Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/bd276cff134237280f8fe3bfe5493c2a0dc10cd4.roa
File:                     bd276cff134237280f8fe3bfe5493c2a0dc10cd4.roa (raw, json)
Hash identifier:          n3YaE9xGRJiJwQgVX3PlAoHgvSxhK4gc+1glloBl2DA=
Subject key identifier:   B4:B1:3F:63:9D:79:89:CD:D1:88:9D:0E:A2:12:1D:10:1D:15:72:09
Certificate issuer:       /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial:       14E742
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/bd276cff134237280f8fe3bfe5493c2a0dc10cd4.roa
Signing time:             Fri 28 Jan 2022 19:53:23 +0000
ROA not before:           Fri 28 Jan 2022 03:00:00 +0000
ROA not after:            Sun 28 Jan 2024 03:00:00 +0000
asID:                     272036
IP address blocks:        200.12.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369922 (0x14e742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Validity
            Not Before: Jan 28 03:00:00 2022 GMT
            Not After : Jan 28 03:00:00 2024 GMT
        Subject: CN=bd276cff134237280f8fe3bfe5493c2a0dc10cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:bf:ed:1d:1a:24:2a:a2:0e:51:75:60:5c:
                    66:22:a7:ba:7f:ba:58:49:91:ba:16:11:d0:af:e0:
                    11:e4:46:f1:87:9d:ac:53:50:1d:dd:71:f3:92:f0:
                    68:a9:e0:f0:c9:ef:e1:40:3d:ba:2c:74:1a:eb:f8:
                    2f:fa:43:50:04:87:aa:cf:8e:9c:a0:f6:19:36:6c:
                    fa:fa:6f:ae:b3:99:88:6b:e6:e0:cb:64:21:60:45:
                    66:a3:48:3e:29:41:06:4d:f4:bd:0b:53:98:08:da:
                    19:0b:fa:31:6f:c7:bd:99:d7:b1:b0:a6:2a:60:06:
                    ea:0a:25:07:a2:c3:a0:1e:d6:6e:ee:10:37:81:57:
                    37:14:0e:a3:db:7e:1c:21:44:9a:95:c1:67:5b:a5:
                    2a:c2:bd:7a:83:66:75:23:7b:17:69:c8:7b:29:be:
                    d8:d8:9d:9d:ae:b6:9f:d9:58:08:b3:e3:7b:61:4a:
                    7a:a8:1c:f6:a5:b2:d8:17:74:3c:2b:59:18:b0:1d:
                    dc:ea:fe:0c:36:bf:e2:3b:2e:72:c9:92:3a:24:0e:
                    36:bb:f4:84:b4:cb:f8:60:be:8c:01:71:b9:33:0f:
                    b4:ea:08:d8:d2:9a:37:0c:38:60:4a:42:28:55:36:
                    ab:62:c5:ff:78:9a:1c:a7:f2:d6:1b:5e:c2:97:b9:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B1:3F:63:9D:79:89:CD:D1:88:9D:0E:A2:12:1D:10:1D:15:72:09
            X509v3 Authority Key Identifier:
                keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/bd276cff134237280f8fe3bfe5493c2a0dc10cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:de:84:8c:ca:5c:0b:e6:63:98:67:ba:2b:a0:72:b4:47:ef:
         9c:09:2e:32:bf:23:ee:22:7d:c9:a2:c7:af:7d:ce:b3:29:01:
         87:43:7f:df:d8:a5:e3:a3:46:ae:42:58:f0:97:77:22:27:f4:
         93:3c:be:1f:dd:3f:c7:fc:e0:8e:ed:7a:7d:e0:ce:7a:42:29:
         68:39:c0:6d:6e:f5:54:bb:24:f9:aa:d4:4e:f2:e9:c5:74:53:
         aa:33:a3:18:21:65:cb:61:60:08:97:9a:dd:51:a5:ed:27:b5:
         c0:35:53:49:5d:22:52:fc:b8:11:0f:ba:ab:e6:de:53:44:b5:
         e9:32:76:86:8c:56:57:42:e8:0b:57:09:ec:56:63:b3:c1:f9:
         6a:0b:b3:58:4d:3b:bb:88:04:23:6f:bb:1b:e0:34:3f:8e:34:
         b5:c6:75:3e:b6:b4:30:fa:62:e1:c0:51:e4:23:62:e8:ad:b2:
         74:50:e3:22:51:7c:6d:f1:8d:d7:ce:b9:59:d6:8f:e4:e5:f9:
         54:da:ce:c0:a9:6f:da:76:42:b2:c1:00:5b:68:22:8e:9f:f7:
         e0:79:b7:71:db:a2:bc:5b:a4:a4:c9:78:eb:0c:be:23:54:71:
         9c:0f:06:df:41:84:47:ea:9c:ce:36:e7:1b:e5:35:15:72:9b:
         2e:1c:69:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org