Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4ef6837828a51a40120de9597d5056c8755f7910.roa
File:                     4ef6837828a51a40120de9597d5056c8755f7910.roa (raw, json)
Hash identifier:          9wzxHZJNFNfhQ762YdMp6ASV2UWgyHPkHhsG7Lp5HEs=
Subject key identifier:   7A:E7:6A:30:6C:20:57:9B:87:F3:1D:9C:BB:AA:BD:86:E9:D2:AE:FA
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02A891
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4ef6837828a51a40120de9597d5056c8755f7910.roa
Signing time:             Wed 12 Jul 2023 15:25:19 +0000
ROA not before:           Tue 11 Jul 2023 15:25:18 +0000
ROA not after:            Sat 12 Jul 2025 15:25:18 +0000
asID:                     7418
IP address blocks:        200.113.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174225 (0x2a891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:25:18 2023 GMT
            Not After : Jul 12 15:25:18 2025 GMT
        Subject: CN=4ef6837828a51a40120de9597d5056c8755f7910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:3f:2a:44:b9:8a:d5:9e:41:83:12:ea:03:
                    a1:ca:20:1d:18:11:14:9d:94:45:3c:48:b9:b4:af:
                    30:39:ce:db:40:3b:36:a1:98:f5:5d:65:87:b6:96:
                    58:8c:a2:73:71:96:2a:43:fb:7c:d5:c2:ac:3a:84:
                    ad:e0:3f:46:0f:8f:fc:4a:6f:32:fc:4e:26:68:21:
                    66:58:05:c9:64:28:19:59:40:a7:99:53:4a:b6:cf:
                    18:26:db:bb:08:0d:0e:88:80:62:b5:26:f5:5c:29:
                    2f:f3:24:e5:cd:cf:76:e3:65:e3:91:dc:7c:c6:4e:
                    0c:15:41:be:cb:f7:b5:f6:d2:85:53:48:e0:5a:f0:
                    ec:ce:ae:f1:50:16:9d:9a:75:4e:3f:13:c2:71:c4:
                    2e:36:4e:64:be:fb:5b:e4:fd:9b:07:d4:7e:dc:8b:
                    96:42:a2:c6:cf:3e:dc:38:71:7d:31:18:81:16:0e:
                    b0:ab:0c:f8:89:2d:34:e3:4a:00:84:21:5d:93:90:
                    3e:47:9e:93:2b:1e:dd:09:ef:ae:dd:56:60:e2:db:
                    06:4d:52:b4:c2:bc:cc:9f:20:57:c0:2e:35:33:e0:
                    bd:a1:5b:b0:4f:0c:c0:03:96:5b:95:ad:5c:fc:9f:
                    f6:64:5f:b7:83:3d:aa:77:7d:22:5d:6e:72:c3:ad:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:6A:30:6C:20:57:9B:87:F3:1D:9C:BB:AA:BD:86:E9:D2:AE:FA
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4ef6837828a51a40120de9597d5056c8755f7910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:06:e0:a5:40:8a:c0:c0:fc:fc:37:b0:b8:30:29:8d:ac:
         d6:59:f0:f2:08:3d:dc:ae:2d:37:99:ec:34:29:50:08:fc:d3:
         69:49:6e:86:e6:a2:03:a9:24:0b:ae:70:6b:66:06:46:b9:3e:
         13:c2:c1:b2:b7:cf:09:37:bd:f8:7c:6b:c9:f1:d2:3e:6d:e0:
         8c:8c:00:7b:09:b3:12:dd:c1:a9:a5:cc:3d:f9:f6:8a:98:34:
         5b:bd:bf:da:9b:f9:83:44:8a:ee:40:b7:04:8b:b5:d2:81:34:
         e5:eb:17:e8:5c:13:05:4c:d2:c7:18:06:38:e9:b0:57:24:17:
         66:cf:65:40:de:5b:01:37:a5:85:08:a4:af:dd:09:f3:43:12:
         1c:d9:46:92:62:af:21:86:8a:7e:b1:e9:f0:10:10:2d:40:3c:
         49:bc:e7:7f:26:e0:9b:c2:60:14:2c:53:af:39:1a:b3:05:2d:
         47:96:ad:ec:f1:57:d8:89:60:70:a3:db:bd:2f:b0:05:69:ec:
         e8:27:27:47:10:46:45:68:5e:86:22:52:e0:81:44:3f:97:26:
         66:c5:88:83:95:be:70:5a:bc:9a:46:1c:d7:fe:e5:7a:3d:05:
         0c:26:76:c6:e5:70:10:99:78:4a:91:71:b3:b8:09:7f:26:03:
         c2:08:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org