Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/238db4824cae7810d464b9e60ec5a6743784b794.roa
File:                     238db4824cae7810d464b9e60ec5a6743784b794.roa (raw, json)
Hash identifier:          tNP56wNp6nibS8qPQelNYkLY7mPlyN6JXg9gWBe5p8w=
Subject key identifier:   FF:95:CC:2E:2D:AD:11:45:CE:69:BD:11:32:25:CB:D1:9F:31:09:E1
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02DC78
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/238db4824cae7810d464b9e60ec5a6743784b794.roa
Signing time:             Wed 12 Jul 2023 15:31:33 +0000
ROA not before:           Tue 11 Jul 2023 15:31:32 +0000
ROA not after:            Sat 12 Jul 2025 15:31:32 +0000
asID:                     15311
IP address blocks:        200.113.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187512 (0x2dc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:31:32 2023 GMT
            Not After : Jul 12 15:31:32 2025 GMT
        Subject: CN=238db4824cae7810d464b9e60ec5a6743784b794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:03:3a:ea:aa:2b:b5:64:ba:e0:f4:e7:aa:
                    b7:cb:58:ba:3f:da:10:d2:e6:b1:45:23:6a:e6:aa:
                    81:ce:12:bc:5a:5b:ad:cc:27:e4:36:1c:92:5a:c0:
                    8f:4d:2c:93:fc:56:f8:6e:2e:c1:d5:26:1f:92:7d:
                    a6:20:07:6b:58:e4:4d:a9:fa:3e:e3:5d:6e:33:18:
                    de:d9:ee:fc:8b:ab:e7:6c:83:16:19:84:22:32:6b:
                    47:08:1f:f8:f3:e0:d0:13:3d:31:2b:da:6e:92:6e:
                    c1:b3:f9:44:76:c1:a8:66:18:24:02:d2:23:f5:6e:
                    3e:26:0f:22:db:a7:e6:87:73:1e:ac:34:2a:c9:9f:
                    b5:0a:c8:0f:9d:5c:be:dd:3f:1e:05:ee:ab:8d:06:
                    16:ad:fc:8f:bf:88:ad:53:7b:1b:02:80:21:4a:26:
                    eb:a7:58:48:0e:68:a2:c0:ff:4d:5d:d9:a0:b5:ec:
                    83:d7:78:a3:bf:91:4e:1c:ef:26:af:66:49:91:ad:
                    c1:5e:56:7e:d3:8e:70:9f:b1:c3:62:bf:08:d3:91:
                    6e:49:a1:ed:02:d5:13:dc:e2:a9:ed:2f:1b:b4:da:
                    27:b3:ac:5c:30:18:a3:b2:f9:cf:b3:9e:5c:ee:f6:
                    08:a6:37:54:c1:1f:7c:53:1f:ad:a9:4b:14:e0:54:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:CC:2E:2D:AD:11:45:CE:69:BD:11:32:25:CB:D1:9F:31:09:E1
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/238db4824cae7810d464b9e60ec5a6743784b794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:8c:b1:59:8b:69:81:cf:e3:2f:80:ab:c8:a4:d2:c4:5c:64:
         fe:68:e2:a0:91:f1:a0:25:a0:92:7b:cd:d0:bb:33:7c:01:e8:
         44:87:3f:bf:ae:b6:a7:76:89:2c:06:c4:9e:7b:9a:bc:e0:b8:
         87:57:04:8a:b7:34:63:f8:16:6d:e9:e1:be:37:3a:04:ec:f7:
         3b:76:ab:5f:6b:93:ea:86:82:67:90:00:ef:b5:d5:e6:18:9d:
         2d:42:f3:23:dd:a6:d5:15:eb:26:c2:e2:75:e8:52:19:3c:0b:
         1e:25:5d:da:29:5e:c7:f6:e5:d8:5b:5a:66:47:9e:5b:5d:b7:
         d9:48:17:b0:90:41:35:93:cb:1e:34:e0:4c:eb:e8:92:e9:9b:
         19:0e:25:7e:d9:17:4e:14:7b:37:b8:ee:d8:62:c5:c9:d7:0d:
         87:48:22:e7:60:0f:19:95:5a:fc:4e:9f:4b:25:7b:93:e5:46:
         e9:5d:20:7e:f1:80:2d:a6:5f:da:0d:5e:b4:41:1c:44:87:30:
         d4:40:6f:c9:90:e3:63:3a:71:08:11:c6:8d:29:38:f1:b1:b8:
         08:40:a9:6d:ea:56:64:42:f5:a9:01:17:d9:c6:72:db:01:46:
         b9:54:a8:5d:4d:43:90:1e:02:9b:d9:8e:55:4c:07:d7:3d:57:
         6f:43:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org