Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/370abcc89b3aef2da5f77c8da56cb37de4462423.roa
File:                     370abcc89b3aef2da5f77c8da56cb37de4462423.roa (raw, json)
Hash identifier:          Skc0M/LH7UBVTuq9W1/9p3OplRhN4P5gyXDbxjvQpmE=
Subject key identifier:   1B:D0:06:58:13:60:D1:2C:15:BE:9F:D3:A3:E0:F3:15:49:F9:C7:ED
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       031188
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/370abcc89b3aef2da5f77c8da56cb37de4462423.roa
Signing time:             Wed 12 Jul 2023 15:38:32 +0000
ROA not before:           Tue 11 Jul 2023 15:38:32 +0000
ROA not after:            Sat 12 Jul 2025 15:38:32 +0000
asID:                     16629
IP address blocks:        200.113.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201096 (0x31188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:38:32 2023 GMT
            Not After : Jul 12 15:38:32 2025 GMT
        Subject: CN=370abcc89b3aef2da5f77c8da56cb37de4462423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:39:75:64:cc:88:35:4e:80:8f:44:07:5d:
                    c1:24:cb:9a:98:c6:e3:66:43:41:8f:3c:5a:7c:29:
                    65:ab:87:5c:ea:d8:04:64:8a:17:da:c9:60:f2:49:
                    56:db:8e:e4:d1:b0:49:20:b2:d9:01:5b:91:dd:14:
                    f6:78:38:94:b5:db:fc:c0:91:f2:9f:b1:59:49:53:
                    2c:47:2b:b0:5c:e6:0d:17:f0:b0:c4:b5:fa:ed:a6:
                    5a:29:70:d7:97:a9:e9:65:2e:18:97:31:e4:db:a1:
                    db:e7:e2:33:7f:39:06:28:8d:76:6d:0c:16:53:3a:
                    68:da:93:60:ed:cc:2c:8a:0b:a5:f8:03:f2:a4:3e:
                    1d:e6:2a:39:95:c2:96:11:85:c9:3c:6e:1d:92:7e:
                    3a:33:b2:83:e8:13:cd:28:0d:10:8a:d3:82:cc:ba:
                    5b:5f:70:14:61:57:6f:27:22:5f:1a:57:b1:ce:56:
                    2e:9b:82:45:9f:ed:f3:e3:30:9a:88:d6:c7:ff:ac:
                    12:aa:ee:74:79:25:a5:af:52:92:b3:ef:df:2f:ac:
                    2f:93:c3:48:6d:d3:7b:93:02:b2:fa:6e:10:f9:ed:
                    e7:fb:e0:84:3c:50:4c:90:84:dd:4e:bb:6e:73:1d:
                    49:da:5b:d5:eb:a1:19:31:c1:37:da:2b:04:2e:77:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D0:06:58:13:60:D1:2C:15:BE:9F:D3:A3:E0:F3:15:49:F9:C7:ED
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/370abcc89b3aef2da5f77c8da56cb37de4462423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:44:ae:e3:79:a6:d7:b4:45:8f:10:e6:00:84:8f:89:e7:
         c1:fe:80:47:1f:c6:d8:9a:4f:3f:d2:56:a2:b7:e5:c4:17:37:
         6b:71:a1:1b:60:f9:90:c0:11:0c:2e:b2:a3:05:20:06:9f:a3:
         a2:fb:1a:49:18:c7:b8:1b:ba:dc:25:76:f5:c3:38:4c:3e:03:
         5c:c1:cd:de:30:98:58:ea:8f:20:45:00:b1:64:3b:4f:5b:b8:
         6b:6e:1d:3c:97:b8:fe:cc:ea:f9:7d:91:f6:3d:70:a0:52:3c:
         ee:ba:00:51:60:22:49:66:28:3a:89:c6:73:c4:1f:36:fe:30:
         10:43:64:d7:cb:6c:64:09:32:2c:49:d4:67:f4:96:bb:d9:df:
         cf:42:f7:e1:42:30:ba:0a:92:7a:cd:f9:51:04:ed:e4:d1:c7:
         19:43:d5:cc:e4:ce:06:f6:b9:9a:e6:f0:4f:c3:45:b7:64:eb:
         85:22:ca:21:fa:6d:48:fe:0a:fb:25:ec:5d:42:b9:09:a7:06:
         5d:5e:a1:30:a1:f2:1a:dc:3b:1c:d7:e7:6c:02:8a:fc:ee:69:
         9f:ec:bd:86:7a:db:52:74:c7:f1:cb:a4:d2:0a:ae:fa:cf:61:
         e3:6d:5b:77:6c:9d:f7:44:4a:13:84:71:7a:aa:2c:ae:4b:03:
         88:65:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org