Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bbaa765c-58c7-44d1-84e6-87697a244a5a/407940ee69ec76d84001cd8c1d8fbcac4978bb83.roa
File:                     407940ee69ec76d84001cd8c1d8fbcac4978bb83.roa (raw, json)
Hash identifier:          7gfKgIG959dKPkQDF622Zkh9MHZSGrLR/Z37UOm2RCk=
Subject key identifier:   B9:85:65:11:8B:B5:79:35:FD:5F:65:18:CC:EF:10:F7:27:FC:B6:B2
Certificate issuer:       /CN=73cf52ff7eae64cc74ffbc2bcf857937d9a9e699
Certificate serial:       5BAB
Authority key identifier: 39:83:59:0A:71:C6:B8:46:B1:C0:B8:84:FE:70:C0:E2:E2:2A:1A:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73cf52ff7eae64cc74ffbc2bcf857937d9a9e699.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bbaa765c-58c7-44d1-84e6-87697a244a5a/407940ee69ec76d84001cd8c1d8fbcac4978bb83.roa
Signing time:             Tue 10 Oct 2023 20:43:53 +0000
ROA not before:           Mon 09 Oct 2023 20:43:52 +0000
ROA not after:            Fri 10 Oct 2025 20:43:52 +0000
asID:                     61444
IP address blocks:        200.77.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23467 (0x5bab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cf52ff7eae64cc74ffbc2bcf857937d9a9e699
        Validity
            Not Before: Oct  9 20:43:52 2023 GMT
            Not After : Oct 10 20:43:52 2025 GMT
        Subject: CN=407940ee69ec76d84001cd8c1d8fbcac4978bb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:ba:91:ed:fb:cc:30:4c:84:0a:1f:bb:c8:
                    41:03:4d:ee:e1:62:2a:df:73:0d:70:53:da:fe:bb:
                    39:a3:63:0b:e2:d5:8e:2e:d7:3b:ef:3d:a6:77:09:
                    26:77:07:6b:2c:70:f2:45:6c:f8:05:6f:e3:ef:27:
                    10:c7:ac:1a:20:72:c9:91:d5:ee:f0:e5:e5:b6:82:
                    79:07:9f:53:2e:b6:db:d6:9d:0c:6f:77:da:ea:8e:
                    b6:86:cc:00:9d:07:66:cb:3f:63:1c:4a:cb:33:45:
                    f7:80:5e:75:0c:a7:1c:97:3a:e4:9e:7e:23:ad:66:
                    13:8d:8e:9a:f6:7f:a8:bd:fc:17:9f:f4:ae:b6:dc:
                    e1:43:07:0d:18:9e:9e:5e:f5:9c:94:dc:5c:30:50:
                    ef:b3:aa:61:ce:c2:9a:6d:09:05:cb:c0:d6:00:f5:
                    ec:f5:43:ce:bb:66:3f:c4:09:87:6b:c6:77:a2:4c:
                    e2:93:a0:2f:f7:61:b6:42:9a:52:f7:ae:dd:7a:47:
                    ad:32:5e:70:34:5c:d3:c4:44:98:bf:aa:29:43:5e:
                    40:f9:42:ad:fd:23:99:77:d5:94:ad:34:23:fa:7a:
                    5d:7d:fb:d9:23:a8:46:24:1e:12:4f:43:07:2c:2d:
                    55:18:5f:4f:9d:d6:24:31:21:0f:3d:8e:7f:cb:45:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:65:11:8B:B5:79:35:FD:5F:65:18:CC:EF:10:F7:27:FC:B6:B2
            X509v3 Authority Key Identifier:
                keyid:39:83:59:0A:71:C6:B8:46:B1:C0:B8:84:FE:70:C0:E2:E2:2A:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73cf52ff7eae64cc74ffbc2bcf857937d9a9e699.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bbaa765c-58c7-44d1-84e6-87697a244a5a/407940ee69ec76d84001cd8c1d8fbcac4978bb83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bbaa765c-58c7-44d1-84e6-87697a244a5a/73cf52ff7eae64cc74ffbc2bcf857937d9a9e699.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:ff:b6:8c:d1:8f:04:4c:a1:88:70:72:3d:59:1e:4b:38:
         44:20:06:70:b7:d4:3a:36:38:40:8d:8a:c7:97:1f:a7:8b:99:
         99:98:91:bb:52:0f:28:69:3e:2f:ff:0b:59:8b:cd:3c:1f:73:
         19:2d:7a:b7:0c:bf:34:a4:27:a9:67:7f:73:76:53:aa:37:ac:
         59:46:ec:e6:f2:6b:a2:b3:b7:f2:0e:30:99:00:ee:63:b8:f5:
         4a:a6:b5:c3:5a:e7:bc:48:8f:0c:a8:fa:83:09:96:08:2c:9e:
         8a:ce:17:a4:e3:03:18:9a:05:07:3e:23:44:b2:2f:9d:85:70:
         fe:ce:08:4c:6a:75:9c:1d:80:c2:78:08:f0:44:a3:8c:5e:2a:
         3d:f6:54:d8:66:42:03:4a:12:8f:f6:f2:c9:8c:29:d1:a6:78:
         8e:b1:89:cf:c0:57:c3:03:15:76:a9:68:79:7a:79:7d:40:08:
         ca:70:04:b9:a1:5a:e2:38:d3:6f:3f:6f:f2:a6:3d:61:54:41:
         5d:e4:29:1b:3e:37:59:9c:de:a8:97:27:b1:b7:56:a5:5e:56:
         15:bb:68:19:de:ff:93:ce:a0:59:d5:c0:f1:1b:8d:df:52:d4:
         eb:56:ff:87:04:be:97:e7:2c:91:9a:66:72:1c:4c:aa:63:a4:
         36:db:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org