Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/e5e749bfbbce7a5a67d90564041ff405c13dadcc.roa
File:                     e5e749bfbbce7a5a67d90564041ff405c13dadcc.roa (raw, json)
Hash identifier:          zrr0qV1QFkA3OUpjXzStAppuGaY0X4gmEMnoLi5YNp8=
Subject key identifier:   39:05:D9:5E:F2:41:0D:AA:31:3D:37:E8:0B:12:48:67:E0:27:15:8B
Certificate issuer:       /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial:       245B46
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/e5e749bfbbce7a5a67d90564041ff405c13dadcc.roa
Signing time:             Mon 23 Oct 2023 18:36:32 +0000
ROA not before:           Mon 23 Oct 2023 18:36:31 +0000
ROA not after:            Thu 23 Oct 2025 18:36:31 +0000
asID:                     8048
IP address blocks:        200.35.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382662 (0x245b46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
        Validity
            Not Before: Oct 23 18:36:31 2023 GMT
            Not After : Oct 23 18:36:31 2025 GMT
        Subject: CN=e5e749bfbbce7a5a67d90564041ff405c13dadcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:9f:15:65:83:15:5e:cb:75:42:71:64:5c:
                    a9:d9:0c:23:60:fb:fd:24:0c:ae:69:ea:58:98:29:
                    6c:8b:7c:e9:79:d1:7a:15:fd:f4:fb:99:bf:81:fc:
                    97:32:27:45:29:be:be:c5:5a:1e:e2:7c:61:c4:f7:
                    67:e8:81:0d:9a:ba:90:71:70:8f:3d:f7:7c:18:9e:
                    b7:11:1a:39:6f:55:ab:72:0f:b5:44:74:92:99:3c:
                    49:c8:d5:32:c6:ea:bc:77:41:52:f9:da:20:ed:dc:
                    98:6b:17:54:75:78:73:fc:d2:8a:7e:50:ed:84:6a:
                    30:24:00:ac:37:6f:a2:75:d3:7d:c9:e1:5f:9b:b3:
                    c0:37:91:86:70:47:f4:8c:d3:7f:14:34:67:20:ef:
                    02:64:c5:be:e2:7b:1e:02:24:85:d2:9c:01:8f:16:
                    55:b0:0d:e1:82:43:1c:17:5e:73:52:1f:0d:84:c4:
                    95:5a:0c:e6:04:f1:d0:f5:53:f8:41:f0:b5:37:cb:
                    83:e3:0a:26:c3:e3:56:33:cf:a4:2a:0c:0b:fd:b5:
                    0e:b5:dd:1c:47:3e:ef:1f:1e:9e:43:60:54:73:fd:
                    a5:20:76:9d:53:03:db:4e:e1:51:e3:bf:ed:e2:46:
                    2b:18:4a:20:10:89:cc:60:1f:60:52:fc:7a:af:90:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:05:D9:5E:F2:41:0D:AA:31:3D:37:E8:0B:12:48:67:E0:27:15:8B
            X509v3 Authority Key Identifier:
                keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/e5e749bfbbce7a5a67d90564041ff405c13dadcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:51:cc:14:0a:53:6b:d5:e9:a8:47:75:7f:66:58:75:c3:20:
         45:04:02:6b:38:c8:e3:1d:b8:6f:f8:c8:53:20:78:bc:29:22:
         e3:81:19:d9:75:a9:65:e8:0a:05:97:58:f9:0e:ef:0a:e0:d8:
         51:9c:c1:4c:50:74:fa:fd:11:e6:91:43:f9:f4:bb:0d:a4:e7:
         ca:38:c3:6c:07:2e:cd:26:e2:79:31:88:86:a0:81:2e:b2:42:
         b7:09:d0:69:ab:c5:26:d9:77:38:4d:03:13:e5:57:14:d5:7b:
         95:6a:ed:d2:7f:53:06:f1:f4:94:c6:6b:07:3f:1c:1a:2c:ee:
         13:97:45:74:ea:af:53:3b:e1:b3:77:21:8e:77:37:59:10:5c:
         dd:91:58:76:35:e2:74:2a:47:e3:4a:a5:f2:26:c0:cf:44:33:
         92:e1:c3:31:a9:df:98:e0:27:c6:be:35:74:08:25:32:40:af:
         86:22:66:d3:6f:32:de:92:df:ae:14:e6:a4:c4:f0:e9:02:05:
         e3:5d:cf:57:77:d0:8e:13:0f:46:36:25:fa:68:ff:3b:70:25:
         69:f8:fd:87:b0:4d:05:9c:9c:cc:0b:a6:31:d0:83:e2:1c:c5:
         2c:d2:a6:15:41:6f:fe:8e:75:c3:30:0a:e9:93:3a:46:31:98:
         3d:9c:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org