Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/03857712353620e3d32b2d5f89e08d1c111b7fbf.roa
File:                     03857712353620e3d32b2d5f89e08d1c111b7fbf.roa (raw, json)
Hash identifier:          PNkii1eD7tYOE0yYvETTDweIXfyQrD7zG/J/7p3Z3eM=
Subject key identifier:   22:99:71:97:69:74:0A:DA:43:64:5D:31:F8:6F:99:C8:D5:19:45:BE
Certificate issuer:       /CN=e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0
Certificate serial:       09BEBB
Authority key identifier: FB:C5:93:04:19:B1:9A:69:80:9D:F4:2E:5F:F2:93:11:D0:5D:36:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/03857712353620e3d32b2d5f89e08d1c111b7fbf.roa
Signing time:             Fri 01 Dec 2023 15:54:12 +0000
ROA not before:           Fri 01 Dec 2023 15:54:12 +0000
ROA not after:            Mon 01 Dec 2025 15:54:12 +0000
asID:                     272902
IP address blocks:        200.123.54.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638651 (0x9bebb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0
        Validity
            Not Before: Dec  1 15:54:12 2023 GMT
            Not After : Dec  1 15:54:12 2025 GMT
        Subject: CN=03857712353620e3d32b2d5f89e08d1c111b7fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:6c:06:d1:88:e0:32:a5:6e:02:e0:a0:e8:
                    c7:bb:2c:38:d3:a7:62:79:54:6a:7f:24:d7:19:30:
                    f4:23:34:67:67:5e:84:ac:fe:35:0b:ad:71:e5:24:
                    31:21:91:a1:5f:13:5b:7e:1f:f6:7b:c9:3b:b6:90:
                    77:51:4e:48:40:99:41:1e:5c:5d:6c:fa:2a:e6:bc:
                    9b:2e:5a:d5:24:58:e6:ab:f7:80:34:63:d3:c3:fa:
                    de:a4:7e:40:60:3f:d2:cc:e6:8d:c0:dd:49:8b:60:
                    97:86:43:a0:98:11:35:6b:86:db:08:ff:e7:f4:39:
                    3c:1d:db:fa:4b:d5:6c:12:5d:26:4f:01:79:42:6e:
                    c1:95:9c:e1:26:e6:af:67:4d:4a:7e:40:a0:d5:2e:
                    80:e5:8b:08:97:54:e0:44:39:d6:12:6a:03:97:df:
                    b6:b1:d5:76:8e:29:9b:96:83:68:3d:73:2a:0a:55:
                    0f:f2:99:ce:96:a3:59:0a:0d:8c:10:3a:1a:28:31:
                    7b:49:d5:ca:84:cf:94:84:1f:7c:b0:a2:90:16:71:
                    da:de:27:bc:58:54:34:73:e7:61:ed:dd:48:1e:45:
                    1f:b8:34:06:d1:36:9e:9c:e6:0d:e3:3d:23:2a:c9:
                    5d:b5:e8:93:b1:aa:ec:00:33:d6:bb:85:07:31:0c:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:71:97:69:74:0A:DA:43:64:5D:31:F8:6F:99:C8:D5:19:45:BE
            X509v3 Authority Key Identifier:
                keyid:FB:C5:93:04:19:B1:9A:69:80:9D:F4:2E:5F:F2:93:11:D0:5D:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/03857712353620e3d32b2d5f89e08d1c111b7fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:05:cc:21:93:db:ae:49:b5:36:80:08:54:57:76:5c:08:
         3e:67:c7:65:58:7d:08:69:9b:13:cf:d9:a6:5b:f6:98:d8:bf:
         5a:d4:7e:24:20:a9:6b:5f:0b:f4:c0:86:ba:95:68:2b:eb:a4:
         f5:0a:13:3c:31:f4:3f:e2:7e:2c:62:4b:4e:4f:7f:7e:30:19:
         08:8c:70:e7:70:36:48:3f:bc:8a:16:7a:77:a3:e8:d5:11:ac:
         b6:5d:aa:01:cb:24:f6:e0:bb:4e:fd:57:58:85:01:cb:ef:77:
         63:d8:06:75:67:aa:c7:14:cf:72:20:2c:f8:b4:34:ba:b6:72:
         de:de:c6:17:4e:39:7c:25:10:b9:67:55:6b:23:14:0b:ee:9b:
         34:5e:c6:cb:95:c0:2c:40:57:60:f5:eb:08:40:42:da:ad:3f:
         0e:ee:50:b3:e6:3a:ed:0e:e7:4c:e6:8c:b8:33:37:f7:3e:8e:
         b7:02:8f:b4:ae:6d:78:3e:6d:9d:fc:5f:05:be:a8:70:54:f0:
         b5:c5:ca:ab:9f:33:0a:d3:a6:c4:c8:45:95:ea:6a:87:fd:4b:
         8f:ae:31:ce:bf:21:76:a7:52:82:43:5a:56:95:d4:a9:bc:c8:
         1d:ba:7d:ba:dc:3b:db:f8:57:4d:71:87:aa:0f:5c:88:5f:0e:
         0a:b5:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org