Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2c8a68182833b6109db736c7dc8db1a0815f022c.roa
File:                     2c8a68182833b6109db736c7dc8db1a0815f022c.roa (raw, json)
Hash identifier:          n4PiMJEo9NvKhXCY9HC0faD34Rgfg6i8kwPwLUr1hCs=
Subject key identifier:   B5:E6:58:F8:CC:A1:48:29:9B:08:72:34:51:44:46:AA:02:A0:99:98
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       0329BB
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2c8a68182833b6109db736c7dc8db1a0815f022c.roa
Signing time:             Wed 12 Jul 2023 15:46:05 +0000
ROA not before:           Tue 11 Jul 2023 15:46:05 +0000
ROA not after:            Sat 12 Jul 2025 15:46:05 +0000
asID:                     16629
IP address blocks:        200.90.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207291 (0x329bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:46:05 2023 GMT
            Not After : Jul 12 15:46:05 2025 GMT
        Subject: CN=2c8a68182833b6109db736c7dc8db1a0815f022c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:a2:8c:37:fc:0c:46:95:44:f5:11:4b:24:
                    b3:06:b4:35:c2:d4:a8:c4:6f:b0:65:2e:b0:f6:59:
                    0f:b3:0d:a9:5d:86:6e:ca:74:27:6f:69:51:4e:72:
                    ba:e6:b8:47:dd:a8:f2:11:3f:bd:6f:9d:67:ad:2b:
                    12:00:f0:51:15:24:39:5e:a3:d5:91:88:5c:db:d3:
                    55:a5:3e:79:a4:08:68:98:69:1c:9d:5a:3c:b1:f8:
                    ba:bc:ec:53:3d:00:f3:4b:2f:46:a7:59:93:c8:b6:
                    ba:b5:e5:54:8a:84:1f:9f:1a:28:c4:58:41:cd:ae:
                    d2:dc:38:ec:7d:0f:99:8f:58:5c:b7:b8:a6:fb:78:
                    d7:2b:8e:94:8a:a3:12:f7:f6:28:13:fc:62:7b:a2:
                    58:93:cc:85:f0:36:fc:0e:2b:5f:1c:ee:ad:6e:80:
                    0b:6b:d4:66:3e:58:dd:8d:af:5b:ae:95:1d:8b:69:
                    68:cb:c2:34:40:7c:1b:83:36:d9:67:0f:22:95:8e:
                    8e:d9:12:00:c4:35:83:f2:96:e0:19:18:02:56:ba:
                    93:29:0c:42:11:c9:ee:a3:3b:7d:ec:f9:37:36:a2:
                    4a:37:43:92:7a:6f:25:23:48:b9:23:57:e1:cb:7e:
                    ae:a2:38:9a:04:13:b3:4a:b9:9c:84:10:3a:f9:d3:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:58:F8:CC:A1:48:29:9B:08:72:34:51:44:46:AA:02:A0:99:98
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2c8a68182833b6109db736c7dc8db1a0815f022c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:96:07:57:0c:8c:3e:64:b5:0c:5f:72:ad:4b:f4:3c:aa:
         54:e5:a3:fb:c1:9c:9e:d8:a6:21:d9:c6:06:4c:2d:ca:ba:e6:
         0f:1d:6a:de:46:1c:07:d2:d8:a6:47:3c:68:9f:f0:95:86:64:
         59:5b:85:49:aa:bf:ff:85:95:7f:32:0f:2d:d3:a7:62:06:b4:
         7f:25:20:8c:8a:2d:3b:b0:4e:c2:b3:bf:d3:45:d5:1a:03:d7:
         19:34:ee:6b:6f:45:14:84:2e:9f:d1:f8:9f:fa:33:bf:f5:cb:
         eb:bb:8b:7e:c9:fd:a9:61:5e:04:51:6a:f9:19:cd:e0:db:ff:
         63:1f:d9:32:20:8f:06:23:46:81:44:eb:f3:db:6d:2d:34:a3:
         21:35:18:93:5c:fe:0a:f2:8a:00:7a:a4:20:40:cf:5b:ce:8f:
         0f:01:36:7c:20:19:13:d4:1f:96:36:2f:51:90:63:b6:ba:95:
         24:4b:5d:56:5e:ff:93:f0:e4:5b:9b:8e:91:c7:d8:4d:dd:c3:
         67:f8:d9:1a:54:cc:93:02:45:b2:98:59:5b:fd:77:71:e3:f6:
         18:91:1f:cc:c1:55:50:ba:c9:9f:42:90:09:e3:7c:9f:3a:0b:
         55:9b:a9:ea:3a:e2:d1:96:80:20:b3:5f:f9:67:45:d8:e8:ce:
         b8:ab:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org