Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/24439bd39629a604842ceb0882e1a01523ee8342.roa
File:                     24439bd39629a604842ceb0882e1a01523ee8342.roa (raw, json)
Hash identifier:          tgyrQ35i38pTRuUDA7lGmn6tPSV7FCRd6a96eCrYEaY=
Subject key identifier:   E6:AD:5E:EB:15:35:BF:06:21:CD:7E:F5:C2:3D:DF:F4:3C:7D:5B:F9
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       032552
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/24439bd39629a604842ceb0882e1a01523ee8342.roa
Signing time:             Wed 12 Jul 2023 15:45:42 +0000
ROA not before:           Tue 11 Jul 2023 15:45:42 +0000
ROA not after:            Sat 12 Jul 2025 15:45:42 +0000
asID:                     7418
IP address blocks:        200.90.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206162 (0x32552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:45:42 2023 GMT
            Not After : Jul 12 15:45:42 2025 GMT
        Subject: CN=24439bd39629a604842ceb0882e1a01523ee8342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:f4:bd:a8:12:f3:5d:02:1d:d1:71:d0:e3:
                    be:e1:e9:a9:f7:bb:3c:bf:31:37:af:c4:48:9b:a5:
                    7b:cf:73:12:b7:78:e3:4e:c9:c1:a3:82:ec:6b:fe:
                    56:51:ab:b7:e3:d5:a8:b2:7f:13:96:6a:66:cf:64:
                    98:a5:af:34:12:46:be:22:b9:79:b5:54:a0:c0:7e:
                    90:91:8d:9d:12:3d:e6:72:6f:1c:10:04:44:5f:2b:
                    92:3e:3f:ac:a9:75:45:a5:cc:cc:f3:8c:69:fa:b8:
                    97:33:14:56:13:3d:f8:a7:67:3c:e3:75:ed:64:8c:
                    e6:53:27:93:d8:1d:cb:26:48:dd:71:92:46:d3:03:
                    ce:15:b0:13:1b:68:18:f3:52:83:47:ca:4c:62:75:
                    7a:c6:bd:06:26:d1:90:aa:df:37:0a:87:71:84:df:
                    28:2f:3c:c2:fb:ec:8a:33:6c:41:ac:f4:b2:61:04:
                    af:cf:e7:d8:3e:82:e8:db:16:94:69:84:46:8b:3e:
                    09:59:c2:5e:8b:d9:62:a6:13:1b:28:0d:f1:19:85:
                    2d:3a:f0:df:47:2d:f7:ed:b4:5b:c2:17:9d:98:02:
                    7c:71:d3:90:31:36:e8:de:6b:85:36:4a:5e:2b:b8:
                    cc:d2:d5:6f:68:61:99:57:8f:7c:c7:b9:d4:36:32:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AD:5E:EB:15:35:BF:06:21:CD:7E:F5:C2:3D:DF:F4:3C:7D:5B:F9
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/24439bd39629a604842ceb0882e1a01523ee8342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:0d:2e:46:1e:99:44:98:ed:91:14:fa:db:0f:67:3f:ed:88:
         eb:d6:08:b7:b9:cd:3c:ae:db:7f:fd:7f:c7:3c:56:fa:bc:63:
         5f:b8:ff:6d:df:7b:32:c6:b9:90:0b:4c:89:16:f9:7a:28:3c:
         ab:4b:3f:c1:25:d2:7c:3a:73:dd:c5:22:3a:36:64:ff:dc:23:
         7a:e3:d8:b0:62:2f:fe:81:06:f1:fc:35:bb:31:0d:cf:1d:c4:
         71:5b:fa:c0:3f:3b:4f:eb:e1:99:a8:92:98:23:e0:ba:8f:b1:
         85:94:06:57:e0:98:61:0e:bc:bf:12:c7:50:09:1e:77:0a:c3:
         2c:63:97:a6:88:3e:a7:d0:ef:a6:b0:4f:83:26:c0:69:86:30:
         d0:05:1d:55:44:ac:20:7f:6c:fd:34:d1:e4:fd:72:d9:a0:f8:
         89:a5:8f:ff:12:9b:9e:52:77:b0:0f:65:78:95:e9:b7:8a:b2:
         0c:a8:70:f5:54:4e:23:18:08:9f:4d:30:93:a4:21:93:6e:4c:
         6b:85:b0:1e:f8:2c:db:09:9b:f1:88:f5:b6:01:9a:4a:c5:12:
         1d:f0:23:c4:15:41:3d:98:6e:53:62:b8:39:71:f6:fa:ca:5e:
         87:82:62:8e:26:cc:dc:85:83:65:41:4a:b0:00:38:fc:93:fa:
         13:76:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org