Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/2d8ef92fc280cd874b252227e4cefdf44c50c90d.roa
File:                     2d8ef92fc280cd874b252227e4cefdf44c50c90d.roa (raw, json)
Hash identifier:          GKm8lNH0heQmXRraFt/o3oKITj4tk9G1aDmViT4+oWs=
Subject key identifier:   37:1B:A4:D9:39:91:33:90:E4:6A:5C:63:DA:B6:7C:DD:B7:3E:DE:75
Certificate issuer:       /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial:       0C0358
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/2d8ef92fc280cd874b252227e4cefdf44c50c90d.roa
Signing time:             Wed 24 Mar 2021 14:44:35 +0000
ROA not before:           Wed 24 Mar 2021 14:44:33 +0000
ROA not after:            Tue 24 Mar 2026 14:44:33 +0000
asID:                     8151
IP address blocks:        200.33.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787288 (0xc0358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Validity
            Not Before: Mar 24 14:44:33 2021 GMT
            Not After : Mar 24 14:44:33 2026 GMT
        Subject: CN=2d8ef92fc280cd874b252227e4cefdf44c50c90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:da:14:99:83:5c:f1:ca:78:f2:50:e5:66:
                    91:0e:d0:e2:2f:b0:1d:ef:ac:45:c2:2b:dd:9b:16:
                    7a:b0:11:8a:68:bb:bd:fc:09:5f:9a:a6:1e:c3:95:
                    45:e0:2f:ed:f2:33:53:84:66:46:ff:55:52:b9:9e:
                    75:d4:5d:02:6f:07:e6:1b:fe:e9:82:93:b3:dd:06:
                    07:61:f7:53:11:8f:0a:56:45:c4:58:c1:28:40:dc:
                    55:ad:1a:f1:d1:b1:b9:4e:f7:e3:23:60:72:56:0d:
                    dc:c2:66:4c:5b:0a:4a:49:35:2f:95:6b:33:c8:7c:
                    16:c7:f3:0a:b7:fd:47:1d:2a:84:f8:06:3a:bf:e4:
                    be:ed:84:c0:81:a8:72:a3:63:59:a2:f1:c2:40:d2:
                    da:47:6e:94:5c:43:24:16:d9:c2:ff:29:fc:dc:ab:
                    fc:11:e4:9b:3c:79:3b:3a:67:6d:51:e3:05:d7:89:
                    56:ce:bd:50:a5:32:03:c9:5e:de:bd:27:5d:21:4f:
                    a2:e7:6a:13:19:95:da:4b:97:17:67:87:28:6c:f8:
                    1b:84:51:b1:e3:6b:97:82:f0:76:87:25:55:67:1c:
                    86:1e:93:59:ed:92:14:22:22:b0:97:c0:7e:1a:06:
                    ee:86:31:a9:2d:f8:38:9d:54:d1:69:04:d9:0e:38:
                    fd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:A4:D9:39:91:33:90:E4:6A:5C:63:DA:B6:7C:DD:B7:3E:DE:75
            X509v3 Authority Key Identifier:
                keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/2d8ef92fc280cd874b252227e4cefdf44c50c90d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:64:c2:9a:d2:69:b5:fe:81:2c:f2:5b:39:0c:37:f9:51:37:
         e1:6d:ce:a5:07:91:97:c7:54:e0:fb:91:67:36:e4:64:13:dc:
         6d:37:57:81:db:d6:48:47:ba:49:0e:a4:b4:59:0a:f9:a5:4b:
         0e:4c:a4:21:f8:16:ca:49:7f:61:3c:0c:81:00:dd:22:3d:b8:
         7d:b9:b9:f2:78:f8:a1:32:ca:81:96:e6:4d:b4:b6:82:2f:9e:
         2e:ab:7f:2a:cd:31:cc:78:06:6a:20:57:58:46:f1:0e:10:47:
         f7:5d:ce:af:87:8e:7e:cc:d4:55:67:86:7e:03:0c:89:3a:2f:
         e7:04:9d:ce:f7:f5:84:70:65:24:7a:70:eb:b1:c7:16:1c:ac:
         72:8e:f4:ba:02:79:12:a6:ff:54:8a:7a:c2:e7:06:3c:26:38:
         9f:d3:48:12:21:24:56:7f:ef:a7:c8:dd:f8:e5:f8:4f:85:32:
         57:c1:ce:90:6e:84:b3:b7:79:f3:19:42:d8:94:af:3c:aa:ca:
         7e:57:d4:d3:9d:93:8e:5c:55:42:4b:b7:6f:0b:2a:ce:66:31:
         f4:0a:9f:a7:2d:bf:66:00:b0:90:14:c1:fd:bb:ce:47:26:a9:
         25:7e:22:ff:dc:ec:c6:79:c4:1d:51:c9:d2:98:22:8e:8e:97:
         33:07:f9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org