Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/4303a2ac3ea0e57e1e8a8ff9b2fc3116448d20cf.roa
File:                     4303a2ac3ea0e57e1e8a8ff9b2fc3116448d20cf.roa (raw, json)
Hash identifier:          h9TPZtiWupwUe4Hq5lr65gYul55v1AceKt2K3g0FfXA=
Subject key identifier:   92:DF:5E:F1:6A:0C:F4:53:F0:58:34:A8:04:B8:12:5D:05:9B:10:37
Certificate issuer:       /CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
Certificate serial:       08C0
Authority key identifier: 85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/4303a2ac3ea0e57e1e8a8ff9b2fc3116448d20cf.roa
Signing time:             Mon 07 Nov 2022 13:06:24 +0000
ROA not before:           Thu 03 Nov 2022 12:57:22 +0000
ROA not after:            Thu 07 Nov 2024 12:57:22 +0000
asID:                     27994
IP address blocks:        200.59.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
        Validity
            Not Before: Nov  3 12:57:22 2022 GMT
            Not After : Nov  7 12:57:22 2024 GMT
        Subject: CN=4303a2ac3ea0e57e1e8a8ff9b2fc3116448d20cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:c6:c8:36:a8:8b:a0:15:19:28:89:0d:3c:
                    68:bb:b0:84:ed:12:c8:a6:50:2c:65:e9:2d:13:4a:
                    d5:c2:2f:c7:f9:26:1b:73:24:18:bf:f2:f7:da:49:
                    f4:73:e0:4c:1e:19:79:af:21:5d:c9:f8:5e:c6:8e:
                    1d:1d:c6:b4:aa:6b:9e:32:46:29:4d:47:f7:89:c1:
                    03:15:c8:4f:53:8b:d1:a9:26:3d:5e:5b:68:0e:61:
                    75:df:7d:d9:04:df:bc:bb:a1:1d:00:08:a4:a3:00:
                    31:db:2c:8f:66:e0:92:b6:f8:ec:eb:d7:39:b1:e7:
                    21:39:a4:b2:41:2b:0b:c4:40:eb:6c:51:c8:b0:7a:
                    1a:af:8f:e9:72:e0:0e:fc:23:14:7a:e8:49:b6:4c:
                    89:0e:e8:ee:0d:61:92:f1:f6:99:77:aa:54:5e:3b:
                    b1:4c:a8:74:a1:25:51:54:e9:e8:df:14:90:44:33:
                    02:f6:d2:f1:af:a1:b2:b9:e6:f3:9c:bd:59:ef:6a:
                    e5:e9:ef:af:7d:15:ce:10:d4:37:25:b8:c1:9c:96:
                    2f:8f:c7:d7:7f:89:10:92:94:01:b9:d8:07:6e:9c:
                    ff:2f:43:22:f5:cd:57:f2:f1:d4:d1:51:34:18:6f:
                    a2:75:90:b9:67:6f:c3:70:c2:ad:ad:f7:e1:ac:f7:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DF:5E:F1:6A:0C:F4:53:F0:58:34:A8:04:B8:12:5D:05:9B:10:37
            X509v3 Authority Key Identifier:
                keyid:85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/4303a2ac3ea0e57e1e8a8ff9b2fc3116448d20cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:75:2c:30:53:cd:f9:dd:39:20:0f:bd:05:64:64:df:b2:
         1c:80:d5:51:dd:f4:a0:56:a7:7f:fe:43:c2:82:16:c2:67:5e:
         e7:8f:28:c0:b8:f9:07:39:ad:02:ba:b7:9b:bb:ca:00:9c:0e:
         36:8f:11:8f:b8:85:40:fc:5c:61:93:1b:c4:8a:da:22:fb:37:
         90:42:8d:8f:59:19:24:41:e6:75:7f:ea:d8:b3:e5:49:31:89:
         d9:89:bc:56:16:cf:80:27:5a:75:f8:8b:1e:22:cc:eb:88:e6:
         26:00:e9:61:ba:17:25:08:bc:c6:11:1c:b7:63:47:77:b5:75:
         a0:d3:2e:7e:1e:56:d9:f3:02:f6:8a:44:4f:13:18:55:35:af:
         91:e9:a2:60:14:69:c9:74:2e:99:d3:df:d0:71:10:e7:0b:a5:
         12:67:32:f0:6b:0a:73:11:73:59:6c:21:17:7f:92:b7:d7:92:
         95:8b:e5:41:ea:63:04:63:da:0b:57:9e:4b:7a:39:e1:43:ba:
         9f:a8:11:f7:ca:7b:fb:e2:65:17:37:88:1d:16:3b:6d:5d:2c:
         77:63:22:be:d1:db:c6:0b:37:e4:02:ab:80:a9:56:e9:9c:03:
         a2:a4:d5:e6:6e:4f:a0:73:39:27:88:a7:33:19:d4:60:e7:80:
         28:ad:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org