Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/98642092534d5dc65a953f126981355361d6c35e.roa
File:                     98642092534d5dc65a953f126981355361d6c35e.roa (raw, json)
Hash identifier:          a/PmeG+YzAvqP1tUfE9SIn94MyEfAlz7QjK5zRLEnxs=
Subject key identifier:   DB:63:8F:9A:3C:D6:97:24:23:C0:07:A2:C2:21:18:C3:F5:30:BB:18
Certificate issuer:       /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial:       168AC5
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/98642092534d5dc65a953f126981355361d6c35e.roa
Signing time:             Fri 28 Apr 2023 12:22:52 +0000
ROA not before:           Thu 27 Apr 2023 12:22:52 +0000
ROA not after:            Mon 28 Apr 2025 12:22:52 +0000
asID:                     11014
IP address blocks:        200.63.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477317 (0x168ac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
        Validity
            Not Before: Apr 27 12:22:52 2023 GMT
            Not After : Apr 28 12:22:52 2025 GMT
        Subject: CN=98642092534d5dc65a953f126981355361d6c35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:28:73:fb:4f:1e:3c:f2:09:00:cc:bb:6b:a3:
                    fb:2e:5f:1f:5f:48:89:63:20:9d:e8:26:2a:5d:32:
                    23:3f:00:06:c2:e0:58:a1:7f:6b:de:2d:fc:c6:9d:
                    d2:a8:bd:4f:b4:20:80:45:e9:4c:4d:9e:58:6d:86:
                    10:44:fc:8e:8d:2e:1b:6b:6b:a0:61:72:5a:7f:fb:
                    61:61:86:a0:9e:9c:bd:7b:c5:3f:f5:f4:0e:bc:3d:
                    7a:10:42:ab:0d:a6:de:6a:52:c8:b6:ef:20:fb:58:
                    81:64:e3:cf:4d:ae:58:f8:0a:9b:ab:3e:61:9b:7d:
                    04:a4:e4:9e:3c:ea:3c:8e:ab:29:56:30:e7:7a:ae:
                    f8:3d:5b:48:95:3b:56:18:29:b9:48:0c:4e:5f:80:
                    c8:e6:15:77:41:82:fc:62:89:c9:10:b9:18:d3:f4:
                    77:15:d6:ac:98:85:3c:14:e0:8b:ec:52:18:03:ec:
                    1b:94:65:d4:97:9c:56:1d:0f:26:92:65:c0:bd:cc:
                    3f:6b:21:da:d3:5e:27:06:47:76:1b:16:cf:c1:71:
                    0d:1c:e7:72:f7:33:d8:be:13:eb:53:b4:49:0e:e8:
                    e0:ee:26:99:13:10:8a:3e:be:2b:05:31:98:b8:9e:
                    35:bd:86:52:23:a6:46:e4:8f:f3:68:4a:c9:db:d6:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:63:8F:9A:3C:D6:97:24:23:C0:07:A2:C2:21:18:C3:F5:30:BB:18
            X509v3 Authority Key Identifier:
                keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/98642092534d5dc65a953f126981355361d6c35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:58:bf:cb:d5:ce:cc:08:01:9a:2a:51:15:cc:ba:6e:1a:
         a3:cf:f1:7e:74:01:b5:29:51:7b:ff:5a:bd:05:ef:b1:fe:95:
         49:08:45:68:08:ba:06:83:e5:45:9d:cd:9c:b0:87:87:f1:59:
         cc:3d:fb:59:be:ad:ed:c5:72:0e:5c:39:b4:da:60:08:03:de:
         17:63:40:b4:d3:5c:95:c6:42:4f:6e:06:e6:bc:e4:a4:13:20:
         d1:76:7d:86:a2:df:27:85:5e:0f:bd:1f:2d:9a:de:d2:4b:f7:
         87:1a:b1:00:34:d5:07:96:82:24:1b:5f:66:a6:44:92:42:d2:
         96:06:f9:60:6e:f1:12:b8:92:61:ed:d5:a8:81:06:c2:28:69:
         5f:e2:90:99:09:25:d7:b0:03:db:2c:fe:fd:30:20:bb:bf:d1:
         f6:07:42:f1:ef:5f:5d:cf:14:90:76:b9:12:6d:58:7b:c0:0b:
         97:ef:b8:72:ca:ef:53:4f:39:c5:f8:e4:49:3b:43:50:a1:a8:
         6f:b7:17:b8:2b:db:40:5b:40:5e:4a:e7:07:de:f5:5e:8e:c5:
         a8:a8:a2:c3:c7:7a:9d:fd:33:84:f7:e3:3e:f2:6b:9d:a3:ad:
         f2:43:e7:73:8b:a8:72:f2:99:92:a8:fc:3e:90:b2:27:8f:89:
         bc:a1:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org