Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/7e9a6b99280f44e0a3e2628839f73f59393cd216.roa
File:                     7e9a6b99280f44e0a3e2628839f73f59393cd216.roa (raw, json)
Hash identifier:          PxhNCjaINxE3qkzRMWPPBvC+EEN7yTFsPGWBBwjCqaI=
Subject key identifier:   B2:FB:F4:14:BC:23:56:0F:72:FB:82:01:8B:8F:B7:A7:B5:39:A8:8D
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       277EB4
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/7e9a6b99280f44e0a3e2628839f73f59393cd216.roa
Signing time:             Mon 05 Feb 2024 23:05:49 +0000
ROA not before:           Mon 05 Feb 2024 23:05:49 +0000
ROA not after:            Thu 05 Feb 2026 23:05:49 +0000
asID:                     52468
IP address blocks:        200.80.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2588340 (0x277eb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Feb  5 23:05:49 2024 GMT
            Not After : Feb  5 23:05:49 2026 GMT
        Subject: CN=7e9a6b99280f44e0a3e2628839f73f59393cd216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:5b:74:e3:b9:f8:20:d2:c3:0c:76:a0:cc:
                    5f:0a:17:82:95:f8:1c:94:48:57:51:a8:a2:b0:58:
                    0d:6b:af:85:7c:b8:f9:3c:69:8c:d0:51:44:2e:98:
                    d7:41:52:46:cc:b1:86:0f:3c:e7:66:d0:ca:3f:2c:
                    88:1e:f4:d6:38:01:f3:dc:05:04:f3:f0:c0:3e:80:
                    44:24:17:b3:33:02:ab:da:80:86:eb:47:fc:5d:da:
                    f0:d0:6f:47:a7:2c:27:df:15:92:9b:f3:0c:54:3d:
                    f9:b5:34:b1:b6:d8:82:b7:18:d8:9b:14:02:fd:18:
                    93:ba:0f:ce:32:4d:46:cd:41:06:95:b2:90:75:88:
                    16:2d:31:08:c5:75:2d:41:d8:ee:95:bd:5a:35:3d:
                    4c:0e:5f:84:d9:31:2c:04:17:82:5e:31:c9:83:28:
                    05:bf:bc:db:54:58:dc:30:37:99:0b:3c:ec:b6:3f:
                    21:52:3d:cf:36:eb:fa:56:b7:d8:ca:7a:c1:29:49:
                    b9:b0:8f:16:5f:ed:a3:c7:4f:93:dd:47:32:49:4b:
                    2b:3f:fb:93:69:a2:7f:46:98:ea:f2:98:47:0a:8e:
                    da:95:12:aa:d2:31:7a:f3:15:1d:1e:b3:eb:a5:96:
                    9c:9a:4b:f1:1c:84:c2:4a:a6:f8:b8:26:47:98:05:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FB:F4:14:BC:23:56:0F:72:FB:82:01:8B:8F:B7:A7:B5:39:A8:8D
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/7e9a6b99280f44e0a3e2628839f73f59393cd216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:5d:b6:48:78:f8:6f:66:62:66:74:06:78:9d:3e:cf:83:10:
         ed:04:13:bc:17:ce:73:ba:44:3b:a5:db:b3:b3:ac:d6:87:48:
         a0:55:3b:6d:d9:d6:1e:92:17:bf:28:e3:b6:af:48:9e:0b:d2:
         b9:37:b3:d4:39:98:cb:01:b8:d6:89:eb:73:d3:e1:3e:a2:6c:
         a3:47:c8:7d:69:42:da:0f:b2:f7:18:60:51:be:3f:ef:37:93:
         cd:b6:3f:e4:81:33:33:4b:95:bf:05:94:52:89:b3:fe:ae:bc:
         9d:0c:ca:e7:81:66:a9:4c:5c:c6:f6:77:3e:5c:4e:f5:58:b5:
         ec:7f:22:a9:f9:8d:08:49:8f:db:f1:f5:a0:b7:87:b8:e3:18:
         d1:8b:8e:d0:d0:ec:a6:94:47:7f:5e:9c:b7:07:31:48:4f:2d:
         91:85:9d:04:b0:47:a0:d6:d3:f7:6a:38:88:1b:15:c6:70:31:
         86:00:e6:3b:58:86:bc:ea:06:f2:4d:c5:00:98:b5:b3:6c:c4:
         42:0f:63:29:82:54:97:a5:c1:29:95:ad:ed:36:c4:ae:c1:b9:
         41:cd:a7:e4:6f:8d:9d:6f:57:fc:cb:8a:61:14:ce:22:42:b3:
         83:13:b9:3c:d4:84:34:ad:50:dd:09:fc:1c:47:04:39:03:50:
         0f:33:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org