Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27783.roa
File:                     AS27783.roa (raw, json)
Hash identifier:          Jfe7fvFiXuxOYT6iA6RUACoVPa+7yMlKAV/cyQHiqtE=
Subject key identifier:   23:8E:57:5D:7E:50:11:D1:30:51:D3:D2:A6:1F:E6:D1:A6:2D:9E:A1
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       2BAF4528D72DDD5BA1A61C5490BB0206BBD9196E
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27783.roa
Signing time:             Tue 04 Feb 2025 18:02:42 +0000
ROA not before:           Tue 04 Feb 2025 17:57:42 +0000
ROA not after:            Tue 03 Feb 2026 18:02:42 +0000
asID:                     27783
IP address blocks:        200.46.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:45:28:d7:2d:dd:5b:a1:a6:1c:54:90:bb:02:06:bb:d9:19:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Feb  4 17:57:42 2025 GMT
            Not After : Feb  3 18:02:42 2026 GMT
        Subject: CN=238E575D7E5011D13051D3D2A61FE6D1A62D9EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:3a:ff:1e:fb:ff:b3:d1:99:c4:d3:6a:4f:
                    40:23:b8:17:d7:27:4f:21:81:aa:1c:d8:cb:ff:90:
                    6e:ea:0d:a3:db:b9:a5:28:5d:74:ad:65:b0:ac:2a:
                    64:48:0e:4b:75:2c:01:d2:0c:1c:22:98:d9:82:ed:
                    f2:07:c6:d8:2b:63:7a:91:09:1d:12:48:03:70:60:
                    d8:c2:f9:5d:31:aa:60:80:4c:41:d9:02:f6:15:89:
                    64:ed:02:64:8e:de:5b:95:6b:af:1c:d3:24:bd:cf:
                    2f:59:6c:a6:2b:22:e0:0e:39:32:3e:08:41:8e:af:
                    3b:be:70:df:d4:75:66:a3:25:b5:d3:21:cf:72:91:
                    fa:2a:ce:c6:e1:4f:e4:87:5c:d2:06:cd:0c:22:3b:
                    0e:c1:13:55:0c:08:9c:e8:1a:84:12:8e:96:97:1d:
                    d0:b1:36:43:12:29:f4:0c:cd:42:a8:68:ef:d7:85:
                    39:a2:ee:9f:47:81:47:84:61:8f:70:19:f6:e4:a7:
                    cb:b0:b9:89:df:58:b8:56:36:98:d2:a9:27:19:96:
                    11:ff:fb:e3:06:43:28:f6:37:be:51:11:e3:4a:42:
                    0d:a2:a4:b3:4e:98:45:96:49:51:04:9f:34:29:b4:
                    8e:6b:84:c3:c4:e0:34:bd:64:aa:40:29:e3:57:b5:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:57:5D:7E:50:11:D1:30:51:D3:D2:A6:1F:E6:D1:A6:2D:9E:A1
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS27783.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:64:aa:74:84:08:52:1d:85:20:6f:8b:1f:79:91:04:57:
         86:e0:ab:f4:69:f6:e7:83:f7:d0:20:80:d0:d0:d5:90:24:6c:
         c3:6f:c7:06:19:b7:a7:af:87:cf:10:6b:21:f2:50:81:ff:d4:
         e0:aa:18:fb:c8:bf:97:d9:f7:f0:5c:fd:98:25:93:55:3b:24:
         a2:7f:9a:b7:93:58:6d:44:40:9b:38:4d:de:05:fe:ac:e9:46:
         47:cf:10:9e:d6:cd:cb:54:b6:56:5a:fb:80:ef:6c:a0:67:af:
         02:a4:df:6f:8f:bf:a3:09:c0:ce:ba:77:03:48:24:b4:38:61:
         32:cc:01:7a:01:3d:13:93:a4:8c:46:2d:e1:e1:19:8e:e0:76:
         3d:37:09:7c:a6:b2:59:34:45:59:ea:37:b1:7b:ab:69:1b:d1:
         c9:2b:93:88:31:73:66:bd:61:cd:04:35:2a:be:10:fe:c6:10:
         43:07:b1:5e:b0:6c:8e:21:07:6a:e1:77:a2:84:e8:91:7f:9a:
         25:b3:2d:b4:ca:d1:59:fa:af:f6:e0:40:50:dd:d0:c8:d2:3c:
         20:7b:a8:e2:e4:c1:8c:64:f7:8a:f6:d9:a0:c0:3d:6f:06:66:
         74:7f:d5:1b:9e:30:06:a9:7a:86:18:80:ca:aa:50:88:4a:84:
         a1:e9:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:38 2025 by rpki-client