Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/134f4158d0419e87ee6243dda10301a76af6eccb.roa
File:                     134f4158d0419e87ee6243dda10301a76af6eccb.roa (raw, json)
Hash identifier:          mWVMldLAh5wAE7P1plMISMQxxDRxK7QupXpAXA8eH9k=
Subject key identifier:   0C:EF:18:CA:46:62:E8:F1:52:64:FC:23:CC:87:DD:C3:6F:ED:B4:C2
Certificate issuer:       /CN=e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0
Certificate serial:       09BCFA
Authority key identifier: FB:C5:93:04:19:B1:9A:69:80:9D:F4:2E:5F:F2:93:11:D0:5D:36:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/134f4158d0419e87ee6243dda10301a76af6eccb.roa
Signing time:             Fri 01 Dec 2023 15:25:45 +0000
ROA not before:           Fri 01 Dec 2023 15:25:45 +0000
ROA not after:            Mon 01 Dec 2025 15:25:45 +0000
asID:                     272902
IP address blocks:        200.123.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638202 (0x9bcfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0
        Validity
            Not Before: Dec  1 15:25:45 2023 GMT
            Not After : Dec  1 15:25:45 2025 GMT
        Subject: CN=134f4158d0419e87ee6243dda10301a76af6eccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:9a:28:4e:59:0c:62:a9:f4:3d:6d:8a:20:
                    27:d2:cb:68:cf:75:fd:5f:d4:5f:b4:83:e8:6e:87:
                    30:ba:5d:75:0a:a0:a1:8b:f5:f1:fe:cd:5d:ed:84:
                    ea:43:8e:a4:39:01:b2:f1:03:37:56:84:1e:f2:eb:
                    e6:dd:e0:7d:c6:25:5c:ea:d5:6f:1b:8d:82:5a:65:
                    f9:74:4f:2c:f1:a2:ac:ab:31:b4:91:f7:52:bc:e7:
                    08:66:77:e7:08:2d:28:b6:81:ff:ce:c0:2c:6d:e0:
                    97:64:4f:91:4d:6d:ea:5e:99:24:da:16:fb:b6:71:
                    d2:a6:83:f1:76:41:d0:09:eb:97:b0:cf:6b:88:cf:
                    24:6c:c9:cb:e3:70:01:31:67:5e:e9:34:bd:6b:88:
                    50:e1:a6:22:18:33:7a:2c:e9:6b:c6:79:30:1c:ff:
                    e0:ff:75:67:f5:c6:3e:85:3e:d8:19:07:24:18:0d:
                    ce:06:ee:04:e9:86:c5:9b:a1:b9:1b:04:d8:a8:57:
                    c5:1a:d5:48:de:45:90:0c:6d:d6:32:dc:a9:e1:b2:
                    1e:fe:2b:00:47:3a:53:e0:0f:0e:d0:7e:73:fb:89:
                    94:a2:b6:a5:bb:0b:81:9b:cb:b7:f0:15:85:f0:7c:
                    86:20:3a:07:c3:d8:bc:79:9d:97:76:5e:e0:f3:cd:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:18:CA:46:62:E8:F1:52:64:FC:23:CC:87:DD:C3:6F:ED:B4:C2
            X509v3 Authority Key Identifier:
                keyid:FB:C5:93:04:19:B1:9A:69:80:9D:F4:2E:5F:F2:93:11:D0:5D:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/134f4158d0419e87ee6243dda10301a76af6eccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d7:59:c2:66:18:f7:87:11:49:77:dc:81:57:1e:c5:ef:5e:
         34:20:2d:d9:de:eb:41:ca:6f:bf:50:3b:1b:af:04:f9:9d:b3:
         48:3f:93:46:d0:ec:aa:12:20:86:49:29:a6:0b:52:34:a2:66:
         7e:32:ee:56:89:68:1a:56:63:a6:a5:89:e5:ec:60:36:14:d7:
         07:0f:c8:45:33:43:40:16:ec:fe:eb:13:4c:e2:89:9c:5a:72:
         d1:cd:49:74:1c:e7:77:1e:e9:eb:dc:9b:56:bf:96:4f:e5:42:
         d5:e6:e0:9b:af:fd:e5:44:85:78:b8:8c:35:7f:aa:ea:67:97:
         29:90:d9:9d:a2:7f:07:ee:76:30:47:a1:4e:68:a0:b8:a9:b2:
         7d:02:2f:8a:65:59:b2:c1:e9:f5:8f:fa:37:e5:2f:fc:db:7e:
         f4:91:ee:b7:48:a3:65:60:f5:81:52:19:aa:7c:81:d8:56:8b:
         be:16:b5:ed:46:da:b1:d0:51:f8:1a:13:44:40:17:5f:1d:a4:
         7f:9d:5e:d2:af:53:1a:a6:f1:c6:41:22:b4:8e:ee:7e:5d:22:
         67:74:e4:64:3a:48:26:83:d9:f0:52:63:04:ba:5b:2b:59:6e:
         69:23:80:0a:46:76:36:db:cb:34:7c:f7:e7:62:05:02:3d:6c:
         51:03:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org