Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/069c8f002f74421c8becb559461092fe9631c36e.roa
File:                     069c8f002f74421c8becb559461092fe9631c36e.roa (raw, json)
Hash identifier:          b/6ozhzLg2zG4aEbQ4uoTGZVah/YyCwk5bq4VuRMwyA=
Subject key identifier:   47:89:D8:9A:0A:02:70:5B:DA:22:EC:59:38:D1:63:D3:53:2C:6A:6C
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       0AAE28
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/069c8f002f74421c8becb559461092fe9631c36e.roa
Signing time:             Fri 31 Mar 2023 14:10:29 +0000
ROA not before:           Thu 30 Mar 2023 14:09:13 +0000
ROA not after:            Mon 31 Mar 2025 14:09:13 +0000
asID:                     262175
IP address blocks:        200.106.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699944 (0xaae28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Mar 30 14:09:13 2023 GMT
            Not After : Mar 31 14:09:13 2025 GMT
        Subject: CN=069c8f002f74421c8becb559461092fe9631c36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:af:9e:3b:99:c7:cf:d6:47:88:94:a7:ba:
                    50:31:7a:5c:bf:b8:e2:33:a1:7c:52:86:29:6a:22:
                    cc:29:9f:13:a1:42:bb:ba:18:f7:f4:f7:7f:6a:e6:
                    e7:18:cf:f4:65:69:cd:37:e3:21:f0:08:0f:a3:ae:
                    7e:63:e5:32:b2:0d:c1:f0:d3:10:ea:3c:54:de:90:
                    89:5d:ac:7c:05:8b:39:03:0f:68:62:a0:d2:1c:93:
                    cb:17:b5:47:16:b6:b7:99:d2:c9:f5:c4:f3:47:e6:
                    a2:f9:b1:a9:e7:71:de:7a:14:bc:c8:86:a1:81:38:
                    ba:2d:a4:53:a4:74:06:1d:d1:d8:88:b1:6f:d9:17:
                    e2:00:35:c2:91:e9:23:8c:10:4c:3c:bd:a5:5e:76:
                    9e:fc:df:d3:a0:a2:e8:2d:eb:a5:de:81:f7:b0:f4:
                    03:e0:a8:d6:7a:10:a0:1a:b1:17:07:9c:95:30:b1:
                    44:e2:4c:4f:de:a2:e0:5b:29:36:4c:00:a4:13:24:
                    4b:a2:e1:3c:a5:06:f3:7e:9a:31:6c:b6:a1:4b:8e:
                    95:ae:b2:6b:05:af:ca:c4:2b:03:e2:f4:b8:f2:02:
                    12:3d:38:50:91:43:1b:f0:e2:ae:ef:6f:b4:6f:e9:
                    2b:5d:79:7d:d6:bb:8a:56:8c:23:0e:93:d8:a1:eb:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:D8:9A:0A:02:70:5B:DA:22:EC:59:38:D1:63:D3:53:2C:6A:6C
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/069c8f002f74421c8becb559461092fe9631c36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:66:de:88:76:0c:f2:1a:8d:c5:18:17:a6:41:45:67:99:d0:
         06:96:45:cb:c7:83:f8:3d:1d:5f:98:75:49:4d:14:e4:12:a9:
         90:4a:66:72:97:24:7f:7e:b8:20:54:fe:68:9d:9c:93:4f:a2:
         78:57:35:b2:66:1e:04:2c:0a:40:df:8d:77:d2:aa:e4:1f:5f:
         c3:90:d5:7c:bd:b3:62:c1:d2:f0:68:21:eb:d5:ff:07:32:5c:
         c6:2d:20:a1:5c:e8:04:f3:c3:1d:e3:a4:3f:93:b6:e8:03:a2:
         59:a0:1d:13:a0:49:e5:14:e2:c9:4d:cd:a0:fc:78:09:b2:68:
         a4:48:2f:96:ca:1a:af:85:1a:b9:fd:ed:2e:9b:26:4c:89:6d:
         68:7e:e1:b0:73:5b:25:ae:cf:23:fe:90:19:1b:a1:18:b6:4b:
         e3:a7:8b:b8:02:da:24:62:21:92:18:6c:93:15:f6:94:b8:c7:
         3c:0e:17:1c:98:f7:91:1f:ca:39:cb:81:41:5b:cd:98:3d:9a:
         d7:98:cf:14:44:96:f4:51:f3:7c:ee:6a:64:5f:a1:96:2b:4f:
         78:f2:14:18:3f:aa:40:96:a8:4c:e0:b1:e4:43:78:f0:06:dc:
         19:f6:18:d5:a2:e0:f3:39:89:65:3e:9a:93:25:84:05:99:89:
         48:df:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org