Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0323f12d29e95929998bd33d2351a886c1586998.roa
File:                     0323f12d29e95929998bd33d2351a886c1586998.roa (raw, json)
Hash identifier:          kFuiFJQ63sZghsP2xsi24lzU5fIdbEGC889r+c7YwBU=
Subject key identifier:   68:AC:D8:8A:9F:FF:9A:10:F4:10:42:91:00:1C:E4:C0:AC:0F:DC:AB
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A0484
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0323f12d29e95929998bd33d2351a886c1586998.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     13440
IP address blocks:        200.33.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656516 (0xa0484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=0323f12d29e95929998bd33d2351a886c1586998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:83:fb:f2:d3:18:e2:f5:03:00:ce:85:3c:
                    f5:27:30:b0:59:bf:cd:54:56:17:ba:54:35:22:d2:
                    ac:71:31:6e:2f:57:fc:97:5f:83:f4:42:a7:8e:5a:
                    4b:f6:a5:81:96:37:e5:48:a6:3e:a7:0b:2a:ff:69:
                    0c:da:71:ee:2b:6d:49:46:fb:40:bf:51:bf:13:dc:
                    b8:de:d7:a6:8c:78:b3:96:1d:7c:c8:1e:34:b7:4f:
                    99:7d:30:ac:29:3f:24:c1:ea:a8:06:96:07:b6:2b:
                    2d:34:46:34:ff:14:55:af:06:04:90:0b:43:7a:5e:
                    45:2c:e2:a3:65:2b:28:69:f5:d6:bc:88:69:89:85:
                    9b:81:4c:cf:44:68:1d:b5:f7:57:17:f8:4f:94:d4:
                    2f:75:7e:05:36:de:63:b6:f0:7c:4b:b8:9b:eb:1d:
                    4f:9f:b5:04:4c:58:f4:c6:b0:a4:21:6c:1b:28:e7:
                    a5:e8:6f:31:59:ca:d5:61:b5:81:38:c9:a1:43:44:
                    8c:6f:19:dd:7b:40:f9:9a:ef:38:72:cc:de:c8:38:
                    8d:9a:bc:26:04:9d:23:5d:14:6b:c8:2c:c3:d7:71:
                    cb:66:c9:d3:34:d9:cb:7c:b0:aa:6e:2f:19:4b:50:
                    67:d9:95:4b:b7:43:0f:22:86:61:fc:60:9d:f5:2d:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:D8:8A:9F:FF:9A:10:F4:10:42:91:00:1C:E4:C0:AC:0F:DC:AB
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0323f12d29e95929998bd33d2351a886c1586998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c0:13:fc:51:2c:75:fd:ae:a7:39:a5:ce:e2:6b:e1:05:f1:
         58:aa:b2:94:81:a4:fb:a2:ac:34:50:51:de:cc:65:6a:0f:22:
         ef:3b:24:65:36:96:c8:77:6f:d9:fd:27:49:f0:61:f0:54:23:
         20:79:84:fb:a6:5c:62:9c:f7:f8:5b:06:40:e1:9a:22:57:00:
         e9:8f:10:f8:4a:39:e4:d0:8f:45:2d:be:15:5d:21:23:a8:69:
         37:b2:f2:6e:02:3a:96:13:24:4c:c2:f5:54:94:d1:a1:e7:85:
         29:74:b0:3c:e3:f3:2d:bc:ed:ce:7e:19:e0:b1:69:70:98:87:
         95:d8:3b:66:d2:e2:95:5e:71:67:bd:13:d0:38:e0:47:93:f9:
         79:da:8a:ac:25:87:75:6f:ad:e7:e7:6d:17:e2:6f:5a:4e:c6:
         c4:02:84:36:72:34:ee:88:12:a5:49:09:99:ff:c3:df:ba:6c:
         df:aa:ab:48:f6:97:d6:d1:f7:ef:ae:ab:ad:fe:4f:00:9d:d2:
         f6:42:f7:fd:99:57:7a:33:3e:37:80:74:fe:bb:4e:ef:e6:9f:
         5d:fe:ed:59:e4:bb:dc:57:aa:f4:e4:f6:12:7b:a6:13:65:a0:
         e9:b9:b7:6b:50:c7:1a:75:c7:42:d3:b9:af:cd:e0:1c:35:4a:
         bc:ea:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org