Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/1f7d83645cbe0b756d8ea2a9d90336cd688eaebb.roa
File:                     1f7d83645cbe0b756d8ea2a9d90336cd688eaebb.roa (raw, json)
Hash identifier:          KXvzFTazoeJDQRvgHYXDTWbBmZ39LyfgjIt3IioYm1Y=
Subject key identifier:   52:96:EA:06:E1:5E:A2:D8:80:53:E6:2B:C4:2A:12:EF:49:45:3A:85
Certificate issuer:       /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial:       22C836
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/1f7d83645cbe0b756d8ea2a9d90336cd688eaebb.roa
Signing time:             Thu 17 Aug 2023 02:08:33 +0000
ROA not before:           Wed 16 Aug 2023 02:08:32 +0000
ROA not after:            Sun 17 Aug 2025 02:08:32 +0000
asID:                     272041
IP address blocks:        200.12.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2279478 (0x22c836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Validity
            Not Before: Aug 16 02:08:32 2023 GMT
            Not After : Aug 17 02:08:32 2025 GMT
        Subject: CN=1f7d83645cbe0b756d8ea2a9d90336cd688eaebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:10:a3:0b:35:cb:6a:e6:3b:28:a8:d1:82:
                    af:7d:67:5b:59:49:bb:42:2c:5a:cb:f0:a5:2b:13:
                    c0:05:33:e3:b6:65:20:67:df:6b:7e:f6:54:54:4f:
                    d5:bb:dc:d6:34:41:88:15:a1:f6:f9:c4:4f:69:9d:
                    ef:46:7c:d8:89:d5:30:25:38:09:6c:f3:da:74:e9:
                    f4:cb:2c:e9:8c:cb:63:32:f4:2e:b0:b8:eb:a3:1b:
                    71:a6:0d:55:ad:62:e1:54:6f:8f:90:fa:ef:fc:a0:
                    cd:37:6f:82:1b:01:03:f7:07:fa:0c:cb:2b:cc:c9:
                    ec:a3:77:ef:e8:a1:dd:ab:f3:d4:d8:56:cb:50:96:
                    d8:9f:58:d8:87:71:2b:b4:12:b7:d2:76:c5:cc:0c:
                    01:3e:d2:a5:bc:bc:d9:53:28:cd:37:38:19:20:38:
                    85:11:40:07:a8:da:88:c7:36:e1:7f:a0:9d:77:86:
                    dd:b5:11:fe:d7:f7:60:72:05:ac:63:52:33:f3:71:
                    50:1f:07:56:ec:e0:71:9e:d0:d0:20:1d:88:62:22:
                    40:5f:19:ed:e0:19:f2:67:8d:7e:59:36:bb:f7:2e:
                    17:18:4e:d9:c7:27:44:db:f6:2b:e3:85:93:d2:85:
                    02:15:0b:2a:00:7d:37:9c:0b:bc:25:2b:6d:35:b6:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:96:EA:06:E1:5E:A2:D8:80:53:E6:2B:C4:2A:12:EF:49:45:3A:85
            X509v3 Authority Key Identifier:
                keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/1f7d83645cbe0b756d8ea2a9d90336cd688eaebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:0e:78:32:dc:08:62:a3:46:24:09:3a:0d:3b:c4:e4:59:
         f6:cd:c4:7d:08:61:f9:cf:4e:dd:c2:c8:39:e4:04:37:96:a4:
         81:ae:a9:31:8b:1c:ea:72:b6:90:9e:ef:0a:cc:ea:c1:45:7c:
         1d:f9:e2:77:d0:da:76:47:25:1e:07:7f:85:74:03:0d:a2:4e:
         62:1b:4a:b2:ab:22:d4:f1:bb:8f:00:da:45:7d:83:61:89:60:
         83:b8:0f:a4:c2:03:78:af:e3:93:ea:22:5b:7b:9f:5f:42:bb:
         a1:6d:24:be:c0:ca:08:aa:f3:64:fd:58:01:5f:67:c8:26:f7:
         0f:d5:9b:27:d3:b5:3a:d7:ac:da:31:50:15:24:dd:2c:fd:c8:
         a2:31:00:ae:d8:54:cb:0e:a8:f8:12:68:7c:cb:8a:8e:ae:06:
         04:93:1a:7b:4d:2b:69:4c:aa:96:64:26:b5:66:81:c6:b6:23:
         7e:fa:98:67:a5:6c:61:13:15:71:e9:69:b6:0c:c5:6d:39:4e:
         a4:80:f5:31:22:93:73:b6:5c:dd:79:01:4c:f5:53:d9:52:87:
         91:b7:df:c4:db:a2:b1:6c:f0:80:a7:16:46:55:21:62:b5:fd:
         12:c8:2d:6d:49:35:3f:9a:4d:ac:03:92:91:7f:12:6f:de:0b:
         92:db:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org