Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7920c63710635654e8338891cdfc5b4e63ad7abc.roa
File:                     7920c63710635654e8338891cdfc5b4e63ad7abc.roa (raw, json)
Hash identifier:          tgJauzlE8oPHa9jmSCjapl6185hDjNyKNwy0/tilens=
Subject key identifier:   AB:78:EE:3C:D3:3F:08:86:0A:4C:77:E2:80:91:06:98:30:0D:85:31
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       1A28
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7920c63710635654e8338891cdfc5b4e63ad7abc.roa
Signing time:             Wed 21 Sep 2022 20:50:33 +0000
ROA not before:           Wed 21 Sep 2022 20:48:46 +0000
ROA not after:            Sat 21 Sep 2024 20:48:46 +0000
asID:                     8163
IP address blocks:        200.89.96.0/24 maxlen: 24
                          200.89.97.0/24 maxlen: 24
                          200.89.98.0/24 maxlen: 24
                          200.89.99.0/24 maxlen: 24
                          200.89.101.0/24 maxlen: 24
                          200.89.102.0/24 maxlen: 24
                          200.89.103.0/24 maxlen: 24
                          200.89.104.0/24 maxlen: 24
                          200.89.105.0/24 maxlen: 24
                          200.89.106.0/24 maxlen: 24
                          200.89.107.0/24 maxlen: 24
                          200.89.108.0/24 maxlen: 24
                          200.89.109.0/24 maxlen: 24
                          200.89.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6696 (0x1a28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Sep 21 20:48:46 2022 GMT
            Not After : Sep 21 20:48:46 2024 GMT
        Subject: CN=7920c63710635654e8338891cdfc5b4e63ad7abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:21:52:e2:9b:71:90:25:77:c7:d4:7f:98:
                    f3:02:a9:d1:84:0a:03:51:70:3b:91:a0:27:0b:31:
                    bc:7c:1d:f0:0d:29:a6:bc:eb:e6:d4:26:15:8a:42:
                    b0:12:73:3c:cc:44:07:e3:c4:05:b4:8e:ce:cb:ca:
                    46:05:a2:92:67:0f:4f:39:c1:5a:7d:db:75:02:05:
                    c9:94:b8:ea:98:8d:bb:d4:75:29:37:eb:8b:5a:6b:
                    29:17:a4:c0:07:83:ec:19:3a:ce:c1:67:a4:e6:bb:
                    9c:39:8d:24:a2:65:69:9e:f5:f0:9e:a7:71:b2:93:
                    b0:7d:dc:8b:fa:3d:2c:cb:88:64:89:83:f8:57:ce:
                    9f:af:c3:ec:ec:ec:d6:3a:be:5e:42:15:97:54:92:
                    9a:42:79:8e:36:21:6c:69:36:2d:f6:7b:9d:1b:7f:
                    7b:f4:be:d1:99:43:61:66:07:25:f5:0a:5f:08:a5:
                    f9:50:24:f6:ff:bf:ee:f7:2f:c3:b7:01:c2:16:a4:
                    1c:2d:31:1c:a6:e5:c9:07:44:87:f7:bf:7f:e3:d5:
                    54:cc:cb:6c:dc:21:86:73:8c:da:ef:ca:ff:9a:2f:
                    b0:45:d1:77:91:a3:71:51:08:ad:8d:52:c1:4c:da:
                    38:ac:63:c6:fd:31:99:51:9f:95:73:ac:46:0e:1d:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:78:EE:3C:D3:3F:08:86:0A:4C:77:E2:80:91:06:98:30:0D:85:31
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7920c63710635654e8338891cdfc5b4e63ad7abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.96.0/22
                  200.89.101.0-200.89.110.255

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:ce:ca:11:67:c3:2e:f8:17:b4:24:cd:8d:6d:33:b5:11:
         85:f4:3e:09:c6:d5:07:fc:90:5d:09:9b:c0:4b:3d:d2:5d:ee:
         d8:f2:61:fd:14:84:a6:00:0e:8a:bd:b0:ff:f3:e3:35:0b:20:
         49:4f:82:10:f0:75:30:65:dd:f1:02:c6:bf:fb:bc:44:21:98:
         92:7e:ae:74:b3:58:8e:d9:99:f3:37:0d:b5:d7:19:95:69:c9:
         b7:74:3c:cc:af:30:e7:d7:97:55:fd:dc:95:dd:38:47:c9:d8:
         1a:ac:33:e1:e7:d5:a8:67:0b:5a:cd:fe:28:ab:be:89:b7:bc:
         93:7d:21:ae:c3:0e:27:c9:f2:0c:3e:93:22:68:c4:4d:1a:51:
         ff:1d:5e:0f:d3:44:00:bf:19:0a:fb:62:b2:ec:60:2d:ee:f2:
         7e:40:71:f8:c3:56:35:89:f1:1e:9c:dd:4e:03:79:48:e8:fd:
         4b:18:6c:81:ba:25:a3:fb:98:e7:6a:5b:e3:f3:f0:e3:0c:94:
         d7:18:2f:77:95:86:29:7c:b4:45:02:35:1e:0f:c9:2d:4d:4e:
         55:58:6a:68:45:04:ac:e6:0e:0e:00:e1:d9:4c:ef:9a:2c:e3:
         1a:f7:37:c1:47:58:f8:8a:f7:67:be:88:3e:27:7f:a8:71:94:
         8b:e6:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org