Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/40b07967b7cb912cff70f5f0a10094e89bcea6a0.roa
File:                     40b07967b7cb912cff70f5f0a10094e89bcea6a0.roa (raw, json)
Hash identifier:          A9giCEx8+flEsJl3vAdmmqBCchL0jZo2u6WzQXGcx0w=
Subject key identifier:   DC:43:37:00:DF:FB:8B:99:75:69:27:B9:49:6E:4A:16:20:6A:67:47
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       032CD7
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/40b07967b7cb912cff70f5f0a10094e89bcea6a0.roa
Signing time:             Wed 12 Jul 2023 21:41:47 +0000
ROA not before:           Tue 11 Jul 2023 21:41:47 +0000
ROA not after:            Sat 12 Jul 2025 21:41:47 +0000
asID:                     7004
IP address blocks:        200.113.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208087 (0x32cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 21:41:47 2023 GMT
            Not After : Jul 12 21:41:47 2025 GMT
        Subject: CN=40b07967b7cb912cff70f5f0a10094e89bcea6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c1:3f:23:4d:ff:7c:5d:87:c9:a7:56:e3:b1:
                    6b:c9:be:b9:4e:5a:12:87:a5:4f:f4:28:8d:2c:9b:
                    80:13:e8:51:77:a7:e3:ea:46:0d:8f:b4:4a:09:e7:
                    3f:88:1a:79:e0:a5:0c:73:68:4f:47:cf:77:26:41:
                    1c:ab:7f:90:b1:48:f0:69:19:11:b2:74:9f:13:db:
                    a6:16:e2:02:c7:81:6e:e5:ab:ad:6f:3f:45:58:94:
                    ce:44:2f:f6:39:6d:3a:f4:b3:2f:0f:99:4d:c6:ad:
                    cc:a8:7a:ec:86:ff:23:69:19:0d:d0:43:53:de:17:
                    2b:09:4e:97:5b:a5:9a:f4:02:6a:35:67:fb:14:67:
                    9a:68:ff:66:3d:b4:a9:b2:96:b0:68:c4:eb:40:cd:
                    0b:33:97:a9:88:3d:4b:ad:8d:17:37:25:cb:8b:15:
                    c2:01:fc:f4:62:c9:61:58:12:f0:cb:51:bf:5d:fd:
                    04:3c:d3:36:e3:57:a1:93:22:3e:ee:b1:81:ae:b9:
                    ee:5c:f1:d0:c4:38:6f:be:ae:c2:ed:16:e7:37:a2:
                    46:2f:24:e3:72:c6:f9:01:b3:3b:2c:72:e4:5c:54:
                    a3:2b:cb:d0:82:5e:3c:c3:0c:cd:64:08:e4:c5:25:
                    b7:01:36:e1:60:65:b5:75:cb:20:e2:10:63:2e:bf:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:37:00:DF:FB:8B:99:75:69:27:B9:49:6E:4A:16:20:6A:67:47
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/40b07967b7cb912cff70f5f0a10094e89bcea6a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:8b:aa:ac:ef:06:b3:8d:44:e6:2c:2e:b9:b2:b6:e4:6f:
         ff:86:97:58:35:fa:e5:b1:1c:67:b6:f7:a8:e8:21:98:eb:02:
         bf:99:9a:27:2f:05:99:2b:0b:a1:62:fc:d9:67:8c:13:5b:5c:
         77:59:09:84:03:ca:90:e4:76:79:ff:5f:64:42:94:94:ff:67:
         a2:19:76:ed:03:2c:5f:26:a2:94:ab:d6:2d:33:b9:6a:47:82:
         fa:fb:91:53:48:e6:fb:5f:7b:58:66:d2:f6:27:5f:92:f6:f9:
         2d:85:11:8e:df:9e:8f:09:70:fa:ba:bd:26:65:4c:3d:83:22:
         7b:89:30:e4:bd:40:74:ea:e6:71:b8:1a:e4:0e:56:b5:22:69:
         1e:ab:0f:c3:49:6f:2b:54:b9:5a:53:32:db:7f:fc:7c:cd:c4:
         93:84:3f:29:27:e0:19:45:3b:a8:f2:15:7e:87:53:18:da:fe:
         89:c4:6c:42:e2:f4:3f:75:75:a6:58:bf:3e:29:44:56:ce:3d:
         c7:8f:5e:b2:f6:30:b0:f9:45:81:c1:e8:1d:53:01:a0:c1:0d:
         8b:e7:7a:6a:b5:9e:86:d2:46:8e:e8:e1:23:72:d7:41:14:5a:
         82:af:3c:a9:d0:4d:b4:58:2c:29:c7:da:f1:e9:ec:11:98:a7:
         92:91:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org