Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/39d2b762ff8c336214109914e008480374064683.roa
File:                     39d2b762ff8c336214109914e008480374064683.roa (raw, json)
Hash identifier:          rXXX3Dtk63I/HkaNTat6BSr6j/WkFFSJAXa/PHyD4kc=
Subject key identifier:   20:40:BD:F0:FF:46:00:71:A4:7E:56:5B:F3:B6:29:C5:E9:6A:6C:69
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       10F0F8
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/39d2b762ff8c336214109914e008480374064683.roa
Signing time:             Wed 29 Nov 2023 21:58:49 +0000
ROA not before:           Wed 29 Nov 2023 21:58:49 +0000
ROA not after:            Sat 29 Nov 2025 21:58:49 +0000
asID:                     11315
IP address blocks:        200.81.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110264 (0x10f0f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Nov 29 21:58:49 2023 GMT
            Not After : Nov 29 21:58:49 2025 GMT
        Subject: CN=39d2b762ff8c336214109914e008480374064683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:56:9f:3a:88:d0:2b:0a:ab:d7:b9:e6:39:
                    f9:3a:f9:63:9a:1a:53:19:ea:a9:d0:7e:2e:64:53:
                    cc:cc:04:ef:47:f0:b1:8d:1f:41:25:c6:a6:7d:b6:
                    57:d8:c0:79:83:3a:3c:cc:3a:0a:3c:c0:e8:f1:c7:
                    c6:8d:79:2b:75:3a:66:8e:94:a4:32:bb:9b:84:db:
                    c2:ce:b7:86:1f:67:14:5f:2e:8a:b6:9f:68:4d:cf:
                    4e:40:99:1f:17:2e:90:24:88:43:28:52:c4:12:c0:
                    51:f8:33:52:e9:7a:8a:aa:58:4c:a8:55:1b:98:3b:
                    1f:df:ec:83:8e:9d:d1:72:a6:5b:11:de:67:77:b6:
                    91:88:fa:12:db:4f:43:9d:4e:bb:07:36:43:90:d1:
                    e2:20:ae:c6:fb:ee:d1:33:fb:84:bc:bf:4a:2c:70:
                    9f:3c:9b:ba:26:f5:00:45:16:98:23:ab:2e:5e:d0:
                    82:5f:d0:e1:68:ab:d3:ff:18:2c:03:5a:d6:ae:8b:
                    b0:b4:27:d6:b3:f4:17:31:51:ab:08:63:3e:e1:2e:
                    dd:0f:a9:c3:f0:53:6e:fe:79:ba:a5:ee:d9:12:1a:
                    5f:8e:42:ea:de:ff:3a:21:7a:b8:87:39:d2:6a:03:
                    b7:96:cc:3e:f3:85:87:8b:4f:8d:7a:b5:4e:e2:c9:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:40:BD:F0:FF:46:00:71:A4:7E:56:5B:F3:B6:29:C5:E9:6A:6C:69
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/39d2b762ff8c336214109914e008480374064683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:3b:15:12:f1:7a:af:85:fe:0e:96:42:ab:29:ed:f0:25:75:
         74:86:e5:69:bc:da:fb:20:d2:fa:7e:9d:b3:e2:d8:e8:35:19:
         74:47:bb:55:1c:79:59:ff:51:52:a0:40:20:1f:7d:fc:72:9a:
         40:ad:7c:35:bb:e3:91:df:d7:73:7b:d0:78:50:95:d7:f8:30:
         f6:6e:3a:c3:9d:ad:87:24:1b:7a:e7:5a:b5:59:c0:dd:8f:87:
         a6:0e:b1:67:b1:84:6b:9b:0a:50:49:01:1c:5e:95:8d:fb:5c:
         f7:c2:67:3d:f1:8a:30:da:b7:f3:53:62:e7:4d:fc:1f:1c:4b:
         4c:99:30:6c:22:57:1d:2f:ad:09:26:f7:ce:8d:8e:7f:64:5c:
         6c:0a:8d:c4:60:ef:56:fe:12:26:ab:d9:4a:a2:0f:76:b0:ad:
         45:3a:48:ae:f9:04:38:e1:72:89:db:fc:39:fe:b9:70:12:c6:
         7b:f7:50:74:86:28:a5:cf:a4:33:0c:00:73:d6:97:e9:8d:ac:
         5a:a7:6e:2d:02:cb:41:09:b1:97:8f:f2:0f:9e:a3:7d:c2:87:
         25:cc:6b:3b:07:0f:ce:19:a3:3e:41:41:0b:e0:f7:69:da:11:
         6d:ea:c5:33:60:c3:34:71:48:3d:45:9d:60:47:b7:d9:15:a9:
         c8:41:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org