Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/13563e7f4507478c4f4cb544e63787a515c3d644.roa
File:                     13563e7f4507478c4f4cb544e63787a515c3d644.roa (raw, json)
Hash identifier:          LymSI/T1KODqYYB2aZg0OqzdScMsp6w3jtzhbbpyKAk=
Subject key identifier:   71:57:68:01:98:36:2B:12:DD:98:3E:5A:40:5E:28:91:39:C5:11:C0
Certificate issuer:       /CN=580830aa46930a9ed0126869d25c20fe0e806ec5
Certificate serial:       1F82B7
Authority key identifier: CD:14:06:D7:74:A5:5E:B9:84:66:FE:FD:56:67:32:EE:B8:52:C8:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580830aa46930a9ed0126869d25c20fe0e806ec5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/13563e7f4507478c4f4cb544e63787a515c3d644.roa
Signing time:             Fri 24 Mar 2023 08:32:21 +0000
ROA not before:           Thu 23 Mar 2023 08:32:21 +0000
ROA not after:            Sat 22 Mar 2025 08:32:21 +0000
asID:                     13381
IP address blocks:        200.112.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065079 (0x1f82b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580830aa46930a9ed0126869d25c20fe0e806ec5
        Validity
            Not Before: Mar 23 08:32:21 2023 GMT
            Not After : Mar 22 08:32:21 2025 GMT
        Subject: CN=13563e7f4507478c4f4cb544e63787a515c3d644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:27:d2:9e:ab:9c:ce:21:f8:06:08:52:1b:
                    a9:3a:3c:70:6b:9b:75:d4:5f:46:29:0b:b8:91:ec:
                    44:0b:b3:8a:e8:e9:67:70:9d:09:43:da:21:e0:c0:
                    fd:a0:79:2d:06:4c:6e:82:23:e0:a3:f6:7c:c1:16:
                    d1:d8:d0:f5:d9:b2:e6:29:42:46:65:f9:16:4f:9f:
                    93:56:64:cb:68:aa:8d:ae:66:8c:ab:11:45:f3:0d:
                    30:e2:a6:c6:08:95:f3:80:25:19:cb:69:9b:6f:b5:
                    c6:bd:7b:0a:79:03:db:94:45:58:6c:a7:8d:c5:54:
                    79:99:29:76:49:e9:1d:9e:5a:c6:b9:4b:75:a7:43:
                    96:1d:3b:a7:69:46:c8:64:f1:99:4d:d5:ef:95:82:
                    fa:91:b5:2b:39:e9:90:e9:a1:a9:bf:d9:7c:a2:24:
                    e2:dd:78:a8:40:49:cd:3f:f7:ee:c8:76:98:a6:dd:
                    21:1f:e3:80:17:eb:3c:15:1f:9c:46:cf:54:31:35:
                    da:4d:0b:c5:40:ab:48:f9:a3:be:80:08:3d:42:88:
                    62:4f:88:b6:af:fd:84:09:7b:c1:83:2d:40:52:65:
                    cc:a4:24:f7:8d:c3:3d:a2:48:57:e6:38:15:5a:76:
                    e9:2b:76:54:35:27:11:ac:5e:95:ad:86:47:56:8c:
                    a6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:57:68:01:98:36:2B:12:DD:98:3E:5A:40:5E:28:91:39:C5:11:C0
            X509v3 Authority Key Identifier:
                keyid:CD:14:06:D7:74:A5:5E:B9:84:66:FE:FD:56:67:32:EE:B8:52:C8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580830aa46930a9ed0126869d25c20fe0e806ec5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/13563e7f4507478c4f4cb544e63787a515c3d644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bc68c15-0410-48f4-bf10-b6b8520eb6fd/580830aa46930a9ed0126869d25c20fe0e806ec5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:1c:e9:f5:88:c0:5f:14:ee:78:15:3b:06:e1:14:bb:a8:
         b5:09:4c:cc:ba:8e:92:84:6f:f5:69:e3:ad:9c:bf:d5:21:08:
         06:c7:72:bd:b8:e2:01:8e:ea:87:b2:89:b5:d4:7c:e3:c8:3d:
         e9:04:ce:d4:75:73:1a:5f:b5:86:1f:59:0b:34:4e:96:6a:b0:
         24:cf:ae:ee:20:e6:c1:e9:4b:a8:58:72:e4:9b:f7:22:a2:ce:
         42:4d:87:68:74:cb:67:d4:6d:d3:8e:c2:cb:dd:74:29:5b:5a:
         8c:ef:13:45:21:1c:ef:e4:e2:71:9f:24:cc:b2:21:10:50:4e:
         c4:f8:b1:70:69:3f:7a:f3:31:0d:90:b2:fa:9c:09:14:5b:45:
         65:a2:09:19:3c:46:2c:96:36:5f:80:0d:ff:ab:09:f0:87:67:
         5d:d2:d4:83:9b:bd:a5:60:5c:f6:d4:46:37:77:71:01:10:d4:
         27:22:bc:08:a1:77:46:39:fc:39:a1:66:26:62:3a:bc:e0:28:
         ec:8e:ca:1f:e2:c9:31:99:a3:9b:39:8c:8a:37:f3:f4:95:17:
         ab:3d:aa:c1:57:79:d7:a9:ef:1a:2d:26:2d:9f:05:f3:d1:33:
         24:11:46:fa:8c:52:b4:d0:4f:4a:af:af:ad:97:6c:4b:d4:20:
         ae:6e:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org