Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/44d0c290ee3dfa329d1df59701abf784ea7ecc7f.roa
File:                     44d0c290ee3dfa329d1df59701abf784ea7ecc7f.roa (raw, json)
Hash identifier:          vyloZ2s2c3R3G376edys/rZiP/z8iGaLC+rKLdOLLHI=
Subject key identifier:   4F:7E:3F:6D:AF:E9:5D:0D:9B:5B:01:F3:3D:C6:E9:17:39:F6:72:E2
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       06E96A
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/44d0c290ee3dfa329d1df59701abf784ea7ecc7f.roa
Signing time:             Thu 10 Aug 2023 20:16:54 +0000
ROA not before:           Wed 09 Aug 2023 20:16:54 +0000
ROA not after:            Sun 10 Aug 2025 20:16:54 +0000
asID:                     7418
IP address blocks:        201.187.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452970 (0x6e96a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Aug  9 20:16:54 2023 GMT
            Not After : Aug 10 20:16:54 2025 GMT
        Subject: CN=44d0c290ee3dfa329d1df59701abf784ea7ecc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5f:a3:9a:78:28:17:3a:98:49:43:ea:d8:c3:
                    14:f5:5c:c9:ff:f9:85:ac:8b:3f:40:6c:97:2c:da:
                    7a:a2:56:b7:72:95:a7:36:5f:a0:af:78:6b:b5:e8:
                    a6:90:29:c8:e7:bb:33:78:0c:b7:ae:00:56:ba:27:
                    54:20:b3:80:75:13:40:d1:e4:08:62:e4:8b:bc:a8:
                    2c:39:fc:1a:01:45:90:09:14:8e:ea:b8:98:9f:19:
                    e8:e1:46:0a:12:a8:1d:1d:0d:18:fa:d7:02:62:2b:
                    ad:38:ee:1a:e5:bb:9e:9f:5d:bc:cb:d0:32:97:0e:
                    90:b8:ea:13:3e:e9:63:cf:cc:c3:94:09:be:19:c7:
                    1a:fb:3d:4b:62:62:5e:5e:4d:00:39:38:67:53:70:
                    75:48:4a:6d:92:c6:fc:e9:89:c1:ec:33:57:75:4f:
                    bd:7e:f4:1f:c8:58:08:15:0d:7e:fa:78:02:bb:09:
                    20:41:b9:23:7b:7b:48:53:cc:7c:e7:6a:ca:73:c0:
                    92:cc:11:e7:b8:8e:38:82:b6:e7:f9:3c:60:e1:b6:
                    ca:1d:79:9a:a8:13:02:cb:64:20:a3:36:13:17:f8:
                    27:a3:d3:3c:67:e6:63:86:aa:1a:88:13:0d:78:e5:
                    0a:0f:c5:67:3f:27:cf:66:82:15:3c:2b:e7:31:73:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7E:3F:6D:AF:E9:5D:0D:9B:5B:01:F3:3D:C6:E9:17:39:F6:72:E2
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/44d0c290ee3dfa329d1df59701abf784ea7ecc7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.187.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:86:6f:e2:52:96:24:4b:2c:ef:d9:3e:f5:f9:50:a9:5e:5f:
         6b:10:bb:2d:96:7f:ab:6a:73:e6:d9:c5:ef:35:21:bd:0f:31:
         ed:13:ea:b8:22:e2:c7:a3:22:c8:02:c3:be:1d:51:5d:b4:8f:
         97:09:26:21:c9:d3:a0:8e:c3:76:13:12:8b:4b:92:fb:2a:5c:
         e8:23:49:18:83:bd:8a:d4:a0:5b:c2:cb:88:af:e7:f0:b5:77:
         0f:52:98:06:de:6c:7f:61:ce:68:48:2d:9f:39:06:c2:f5:20:
         ca:cc:7b:f0:4c:b1:be:80:b6:42:23:9b:11:0e:de:5e:2f:8b:
         0e:b7:48:d2:a1:f8:02:00:23:2c:d7:12:cf:59:3a:27:ff:19:
         4e:35:26:88:63:0a:0c:24:50:e8:fb:3d:85:16:9d:af:fa:ad:
         14:27:83:7d:e4:99:9e:f6:b1:04:ed:87:7d:c2:6e:b3:09:47:
         46:b7:a8:26:73:db:5f:72:a0:c1:83:aa:78:3b:ff:ab:1f:36:
         1f:b7:f1:99:7e:c9:ba:36:fc:93:0a:5b:ae:f3:2a:54:00:de:
         56:80:a7:3e:3a:ad:2a:ab:b8:31:90:67:cc:a7:81:5a:b1:0e:
         b5:4c:60:cb:c8:77:52:01:4e:13:e3:d7:c7:4a:76:3d:98:cd:
         36:5b:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org