Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/d37d5a189c4ba849b9de13b4fc8967b72a484022.roa
File:                     d37d5a189c4ba849b9de13b4fc8967b72a484022.roa (raw, json)
Hash identifier:          6KFS8wNsjlbxHyihqw4nehO46F0mpLwUbRabo72Ecsc=
Subject key identifier:   1C:F1:56:4D:F9:7A:B4:CF:69:F0:49:C5:A6:5F:BA:2C:1B:8B:D2:74
Certificate issuer:       /CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
Certificate serial:       01F9
Authority key identifier: 85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/d37d5a189c4ba849b9de13b4fc8967b72a484022.roa
Signing time:             Mon 07 Nov 2022 13:05:07 +0000
ROA not before:           Sat 05 Nov 2022 12:57:22 +0000
ROA not after:            Thu 07 Nov 2024 12:57:22 +0000
asID:                     27994
IP address blocks:        200.59.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
        Validity
            Not Before: Nov  5 12:57:22 2022 GMT
            Not After : Nov  7 12:57:22 2024 GMT
        Subject: CN=d37d5a189c4ba849b9de13b4fc8967b72a484022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:62:2b:f1:d2:13:cb:95:a7:9c:fe:90:4e:
                    af:ce:2f:08:8f:3b:ed:cb:7f:a0:ff:c9:3e:9a:03:
                    e7:a4:2e:e8:58:f4:46:77:26:64:77:ae:d8:70:89:
                    94:29:d7:21:56:25:a5:27:39:4c:05:5a:54:17:ba:
                    d2:6f:3e:50:90:a1:91:7c:24:3b:ef:c6:8f:4f:d4:
                    4a:ea:1d:c9:1b:30:7f:d9:16:d1:6b:a7:b4:48:f0:
                    7c:e3:57:4d:e0:71:f7:a1:e7:0e:02:96:cd:d4:1c:
                    10:57:c1:ef:09:02:80:4a:0d:23:14:32:38:3f:9e:
                    90:61:1d:1a:00:da:e8:5f:48:aa:18:69:ef:df:a0:
                    b2:50:f5:d2:0d:4a:8f:dd:7f:d5:b0:8e:cc:5a:07:
                    5f:ea:b5:8b:66:98:88:e0:9d:83:5d:70:be:bd:46:
                    1b:7f:cc:19:c9:45:b5:8e:de:2b:6e:00:9e:fb:03:
                    89:f4:c8:d8:0f:49:11:e7:eb:7b:75:4b:ba:93:49:
                    3e:89:69:06:6c:4b:01:8d:77:39:98:b9:9e:54:fa:
                    1c:fd:3f:bf:5c:9a:43:9b:86:bb:10:d1:a6:d0:2d:
                    6f:bd:28:c6:44:9b:b1:7e:22:ec:e3:16:a0:81:87:
                    1d:f3:44:c6:f0:a9:bc:e7:77:41:76:1f:8f:f6:f6:
                    8a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F1:56:4D:F9:7A:B4:CF:69:F0:49:C5:A6:5F:BA:2C:1B:8B:D2:74
            X509v3 Authority Key Identifier:
                keyid:85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/d37d5a189c4ba849b9de13b4fc8967b72a484022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:27:7d:33:f2:9e:cf:1d:c4:f1:e2:c6:02:69:bb:94:19:4d:
         a3:8b:39:8c:1f:e9:e3:df:c3:f9:61:e5:5c:e5:e3:f3:20:d0:
         c5:79:3f:d1:3c:49:3b:3b:81:67:f2:f6:89:9a:a6:d5:59:bf:
         60:1d:3b:b0:65:e1:39:01:0c:db:8b:22:13:4b:95:20:e8:87:
         f1:73:6c:50:a5:5e:ef:bd:8b:3f:eb:82:e5:7e:d0:32:d3:ae:
         65:d6:37:99:af:71:cb:4f:f1:8f:9f:a7:23:13:84:76:fc:30:
         4d:2a:b8:3b:13:be:c6:54:f3:50:c0:25:37:c2:76:e2:43:00:
         18:3d:fa:6d:fa:2b:ce:12:17:2a:0d:42:a2:f6:d0:b7:60:35:
         60:3c:8e:a0:e1:d1:20:1f:57:8b:ee:c0:a1:fb:d9:4b:99:94:
         6a:c2:e8:06:65:4b:71:39:63:b1:75:2d:6e:36:7a:db:2a:33:
         b0:65:62:9b:d8:8b:d4:7c:ae:f7:f9:25:34:5e:5e:2d:3b:a6:
         b9:ec:bb:1c:ba:48:b8:5c:19:10:61:c2:b7:d1:79:59:27:ef:
         6f:3e:79:ab:28:d7:9c:ce:d1:1c:44:ff:af:9a:70:53:92:2e:
         6a:cd:65:bd:bb:38:3b:62:f6:ea:96:8e:ac:50:65:16:74:98:
         4a:ba:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org