Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/743617d519da6ad69129a6830966fcb115bad7d9.roa
File:                     743617d519da6ad69129a6830966fcb115bad7d9.roa (raw, json)
Hash identifier:          LN3bN4BR8VyERGo/p1EpPPQ+v3s3zYAi8Wt8vt+1qDs=
Subject key identifier:   11:FC:BF:A9:94:77:6E:59:6F:F3:9B:32:5C:87:D8:E6:99:43:07:88
Certificate issuer:       /CN=0317b9d1456b48aa14ec8d784f305e45943a6533
Certificate serial:       0D96BA
Authority key identifier: F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/743617d519da6ad69129a6830966fcb115bad7d9.roa
Signing time:             Mon 30 Oct 2023 15:25:36 +0000
ROA not before:           Mon 30 Oct 2023 15:25:36 +0000
ROA not after:            Thu 30 Oct 2025 15:25:36 +0000
asID:                     265622
IP address blocks:        200.110.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890554 (0xd96ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0317b9d1456b48aa14ec8d784f305e45943a6533
        Validity
            Not Before: Oct 30 15:25:36 2023 GMT
            Not After : Oct 30 15:25:36 2025 GMT
        Subject: CN=743617d519da6ad69129a6830966fcb115bad7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:96:1a:58:4b:e4:5f:a5:1a:48:e5:3d:5a:
                    a9:4a:4b:c5:be:1c:ae:24:1e:02:5c:62:54:6e:12:
                    39:8b:e3:ef:5b:e2:71:3e:f0:74:59:5d:b3:e6:12:
                    ad:69:fb:12:19:09:c4:a8:d2:ec:c7:b9:37:57:e5:
                    72:7e:87:f5:43:7b:a0:70:7b:ce:78:f3:db:08:d3:
                    0f:35:17:e0:d1:2e:f3:7a:cb:3b:2d:a2:76:0a:be:
                    0e:20:03:ef:69:38:ac:2b:25:b7:c1:15:ff:c6:45:
                    a0:47:e4:54:f5:3a:d8:9d:3d:3c:ad:7a:2a:04:89:
                    a4:dd:4c:de:d3:66:c6:58:a2:cd:06:1f:22:81:af:
                    b6:43:b9:6f:de:69:1c:90:bf:6a:7c:29:ad:1d:d8:
                    bd:c0:34:96:1f:2c:41:ca:a3:41:38:fe:dc:ca:a3:
                    fa:65:a5:b0:77:da:6d:cf:dc:1c:97:4a:f4:18:49:
                    98:e7:e3:45:df:d2:4c:f7:2a:1e:27:9f:47:7d:d8:
                    e5:e0:7b:a2:5d:82:f9:d7:f1:a1:63:1b:e2:97:4c:
                    19:05:1d:99:e0:0d:f0:c3:3c:ae:e8:bc:14:bf:8c:
                    0f:73:c0:e4:0f:6c:73:1d:e4:89:41:eb:87:d4:f1:
                    6b:16:7c:96:b7:29:65:50:d5:fa:94:cd:b6:6b:00:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FC:BF:A9:94:77:6E:59:6F:F3:9B:32:5C:87:D8:E6:99:43:07:88
            X509v3 Authority Key Identifier:
                keyid:F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/743617d519da6ad69129a6830966fcb115bad7d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/0317b9d1456b48aa14ec8d784f305e45943a6533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:d4:5b:90:6c:84:fd:b8:83:0a:40:53:f4:d0:88:ab:47:dc:
         f0:d0:1f:a3:e4:d8:c1:cc:c3:5e:72:ab:4f:6f:1c:4e:9f:52:
         7d:de:cd:95:4f:c6:a8:e7:9c:ce:19:fa:cd:ea:bd:a8:50:ba:
         68:19:88:29:b7:6e:0d:a7:37:00:5b:c1:fd:b6:54:bf:bc:b3:
         2b:85:77:1a:5f:2a:d5:0e:f2:70:4c:c1:72:82:54:e1:be:56:
         bf:43:39:56:a5:3f:03:1b:8c:20:16:6b:ff:94:cb:2d:53:b5:
         7b:27:e4:3c:2c:28:3b:77:2d:0c:e8:f7:1c:7a:7a:31:83:b3:
         86:05:51:9e:12:11:2e:23:c2:6e:5f:fe:42:74:cf:26:55:83:
         02:43:ed:53:c0:84:be:fa:5b:41:50:d1:67:1e:8a:23:48:0f:
         24:aa:31:12:99:0e:b8:62:1d:e5:e2:fd:16:5b:75:be:f1:50:
         bc:17:bd:9a:3f:8f:9b:4a:fb:aa:ab:5f:90:e9:ba:5c:63:c2:
         9f:e3:ca:3b:76:d2:b7:56:ce:50:23:6a:d9:2e:1c:4c:90:9c:
         6b:01:4a:3d:e3:31:7d:af:eb:bb:dc:ad:2f:35:7d:3f:e4:d4:
         b8:14:29:e7:a0:56:a0:0f:ca:aa:58:2a:72:2b:12:72:9a:1a:
         04:28:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org