Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/becee50d83233bc1bb235ee7f2e6a439483dd6a1.roa
File:                     becee50d83233bc1bb235ee7f2e6a439483dd6a1.roa (raw, json)
Hash identifier:          MxN5SutUGdnZfbTvoAul/XswEtgfaeW1mdr3kpkDoCs=
Subject key identifier:   C8:3A:14:40:95:6B:2F:35:64:9B:64:5B:F4:47:83:DB:22:E6:C9:62
Certificate issuer:       /CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
Certificate serial:       0DE3
Authority key identifier: 85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/becee50d83233bc1bb235ee7f2e6a439483dd6a1.roa
Signing time:             Mon 07 Nov 2022 13:07:34 +0000
ROA not before:           Thu 03 Nov 2022 12:57:22 +0000
ROA not after:            Thu 07 Nov 2024 12:57:22 +0000
asID:                     27994
IP address blocks:        200.59.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3555 (0xde3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
        Validity
            Not Before: Nov  3 12:57:22 2022 GMT
            Not After : Nov  7 12:57:22 2024 GMT
        Subject: CN=becee50d83233bc1bb235ee7f2e6a439483dd6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:e2:4c:52:2e:0a:15:37:5b:c9:1c:b1:32:
                    5c:18:8e:d4:e4:8b:b1:ab:2b:93:7a:ef:16:af:23:
                    43:b1:0a:2c:6a:c3:ad:b8:88:c2:a8:0c:d4:52:82:
                    55:9e:8e:6d:e8:f2:9d:b5:70:5e:ac:42:4e:7e:01:
                    b4:93:6a:28:57:95:c9:79:57:a7:20:ba:89:ec:dd:
                    5b:a8:0b:b2:12:a3:8b:f3:a5:aa:87:4c:52:28:11:
                    4b:5a:cf:7f:90:e7:2a:ec:f8:f0:65:dc:bf:db:59:
                    39:48:87:0a:73:6e:a4:56:09:30:41:f3:ab:66:0e:
                    f9:9e:df:1a:4d:17:ee:bb:d0:e8:6e:dc:e7:c7:0f:
                    80:be:3e:36:b6:7d:69:c5:a8:61:35:5f:34:72:e6:
                    34:ce:4a:bf:65:9a:04:d4:49:9c:34:e6:bc:f6:89:
                    2e:22:01:aa:29:c7:cc:26:f6:92:74:86:8d:e4:5b:
                    61:af:2f:fc:52:70:31:ce:70:47:da:3a:21:e6:a4:
                    2b:7e:03:71:e4:10:69:bb:54:c3:20:a7:89:aa:5a:
                    9d:0b:81:9c:8c:36:2f:bb:4b:cc:ed:1c:6b:ce:80:
                    1a:f0:43:a8:92:06:f2:a4:9c:c5:00:f6:d4:f5:f0:
                    d0:38:19:3b:37:89:ca:5d:12:d7:43:4c:31:08:aa:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:14:40:95:6B:2F:35:64:9B:64:5B:F4:47:83:DB:22:E6:C9:62
            X509v3 Authority Key Identifier:
                keyid:85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/becee50d83233bc1bb235ee7f2e6a439483dd6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:07:d0:3c:c1:76:25:89:6d:f1:09:de:fb:d2:92:cd:5b:
         0b:9d:c0:d3:64:28:eb:83:ab:72:2a:08:5d:5a:d4:28:ea:f8:
         d5:e0:2b:d4:3f:35:f9:5b:08:3f:ea:59:50:02:e0:e4:d5:08:
         44:21:f4:72:b0:c3:1a:68:3e:9b:eb:fd:54:c2:8f:7e:10:f7:
         68:af:1d:5b:ec:b6:73:80:1c:25:0d:91:58:95:01:2d:34:30:
         23:ce:d3:85:06:74:a7:30:6e:f0:53:2b:ef:1c:3c:24:0d:02:
         31:51:e3:a3:04:4b:2d:3a:da:19:54:6a:8d:d1:3b:28:f1:73:
         e4:5e:df:e8:ec:19:0c:37:8d:ab:58:5e:9a:29:3b:7a:61:c8:
         67:ed:a8:81:ff:0d:a9:76:47:ab:dd:04:f0:f9:04:ee:ea:86:
         2f:93:fb:cf:2a:29:13:f7:df:34:ac:ba:3f:92:fd:ec:92:19:
         ce:b0:f1:b1:b4:97:80:3b:ae:16:24:23:69:05:34:32:80:ae:
         f1:77:b2:17:bb:f5:5a:1c:47:5d:ed:cc:9b:24:f2:a0:7d:cc:
         30:35:cd:1e:c8:9e:f9:a0:45:e4:27:d1:22:74:f3:6e:9a:ab:
         3d:b7:57:56:a1:f0:2f:77:11:4b:ae:6b:ac:e9:23:4d:72:c8:
         ec:67:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org