Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/ae78300d673f03199a485781dd6af0f5a00c3781.roa
File:                     ae78300d673f03199a485781dd6af0f5a00c3781.roa (raw, json)
Hash identifier:          YhniiBJ5FWJS9W/TwWTCT+yjy+/4rnHYKbMPJKgDxsA=
Subject key identifier:   AD:B2:22:06:70:05:7A:DD:B8:45:88:16:1B:89:71:D1:2F:D0:3F:53
Certificate issuer:       /CN=296ae134c63fda98feba9ece79438406ecc84f03
Certificate serial:       214809
Authority key identifier: 8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/ae78300d673f03199a485781dd6af0f5a00c3781.roa
Signing time:             Tue 13 Jun 2023 00:29:05 +0000
ROA not before:           Mon 12 Jun 2023 00:29:05 +0000
ROA not after:            Fri 13 Jun 2025 00:29:05 +0000
asID:                     17079
IP address blocks:        200.85.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181129 (0x214809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296ae134c63fda98feba9ece79438406ecc84f03
        Validity
            Not Before: Jun 12 00:29:05 2023 GMT
            Not After : Jun 13 00:29:05 2025 GMT
        Subject: CN=ae78300d673f03199a485781dd6af0f5a00c3781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:37:67:0f:56:fe:63:26:90:a3:c6:75:08:7a:
                    3b:ed:27:74:3d:a5:32:de:2a:00:92:70:16:59:98:
                    20:3f:82:62:0f:a2:53:c6:27:45:03:a7:18:3f:66:
                    f9:db:71:d6:1a:20:2a:72:40:f0:d2:0f:94:15:7d:
                    79:32:56:31:17:bb:f9:72:f2:db:15:60:6a:78:b9:
                    35:81:2f:3b:6c:91:e8:29:71:a2:27:0f:6f:ad:6f:
                    de:b1:84:47:ac:c6:29:98:55:c2:6f:24:22:d8:b6:
                    4b:96:2c:0f:48:1a:50:07:8c:82:98:b5:19:10:09:
                    74:32:b0:61:99:d2:ba:cf:b6:b6:4c:a7:85:83:bb:
                    93:71:20:d6:66:90:54:1a:b6:d9:f3:70:e8:91:9e:
                    9b:7f:11:9b:cf:05:d1:5c:15:cb:2b:28:26:7d:28:
                    8f:8b:a1:9c:91:a7:ad:95:56:10:f0:0d:9e:8d:b6:
                    7d:08:04:66:cc:de:39:ae:ce:1b:73:31:2b:cf:e2:
                    b0:64:3e:50:0f:6b:75:d9:a2:46:f6:34:f0:45:89:
                    dd:84:b4:f4:b7:47:01:4b:3e:1c:e8:32:bd:6b:ae:
                    b6:11:7d:c7:5e:35:3b:ae:1b:12:c3:3c:f0:13:b8:
                    02:50:c2:96:a0:c6:b0:0b:c5:8a:41:df:aa:ad:d4:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B2:22:06:70:05:7A:DD:B8:45:88:16:1B:89:71:D1:2F:D0:3F:53
            X509v3 Authority Key Identifier:
                keyid:8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/ae78300d673f03199a485781dd6af0f5a00c3781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:e8:f5:ed:26:a2:da:48:a2:85:03:dc:8d:f6:bc:af:09:16:
         35:01:75:86:8c:2d:b2:35:73:1a:fd:32:05:2d:e4:e6:b5:3f:
         43:8d:86:d9:40:6c:82:f6:03:31:58:ef:38:76:90:b3:5c:17:
         46:7f:94:1e:f8:1e:ab:c8:70:93:4d:f2:f2:1f:34:b6:84:ba:
         31:2c:e7:21:4a:6e:f1:3d:ff:1e:53:20:50:b7:38:ba:de:66:
         8d:d7:97:c9:29:c6:bc:b8:b1:1a:8a:1d:3b:c4:7e:1b:c0:db:
         d9:83:29:f8:0a:75:f8:13:bd:9f:80:18:7a:6f:80:f4:70:39:
         a8:80:ad:a6:76:55:23:56:ac:8e:c3:ce:0d:c2:8b:24:de:08:
         45:d1:1d:02:67:e8:88:b4:20:33:95:0a:34:ce:0a:40:cb:6f:
         e6:10:a4:a9:80:1c:3f:c1:f6:f6:6c:60:88:27:fa:74:8a:4f:
         e0:af:af:9f:d7:f0:1c:42:8e:86:ee:4a:50:74:4a:ba:51:52:
         57:e6:ea:b6:43:3d:5e:84:85:a0:92:fc:ee:a5:d8:ab:2f:b4:
         5e:82:82:88:d6:a7:41:f4:13:86:8f:c3:88:3c:41:57:e3:2f:
         95:8c:a8:66:19:cc:20:63:99:00:1e:20:90:60:0e:17:bd:0e:
         ed:59:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org