Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c87e00e1-be5e-4225-8afa-7ba66117e639/abcc3ebc54135faf6e171d7425b750e3bd4f2192.roa
File:                     abcc3ebc54135faf6e171d7425b750e3bd4f2192.roa (raw, json)
Hash identifier:          AlJf9Iy8IYn1TUdgbAAQR4Frp3jNGwi9bkpZj+qUGUs=
Subject key identifier:   E5:F4:F8:2C:BE:B8:37:DA:06:B7:B2:17:8F:A6:C5:AA:C2:45:58:58
Certificate issuer:       /CN=d73c4a4df52e57e015de7cde0d20fcdb173a94ed
Certificate serial:       205A5F
Authority key identifier: F6:CF:C9:86:1E:94:32:06:DD:97:A7:65:6C:86:62:42:BC:B0:3C:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d73c4a4df52e57e015de7cde0d20fcdb173a94ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c87e00e1-be5e-4225-8afa-7ba66117e639/abcc3ebc54135faf6e171d7425b750e3bd4f2192.roa
Signing time:             Mon 08 May 2023 17:08:54 +0000
ROA not before:           Sun 07 May 2023 17:08:54 +0000
ROA not after:            Thu 08 May 2025 17:08:54 +0000
asID:                     28037
IP address blocks:        200.85.184.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120287 (0x205a5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73c4a4df52e57e015de7cde0d20fcdb173a94ed
        Validity
            Not Before: May  7 17:08:54 2023 GMT
            Not After : May  8 17:08:54 2025 GMT
        Subject: CN=abcc3ebc54135faf6e171d7425b750e3bd4f2192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:a7:1f:c1:e5:8e:ea:ab:83:91:e0:6c:4a:
                    23:f9:a7:ff:d9:c9:e3:67:3f:5f:00:81:52:92:e2:
                    59:b8:dd:19:e4:03:80:ab:89:04:58:38:e9:d6:32:
                    96:a8:e6:76:b8:d8:77:f2:ec:b0:19:1d:e0:09:9e:
                    b6:b2:a1:1f:78:af:7b:ee:56:66:0c:58:79:1c:8f:
                    7c:f4:cf:0f:fd:1f:b8:4d:7d:b5:36:c8:19:cb:b4:
                    ad:89:67:25:76:90:27:e0:bd:54:0b:88:9d:81:e9:
                    ec:c8:f3:11:6c:1d:51:5b:38:8a:3b:cb:d4:41:fc:
                    0e:95:cc:1a:3d:8a:e7:74:7f:52:d5:3e:b9:51:27:
                    ba:34:46:38:7d:8a:51:c0:af:1e:47:c1:3b:2e:74:
                    33:83:9e:f3:cb:49:3a:00:6f:2b:cd:29:82:50:65:
                    ee:77:ad:55:f3:66:42:94:da:49:82:bc:1d:73:13:
                    dc:40:97:01:d9:2a:8c:84:6d:59:0f:56:7b:81:91:
                    69:56:d4:bb:c7:8c:8d:15:78:12:0f:c2:5c:7f:46:
                    15:48:6d:a1:02:7e:bf:60:d1:53:a0:2b:7a:58:17:
                    58:e5:14:1b:d3:56:ff:99:14:8c:19:f0:05:9d:aa:
                    42:91:1d:9d:ec:66:0e:2d:11:06:15:bb:ee:a7:b5:
                    48:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F4:F8:2C:BE:B8:37:DA:06:B7:B2:17:8F:A6:C5:AA:C2:45:58:58
            X509v3 Authority Key Identifier:
                keyid:F6:CF:C9:86:1E:94:32:06:DD:97:A7:65:6C:86:62:42:BC:B0:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d73c4a4df52e57e015de7cde0d20fcdb173a94ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c87e00e1-be5e-4225-8afa-7ba66117e639/abcc3ebc54135faf6e171d7425b750e3bd4f2192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c87e00e1-be5e-4225-8afa-7ba66117e639/d73c4a4df52e57e015de7cde0d20fcdb173a94ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:ef:25:a0:93:44:a4:3a:86:66:fe:67:e6:86:f6:12:96:
         5f:82:ee:2e:78:da:fb:c3:5f:99:52:e6:f2:a1:1f:1b:be:4d:
         1b:72:4c:83:58:aa:07:26:92:27:77:1f:36:c7:0e:b0:31:bf:
         ee:1f:13:dd:86:7b:f5:ce:b7:bb:f2:27:4c:44:e5:5e:92:71:
         52:02:6e:a5:ba:ff:a8:b5:9a:92:a3:60:3a:8c:00:71:26:bb:
         08:48:cb:f7:9a:bf:49:04:52:d8:e2:8c:14:59:98:41:70:45:
         91:dc:36:2f:62:21:2b:e5:d8:b0:e6:03:91:56:f1:1f:59:cb:
         d2:6f:07:e6:a8:b0:8e:01:95:93:68:8d:0c:d9:7f:8e:23:53:
         ad:6b:b9:bc:39:51:f2:91:76:be:18:60:7e:24:3e:04:f1:38:
         ca:76:52:ce:02:89:5e:d4:40:84:98:68:a5:39:af:aa:2e:da:
         fe:d2:32:25:b9:f9:e5:55:42:53:da:16:ea:ba:af:35:4a:42:
         ca:ea:fc:9c:24:d9:5c:c5:4b:e4:2f:cc:e4:ff:77:39:76:a6:
         81:58:0e:dc:b2:92:d8:a5:96:71:a3:87:12:58:ac:70:8f:4e:
         de:22:fa:af:42:19:e9:34:16:ed:05:ce:9b:bf:0b:33:0b:ea:
         31:a3:47:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org