3a:d4:2c:17:e0:c8:
                    64:ab:ef:02:f6:fd:61:97:c8:bd:d7:e5:8b:df:cf:
                    9f:69:29:99:46:28:bc:8b:99:75:df:8f:63:d1:72:
                    c3:06:bb:7b:c4:c8:5e:7b:15:80:a2:45:b5:40:b5:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:89:EA:D7:5C:9F:8C:1D:DC:7B:AC:E6:61:50:50:E2:64:6A:A0:C1
            X509v3 Authority Key Identifier:
                keyid:AB:32:C4:DE:BA:62:CB:C0:9C:67:63:48:19:D4:44:1B:B4:C3:8C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dde8c4431eccff427c82795998c2e957725b89e9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/bcccfea1e243fb29e00fb44f721a9efc877d5332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/dde8c4431eccff427c82795998c2e957725b89e9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:bd:12:78:cb:ec:29:23:e9:87:ba:e7:33:ca:75:f1:e6:
         28:e5:e8:5d:59:a8:00:ff:7d:31:f7:63:7b:b1:06:a9:d0:17:
         31:84:d9:8d:e3:af:04:76:d3:28:c8:5d:f6:eb:81:20:11:ec:
         4e:69:b9:63:7b:c1:8e:45:44:b3:6d:ca:ed:23:58:52:f1:f2:
         70:ac:f3:29:02:34:c6:dc:43:92:c3:fb:10:57:7e:ef:a5:69:
         3c:ca:30:ea:d5:ee:2e:ac:22:86:10:49:2e:e7:a9:c4:0e:71:
         52:2b:2a:7c:a7:2d:7f:34:98:ca:37:02:be:60:72:7e:50:29:
         e4:63:cc:1b:c1:f0:d5:ca:66:17:2f:83:e9:ff:8b:30:96:b5:
         4e:b2:45:f7:fa:24:7d:fd:e4:f3:a0:fb:8c:64:45:3d:32:d2:
         af:c5:56:d4:83:04:3c:fe:bb:7d:b9:96:dc:5a:f6:8c:54:70:
         51:b6:49:46:24:da:d9:64:96:78:e8:ff:78:12:24:99:19:f8:
         04:02:8b:37:09:e1:da:7b:e9:89:37:e7:e2:8d:2c:15:52:09:
         b7:4b:6e:05:09:00:05:25:40:78:82:a2:1c:52:f3:0a:e0:2c:
         da:72:33:16:d0:63:e6:0b:b7:0e:e0:91:0c:15:29:75:54:07:
         be:f1:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org