Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/9884b217497aa62dc38e8858c1ba83cf0be0f366.roa
File:                     9884b217497aa62dc38e8858c1ba83cf0be0f366.roa (raw, json)
Hash identifier:          JmiMWis6ZWyh22QEyelkl2JsGnZ0REie0Pxh9KdaUl8=
Subject key identifier:   EF:4E:C3:98:82:4E:DA:57:EC:83:EA:AF:EC:F2:46:C0:FE:4E:EC:08
Certificate issuer:       /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial:       164B8D
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/9884b217497aa62dc38e8858c1ba83cf0be0f366.roa
Signing time:             Thu 20 Apr 2023 12:11:55 +0000
ROA not before:           Wed 19 Apr 2023 12:11:55 +0000
ROA not after:            Sun 20 Apr 2025 12:11:55 +0000
asID:                     7303
IP address blocks:        200.63.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461133 (0x164b8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
        Validity
            Not Before: Apr 19 12:11:55 2023 GMT
            Not After : Apr 20 12:11:55 2025 GMT
        Subject: CN=9884b217497aa62dc38e8858c1ba83cf0be0f366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:9c:ee:0b:1b:40:43:f3:0c:d7:98:e3:5b:
                    77:1b:b8:82:1e:2a:61:c1:fb:cf:25:c2:67:00:07:
                    03:a4:f5:69:2e:61:4b:94:5f:08:b2:f5:71:18:d7:
                    fa:ba:f9:a2:14:2c:0f:40:67:df:8a:07:78:13:db:
                    76:2d:d8:ed:06:95:93:5e:d4:a8:57:51:e8:da:a1:
                    d0:50:fd:20:7a:7b:2e:07:92:91:3f:9f:1a:fd:0e:
                    09:e9:1c:35:b0:4d:8c:bf:8a:38:00:ba:63:d9:0c:
                    7c:bb:6e:c2:d4:71:0e:62:c4:c5:e8:13:ac:f4:b2:
                    77:77:5c:b1:bc:46:5e:4c:46:f9:8e:30:8d:8c:36:
                    c1:0c:d2:5d:ae:63:2d:55:71:e7:3e:62:d9:75:f3:
                    02:4f:23:02:02:e7:0f:bd:e9:72:b6:80:8b:a8:46:
                    01:0c:46:f1:dc:db:28:18:0b:ec:82:19:ea:60:4a:
                    37:e0:23:1e:b9:58:6a:0e:9e:eb:5c:80:58:05:50:
                    28:21:bf:3a:45:70:84:5a:2f:5f:0c:b7:64:5d:94:
                    98:ab:53:66:a6:ea:5d:ff:a4:8b:9b:66:e9:32:ec:
                    dc:d4:ce:4d:db:3d:e2:34:40:df:12:5a:02:2b:68:
                    ce:35:0b:b6:5b:07:43:c8:aa:bf:b7:14:3f:10:be:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4E:C3:98:82:4E:DA:57:EC:83:EA:AF:EC:F2:46:C0:FE:4E:EC:08
            X509v3 Authority Key Identifier:
                keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/9884b217497aa62dc38e8858c1ba83cf0be0f366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:f2:bf:c1:5a:60:a2:2d:40:54:dc:ce:27:c2:5b:ff:15:
         46:0c:45:73:83:8b:ff:c5:24:62:0d:67:1a:cf:d1:eb:27:b5:
         19:b3:2b:2b:cc:7f:91:d8:8d:45:34:c0:1b:c9:96:b0:e2:ea:
         79:13:4c:59:36:e1:a8:a1:56:7b:33:73:08:63:d7:56:16:4d:
         fb:e9:33:2f:7c:0f:f5:cd:de:d9:77:b5:b6:8f:26:5c:4e:45:
         2c:4e:8a:e2:7c:98:69:f2:a9:f4:a9:a6:bb:3c:17:eb:0f:f8:
         63:71:9d:1e:60:3d:26:cd:f5:07:3c:0c:e0:43:17:82:6e:d2:
         05:bf:15:21:87:72:b0:57:df:e9:f1:0a:32:1b:56:32:91:ae:
         eb:b9:a0:1c:80:e9:27:6c:b7:0c:c3:95:28:21:0b:47:de:95:
         d3:68:05:ad:d0:b6:ee:2c:02:68:87:9c:e6:6a:32:88:51:bb:
         dc:53:95:e9:47:78:f8:18:c7:da:17:da:dc:e6:6a:59:ab:41:
         08:02:25:fc:4b:6d:57:0a:35:28:51:58:dc:02:39:a2:15:c5:
         ec:92:14:fa:e1:13:d4:f1:cf:01:03:9a:5e:d8:4e:e7:8b:6d:
         53:10:4c:d5:da:85:65:90:64:05:d4:8b:4b:d6:bf:ef:3d:92:
         01:ca:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org