Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/5da4497908cd9c72b0e5da68ded972704429d719.roa
File:                     5da4497908cd9c72b0e5da68ded972704429d719.roa (raw, json)
Hash identifier:          rIBTs1fyaB4jpFqIN08LCzeWH+cjkU6XyUVYuN7BXmE=
Subject key identifier:   78:67:E6:8D:6A:E6:64:28:AB:6E:29:C6:D3:8F:01:73:41:20:02:49
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       035593
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/5da4497908cd9c72b0e5da68ded972704429d719.roa
Signing time:             Tue 18 Jul 2023 19:47:44 +0000
ROA not before:           Mon 17 Jul 2023 19:47:44 +0000
ROA not after:            Fri 18 Jul 2025 19:47:44 +0000
asID:                     7418
IP address blocks:        200.50.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218515 (0x35593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 17 19:47:44 2023 GMT
            Not After : Jul 18 19:47:44 2025 GMT
        Subject: CN=5da4497908cd9c72b0e5da68ded972704429d719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:37:ad:be:3d:c1:e2:20:23:dc:2f:11:09:
                    20:90:24:31:62:64:25:50:43:1d:ae:94:41:8b:c6:
                    db:7c:2e:7f:e5:87:e6:65:41:c9:0c:85:c3:9c:8d:
                    78:99:88:10:79:ac:ba:1a:1a:a8:af:8f:8f:58:24:
                    4d:c7:e8:41:53:91:b9:1c:7b:0d:24:45:1f:54:ec:
                    7d:f6:ce:8f:4e:69:cf:f1:cc:43:6d:38:db:de:60:
                    98:0e:ef:41:39:1d:4b:0f:83:ac:55:10:a0:c0:9b:
                    15:30:1c:4e:8b:61:4f:23:69:a5:88:a7:bf:3a:7d:
                    2e:f6:99:11:6b:73:ce:f1:90:18:b1:85:1e:79:73:
                    0a:03:3c:80:73:9e:17:47:4d:7c:44:1f:a4:0f:82:
                    52:c6:83:85:dc:2a:cf:fa:87:88:6e:a0:9c:48:97:
                    1a:07:9c:68:79:ca:91:4c:7c:b9:17:73:f6:94:fc:
                    f5:f3:11:69:6e:40:50:fa:8c:df:b8:c9:d5:23:52:
                    8d:3b:43:79:52:ab:5b:94:0b:de:93:9c:9e:df:2b:
                    f7:78:fe:be:63:34:b2:a0:91:f2:44:ff:55:39:17:
                    22:b3:a0:bc:a7:fb:79:35:61:73:55:57:4c:ed:67:
                    40:d9:28:f3:87:64:3e:e6:42:ae:bc:4f:36:51:84:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:67:E6:8D:6A:E6:64:28:AB:6E:29:C6:D3:8F:01:73:41:20:02:49
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/5da4497908cd9c72b0e5da68ded972704429d719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:18:05:c2:b8:ce:d1:96:de:14:59:40:fd:3d:89:d7:f2:0a:
         ac:e1:b7:99:9b:be:7a:88:25:b4:2a:57:a9:6d:2b:33:39:31:
         87:51:55:4f:ca:ca:a7:f2:3b:8e:07:f0:80:f0:e1:0a:d8:55:
         2d:e3:70:97:58:61:aa:5a:d0:80:82:be:1d:03:77:93:2b:58:
         ac:63:3f:05:29:f8:0b:bc:fb:64:19:fc:c5:01:c0:50:da:c6:
         54:07:47:9e:d4:bb:b1:51:b8:6d:d5:5b:79:f4:6b:13:09:f0:
         de:80:9f:01:09:b2:0c:a0:86:4a:cc:dc:0c:8d:e0:25:84:30:
         bf:b1:fd:35:eb:7f:08:9c:40:19:45:46:b3:46:39:37:37:80:
         f2:e0:66:41:a0:41:2c:21:88:ca:b4:55:38:53:20:f6:c4:dd:
         b0:3f:fe:5f:0e:99:2f:55:81:a6:5d:ac:17:05:c8:84:59:b1:
         34:e0:51:04:e3:3a:0e:2a:e3:e2:ee:fb:d7:83:c9:8e:ae:81:
         32:a2:8e:1d:5e:6a:7d:6e:53:2f:a2:47:3b:3f:05:1b:aa:5c:
         93:f6:4d:ab:79:77:2a:b4:bc:ff:d3:c3:ee:37:e5:2f:cc:f9:
         37:27:41:60:73:47:f9:1a:3e:50:9c:c7:ce:de:8d:4e:42:47:
         00:4f:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org