Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/cbf5347218ab9535754367677864abc05057a45a.roa
File:                     cbf5347218ab9535754367677864abc05057a45a.roa (raw, json)
Hash identifier:          A3owGWcNoDifKuImgU1YIlsxGDKBnDpbx++o80frunw=
Subject key identifier:   AC:46:05:75:BC:E9:F8:C4:46:AF:AB:6F:E8:CA:1F:94:AE:CE:9B:1D
Certificate issuer:       /CN=fc6a343497b7a26c78a86a19daf6c2065a721822
Certificate serial:       2782
Authority key identifier: 97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/cbf5347218ab9535754367677864abc05057a45a.roa
Signing time:             Mon 30 Oct 2023 17:18:32 +0000
ROA not before:           Mon 30 Oct 2023 17:18:32 +0000
ROA not after:            Thu 30 Oct 2025 17:18:32 +0000
asID:                     273111
IP address blocks:        200.50.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10114 (0x2782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a343497b7a26c78a86a19daf6c2065a721822
        Validity
            Not Before: Oct 30 17:18:32 2023 GMT
            Not After : Oct 30 17:18:32 2025 GMT
        Subject: CN=cbf5347218ab9535754367677864abc05057a45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:75:91:c9:b1:14:f1:f4:b6:6a:61:2a:97:
                    d2:7a:2d:29:ae:d4:fb:15:5f:c7:3e:07:f8:8a:f6:
                    81:e3:00:6c:ee:05:c7:05:ff:49:26:a8:14:4e:85:
                    02:96:dc:25:ca:7b:7b:1a:9a:5f:ed:65:6f:ed:a4:
                    da:66:80:5e:ca:2f:70:97:b4:dd:b6:80:63:cd:ca:
                    0d:89:55:c7:a6:3c:41:95:85:e9:59:dc:e5:b3:ad:
                    a5:8d:d0:1f:ed:dc:64:00:c0:ff:f4:4e:bd:b2:d4:
                    9b:b5:ec:f6:d3:1c:64:dd:dc:b5:de:ae:1d:95:e2:
                    83:e3:e6:10:ad:23:23:de:86:2d:29:d2:de:eb:41:
                    a5:6f:07:f9:c2:24:65:91:24:f9:91:e1:94:3c:45:
                    a2:47:a2:38:e4:6b:15:b9:67:c3:9c:4e:a1:1d:cb:
                    c0:0d:00:dd:2c:dc:82:0c:cb:4c:3e:71:00:23:57:
                    86:d4:e1:24:a9:12:10:c6:ea:26:16:55:93:86:ea:
                    44:d5:e4:17:67:57:bb:06:48:a5:8b:59:23:e7:cf:
                    2d:18:ab:8f:33:50:87:b5:f3:16:92:02:3d:0c:2e:
                    2d:13:50:11:64:71:dd:28:c5:12:e9:02:0f:05:c9:
                    03:c4:ad:93:b8:ca:85:5f:1e:67:e8:2d:ed:1c:b9:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:05:75:BC:E9:F8:C4:46:AF:AB:6F:E8:CA:1F:94:AE:CE:9B:1D
            X509v3 Authority Key Identifier:
                keyid:97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/cbf5347218ab9535754367677864abc05057a45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/fc6a343497b7a26c78a86a19daf6c2065a721822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:dd:71:01:17:f2:bb:d1:af:3b:d5:ed:f2:06:32:85:22:
         55:6e:81:4f:0f:95:8a:7a:f6:92:71:29:57:aa:b0:3a:45:50:
         af:71:5a:28:f8:62:3d:a1:87:60:81:2d:97:2f:72:95:4b:b7:
         cc:18:e5:be:68:0d:99:f0:ed:ad:ab:cc:89:de:9e:f0:74:09:
         69:52:fc:2b:54:6a:7d:07:73:47:d3:0f:23:2e:1e:5a:97:ec:
         28:a3:8a:9b:3e:09:b6:82:ca:a3:63:b3:df:74:47:e8:25:b4:
         09:84:42:47:cc:c5:ba:c3:51:af:b8:91:4f:84:11:12:66:c1:
         a2:35:67:b1:76:76:03:90:a2:de:65:88:1c:ee:ab:9d:88:c6:
         4c:41:00:fd:62:b5:04:f6:62:32:9d:28:50:0f:bb:8e:3b:06:
         a5:78:62:5c:30:43:d0:4b:16:e9:29:8c:0a:bf:fb:62:d8:3d:
         2a:59:95:a3:cd:75:e9:69:95:6b:f0:af:06:7e:29:ae:d1:4e:
         3d:9a:65:38:af:34:2c:19:5d:b3:13:d0:b3:5e:0b:3c:4e:8e:
         10:43:50:bb:f2:fe:54:8c:af:79:a2:eb:93:33:de:f4:1f:84:
         21:f0:45:66:4d:a5:ae:b0:40:9b:23:85:88:ee:dd:6d:ab:14:
         fe:e7:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org