Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/784395e3eab4f3982f00b3a338cae03fcc859860.roa
File:                     784395e3eab4f3982f00b3a338cae03fcc859860.roa (raw, json)
Hash identifier:          E/ECjVapWEvSlvaJ6cV/j0sBrHjGqz92g8fxB3ms0e8=
Subject key identifier:   CC:CF:1F:46:3C:CB:8A:43:19:6D:BD:E7:9D:EB:91:65:23:05:27:23
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02AAC0
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/784395e3eab4f3982f00b3a338cae03fcc859860.roa
Signing time:             Wed 12 Jul 2023 15:25:32 +0000
ROA not before:           Tue 11 Jul 2023 15:25:31 +0000
ROA not after:            Sat 12 Jul 2025 15:25:31 +0000
asID:                     15311
IP address blocks:        200.113.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174784 (0x2aac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:25:31 2023 GMT
            Not After : Jul 12 15:25:31 2025 GMT
        Subject: CN=784395e3eab4f3982f00b3a338cae03fcc859860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:02:54:19:4a:f5:ba:94:23:83:f2:01:56:
                    9c:74:f5:78:09:2a:fd:41:87:fe:5e:27:bc:32:6d:
                    37:14:39:19:ff:ae:12:cc:03:b4:ad:1e:ee:1d:df:
                    50:a1:6d:35:24:61:2e:c1:1d:86:a7:e5:ee:bf:31:
                    a5:61:c8:e2:17:4d:bf:da:33:9a:87:cc:a6:79:01:
                    09:0f:3d:04:9b:0c:ee:c8:fa:f7:2b:39:ef:b2:b7:
                    14:5e:95:59:89:b1:89:dd:94:1e:50:03:5d:92:db:
                    a4:4a:95:d2:ca:c3:d4:11:97:9d:02:96:e3:ec:93:
                    b2:d7:9e:5b:21:83:98:be:41:af:79:39:d8:75:58:
                    4d:00:09:91:ae:c8:92:78:5d:26:60:1a:c8:3f:c1:
                    b1:07:00:7b:f6:f1:11:20:b1:97:62:2f:65:bd:4d:
                    ee:43:3a:8c:16:9c:1d:81:ed:2c:80:1a:9d:7e:03:
                    a9:6a:c0:af:c2:2c:1d:5c:7d:b0:9e:6d:ec:14:b0:
                    ce:30:b1:fb:a0:5b:05:d9:12:48:4c:a6:c6:36:a3:
                    a8:bc:bd:cc:50:04:2f:19:bb:63:27:97:15:b6:74:
                    b8:73:97:c9:db:b8:33:e8:92:9f:09:d1:54:1d:a5:
                    53:ed:22:e2:2d:81:ee:57:96:6b:cc:c7:07:10:c3:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CF:1F:46:3C:CB:8A:43:19:6D:BD:E7:9D:EB:91:65:23:05:27:23
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/784395e3eab4f3982f00b3a338cae03fcc859860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:62:62:fc:14:d0:e2:8d:31:29:bf:49:95:00:54:19:0c:21:
         c7:f1:40:1a:2d:a6:75:c7:0f:44:29:28:aa:67:92:77:25:a6:
         74:d1:a4:7a:16:1b:b9:8f:75:60:48:e3:5d:56:fd:db:5b:c0:
         4d:b2:21:c2:28:8e:00:ef:dd:4d:fa:82:f0:ea:e6:f6:1c:9c:
         13:a9:23:ab:54:58:ec:fb:5b:98:1d:9b:4c:79:31:ed:18:19:
         e4:eb:01:59:d1:ab:c1:db:2e:ff:23:77:a8:f9:15:89:ba:f7:
         82:94:66:7e:16:74:6f:d9:ae:44:a8:c5:c9:09:1d:2d:28:a0:
         39:35:3e:16:68:23:51:04:7e:30:2e:32:96:3f:d9:83:56:e8:
         57:c8:74:73:81:82:ea:16:fd:29:bc:c5:eb:75:ca:f5:64:34:
         c1:8f:8a:03:43:a5:0a:c2:bd:7e:a5:fd:1a:6a:b3:c3:da:bb:
         e8:64:f2:62:67:5a:37:8a:0d:99:8f:ba:f5:c1:e8:a1:b4:cd:
         51:06:ea:fe:9c:d5:0a:8d:b1:0b:7f:3a:1c:fe:98:97:87:79:
         2e:4b:2b:94:03:20:71:b5:2c:0c:27:91:34:f1:6d:8c:15:11:
         d0:13:bd:bb:d8:44:e9:08:c0:a7:98:4c:1d:3f:b4:6e:8a:b9:
         07:ee:d7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org