Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/8a2454ebdee9d404986b59e6cc1941deba8c1202.roa
File:                     8a2454ebdee9d404986b59e6cc1941deba8c1202.roa (raw, json)
Hash identifier:          EBTeRSM+TmwQx2jBz9Q6fVfGaHWtFx86nK6UR763xUA=
Subject key identifier:   4A:77:EE:5C:8E:0F:F4:FC:3F:5F:DC:31:DA:05:43:FB:4F:72:40:EF
Certificate issuer:       /CN=fc6a343497b7a26c78a86a19daf6c2065a721822
Certificate serial:       3401
Authority key identifier: 97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/8a2454ebdee9d404986b59e6cc1941deba8c1202.roa
Signing time:             Mon 30 Oct 2023 17:19:37 +0000
ROA not before:           Mon 30 Oct 2023 17:19:37 +0000
ROA not after:            Thu 30 Oct 2025 17:19:37 +0000
asID:                     273111
IP address blocks:        200.50.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13313 (0x3401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a343497b7a26c78a86a19daf6c2065a721822
        Validity
            Not Before: Oct 30 17:19:37 2023 GMT
            Not After : Oct 30 17:19:37 2025 GMT
        Subject: CN=8a2454ebdee9d404986b59e6cc1941deba8c1202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:7f:d3:74:ff:ea:d6:ce:0b:e7:ec:74:c0:
                    7c:5b:ef:03:24:99:96:ed:92:fc:7f:b3:5e:aa:4e:
                    33:e3:48:90:1f:b4:67:8a:25:a7:32:4e:ac:9a:f0:
                    68:c2:fd:10:e6:72:d2:fd:8d:f9:aa:21:a9:d8:49:
                    2b:eb:14:e7:cd:bc:9e:9e:04:1c:0c:73:0e:ee:5a:
                    e4:5e:cf:da:df:fc:84:37:ae:0c:61:96:02:0c:d5:
                    fd:2d:bf:19:e7:6e:83:c1:de:0a:8e:9a:53:9d:11:
                    cb:42:94:7b:0e:fc:55:f5:e8:5d:ec:ae:e1:74:35:
                    1d:71:ad:c3:35:dd:4e:3b:4e:d2:1b:44:b1:2d:fc:
                    91:9a:d6:b0:99:ac:1c:34:d9:f8:39:2f:c8:fa:d6:
                    be:d3:14:25:01:c8:1e:82:6f:72:bf:23:9d:23:c0:
                    a2:bf:d0:dd:89:65:cf:47:17:77:72:8b:4e:de:8c:
                    a2:7c:15:7d:fe:28:17:a2:6e:de:f2:e0:dd:29:cc:
                    d8:8b:98:26:e5:55:41:91:f8:37:0e:8b:5f:08:b0:
                    ca:7f:79:a0:2d:a3:fa:6a:cb:b6:6d:76:db:58:6d:
                    7d:b2:b6:00:12:80:23:10:dd:ab:a5:8b:78:3b:fa:
                    5f:66:c2:75:0d:fb:9b:17:be:d1:65:ed:b6:4b:2e:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:EE:5C:8E:0F:F4:FC:3F:5F:DC:31:DA:05:43:FB:4F:72:40:EF
            X509v3 Authority Key Identifier:
                keyid:97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/8a2454ebdee9d404986b59e6cc1941deba8c1202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/fc6a343497b7a26c78a86a19daf6c2065a721822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:85:e3:83:58:68:ad:ba:64:c5:ba:10:ee:3e:77:e9:54:1a:
         6e:42:2d:35:2b:e8:03:e6:8d:2d:6e:0d:dc:fc:6c:8b:ef:da:
         bc:27:e1:26:3c:4f:05:65:d5:f8:d2:3f:a2:6b:d3:ed:8d:9f:
         e2:66:f4:c2:35:1f:03:6d:01:b5:75:f3:40:bb:9c:12:f7:57:
         49:86:80:25:8d:88:c2:24:f6:dd:ba:6f:2b:7d:56:08:63:f8:
         c4:0b:b7:e9:be:c7:38:e8:ec:cb:01:54:91:88:c0:70:0b:7a:
         65:2c:3d:e8:76:0b:6a:88:90:fb:84:27:9c:18:48:95:ed:ee:
         92:9c:29:1b:36:49:7d:f8:90:ea:81:5c:30:db:28:a1:c9:ec:
         75:cc:8e:ea:61:a1:4f:ee:9d:c7:ad:80:01:97:c2:d2:49:4e:
         34:75:57:d2:36:ce:68:aa:a7:0b:a7:7f:5e:f8:49:0a:86:57:
         fd:b1:2d:1b:15:df:45:4a:52:92:8f:61:fe:d3:4c:12:da:25:
         ef:77:a0:d4:3c:07:24:e8:fb:81:ec:51:98:a1:e8:c4:dd:db:
         65:13:c0:35:38:ac:89:f0:95:e1:6f:6f:d9:f7:a2:35:a1:e4:
         cd:aa:00:e4:ac:77:fb:c5:ec:d0:a3:f3:2d:12:c8:9e:1b:ed:
         48:e5:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org