Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/36112f09738c88157d4918fa9ecb733b51d23b6d.roa
File:                     36112f09738c88157d4918fa9ecb733b51d23b6d.roa (raw, json)
Hash identifier:          3udYwIThyqQ7Um2pZJSG1GmL11G7KJScFeU8JL6wOiw=
Subject key identifier:   3C:85:6F:92:F3:1F:8B:68:A3:B5:BF:C7:C6:3E:9E:B5:0A:ED:58:FC
Certificate issuer:       /CN=da0cd30df4491331691a183f5b0a9260b7daadec
Certificate serial:       28F2A1
Authority key identifier: 21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/36112f09738c88157d4918fa9ecb733b51d23b6d.roa
Signing time:             Mon 18 Mar 2024 14:12:21 +0000
ROA not before:           Mon 18 Mar 2024 14:12:19 +0000
ROA not after:            Sun 18 Mar 2029 14:12:19 +0000
asID:                     52451
IP address blocks:        200.119.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2683553 (0x28f2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0cd30df4491331691a183f5b0a9260b7daadec
        Validity
            Not Before: Mar 18 14:12:19 2024 GMT
            Not After : Mar 18 14:12:19 2029 GMT
        Subject: CN=36112f09738c88157d4918fa9ecb733b51d23b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:90:33:a4:7b:a2:52:f2:48:98:8b:3b:bf:
                    5b:f2:09:f5:32:cb:4a:19:a0:ab:6e:d4:a2:f9:ff:
                    38:3e:f9:0b:ce:39:52:f7:6b:14:d9:76:f6:74:7f:
                    e0:2e:a7:89:81:f2:9a:69:2c:25:09:91:1d:e1:56:
                    70:d8:3c:91:4a:98:d6:59:42:9f:87:1f:92:f4:56:
                    2a:54:d7:35:a4:48:85:0c:22:43:d5:3d:71:16:2b:
                    6d:fa:c3:d9:56:fc:00:b7:b1:76:38:1c:88:d2:d2:
                    b4:f9:47:53:1a:7b:9b:90:21:7d:bd:67:80:03:67:
                    5f:6e:ba:02:b0:4c:b5:30:29:2f:23:cd:85:e5:eb:
                    33:91:a3:49:68:38:89:9a:63:93:a6:f7:65:5c:97:
                    e4:c2:7a:a0:0b:81:38:ff:bd:49:03:af:c5:4a:d0:
                    af:48:3a:7f:4f:ee:3a:b9:68:19:63:70:3e:33:ac:
                    ce:b7:a7:ea:23:d7:e6:92:bd:e7:72:e0:4f:41:6f:
                    76:ef:7a:02:7a:59:47:2f:51:38:f7:58:e7:fe:ac:
                    4b:03:87:a9:85:ff:c4:81:25:ea:1c:2d:92:86:57:
                    ef:c4:7c:d3:05:b4:a9:b5:55:13:b6:5f:a4:93:0d:
                    81:4e:9f:88:74:b2:10:0f:8f:68:33:66:fc:b1:7d:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:85:6F:92:F3:1F:8B:68:A3:B5:BF:C7:C6:3E:9E:B5:0A:ED:58:FC
            X509v3 Authority Key Identifier:
                keyid:21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/36112f09738c88157d4918fa9ecb733b51d23b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ff:92:07:85:31:a2:cb:e7:c6:a2:d6:28:8c:35:85:3b:d4:
         d2:e2:9f:c3:c1:9c:ed:cf:d9:22:46:e7:da:ea:94:5a:3f:ca:
         bd:6f:cb:d7:da:74:09:4f:93:13:38:8e:50:95:77:30:25:0f:
         56:82:cd:75:b0:5a:ae:c3:ee:f1:3f:51:4f:ab:f4:3e:7d:79:
         1c:a8:02:b4:ef:1f:37:53:12:e4:56:81:a5:84:33:0f:67:dd:
         75:f5:d6:7e:d1:ce:6a:af:42:08:27:7c:60:c7:5c:fc:58:1f:
         65:77:b6:b4:1c:0e:fd:ab:1c:b3:1a:8c:50:41:2a:51:1a:69:
         72:ae:51:3d:4e:6e:d8:22:a7:c3:3a:10:3f:8e:c8:cb:5a:72:
         70:c5:26:29:db:52:76:27:d4:4d:0e:e7:a6:ee:93:df:30:16:
         82:40:76:f1:de:b2:11:26:f5:95:f4:17:22:ff:0b:d3:52:63:
         28:de:a8:a3:53:60:61:3f:19:b8:09:a2:9d:96:fc:5e:86:a3:
         67:d1:b1:83:10:0c:a7:49:23:50:f8:17:31:55:24:67:d4:98:
         c4:33:c5:56:53:4f:78:82:2c:40:30:19:6d:e7:ab:89:ab:78:
         58:fa:28:a8:70:f9:14:22:6b:e0:34:e7:49:36:86:69:66:49:
         77:33:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org