Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/5e5f9be03590b4d9e5072bb6afe3a4e75ab16330.roa
File:                     5e5f9be03590b4d9e5072bb6afe3a4e75ab16330.roa (raw, json)
Hash identifier:          ShNMyT5glAh2N/fNLodWyT8BE3yikIrFHEeCOM1JrjY=
Subject key identifier:   4A:3E:25:FF:97:D5:62:55:E2:AC:30:EA:9A:AA:45:51:15:EF:0B:36
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       035048
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/5e5f9be03590b4d9e5072bb6afe3a4e75ab16330.roa
Signing time:             Tue 18 Jul 2023 19:47:20 +0000
ROA not before:           Mon 17 Jul 2023 19:47:20 +0000
ROA not after:            Fri 18 Jul 2025 19:47:20 +0000
asID:                     16629
IP address blocks:        200.50.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217160 (0x35048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 17 19:47:20 2023 GMT
            Not After : Jul 18 19:47:20 2025 GMT
        Subject: CN=5e5f9be03590b4d9e5072bb6afe3a4e75ab16330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:0d:2b:e8:1b:dc:c1:f2:2d:cc:e5:4a:cd:
                    d5:92:61:ca:e1:62:5d:77:e0:f8:62:73:c4:36:05:
                    58:e9:57:8a:9b:e6:b7:b8:33:bf:41:44:41:7e:7c:
                    f1:1f:bf:c6:89:bb:46:44:f3:d0:80:29:bf:f2:b6:
                    f5:ba:3a:34:3a:a0:c9:af:5f:2c:d5:49:bc:df:46:
                    82:93:32:46:92:41:38:c2:40:b9:f7:d3:33:9e:0b:
                    22:3e:ca:ea:e2:0d:ca:7a:3f:25:37:6e:f8:25:6e:
                    a5:cc:a1:ef:36:e6:1c:95:49:51:f9:03:f5:de:86:
                    80:54:e1:41:6d:cf:0d:e0:5f:1d:cb:70:69:c5:d8:
                    17:6e:6e:cc:68:7b:9b:58:0c:28:d0:10:c7:19:be:
                    ca:03:b5:8f:85:77:74:65:fd:77:aa:02:81:50:51:
                    43:ed:f7:b2:9d:11:82:ed:d0:c1:fc:d9:31:16:69:
                    61:6f:68:b6:27:d9:f5:6f:95:78:24:53:f7:51:2c:
                    b0:94:99:d5:81:3a:16:74:cf:19:86:0b:25:b6:af:
                    93:49:de:0b:03:de:3e:aa:fd:24:e3:51:74:81:81:
                    16:6f:5e:35:7e:85:02:5e:01:f9:ef:7c:19:04:d7:
                    09:89:e4:31:54:2b:d3:7f:c0:c1:f8:7c:c4:26:e1:
                    95:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3E:25:FF:97:D5:62:55:E2:AC:30:EA:9A:AA:45:51:15:EF:0B:36
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/5e5f9be03590b4d9e5072bb6afe3a4e75ab16330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:b8:8d:eb:b2:26:9d:f5:b2:52:89:60:5a:98:ac:e4:bf:
         74:09:e2:eb:a9:13:0e:97:6e:71:2e:13:b6:c1:d8:fb:31:a6:
         af:96:db:4a:d3:91:c8:8d:80:b4:6d:7b:1e:69:b1:96:56:86:
         64:16:2e:36:41:57:c1:96:cb:83:e9:0e:e3:a3:9b:42:24:96:
         19:ee:82:f0:13:2b:c8:9b:9f:9b:4f:09:aa:d1:13:95:d2:70:
         1b:9d:61:e8:db:45:a6:91:18:03:dd:a7:b5:c5:ff:dd:e5:72:
         0b:25:53:42:51:c9:0e:b6:b7:8d:cd:fb:97:e9:e3:ab:a8:15:
         4a:83:de:98:2c:98:46:ad:ff:ce:da:ef:cc:aa:9a:27:83:22:
         b1:d0:e0:f9:60:ae:61:00:32:be:45:7d:5a:10:0d:08:50:9c:
         fe:0f:8d:08:ae:39:2e:03:00:a3:8b:53:63:32:05:c9:6d:a6:
         ad:24:bd:eb:8f:46:4a:37:c8:44:81:a2:96:52:1d:ed:d7:80:
         11:da:ac:48:c9:43:72:1e:be:c2:51:cc:88:29:57:aa:cf:bb:
         1b:82:ad:70:e7:4d:98:88:24:99:cd:63:16:db:28:c8:51:b0:
         a3:0d:9c:f8:00:b1:92:d1:65:00:30:3b:6b:9b:04:02:2d:43:
         0f:7b:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org