Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/855771039eb5ffe8556cb8729e5ed0089e0ab06f.roa
File:                     855771039eb5ffe8556cb8729e5ed0089e0ab06f.roa (raw, json)
Hash identifier:          8/+ZRq/ZbIKL9RC05xtnESjJyDcbl+1jHK8gy+Au+jo=
Subject key identifier:   77:10:F2:59:FE:C8:2D:86:0D:24:A2:C9:86:51:72:4D:4A:F7:8E:F4
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02FF1B
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/855771039eb5ffe8556cb8729e5ed0089e0ab06f.roa
Signing time:             Wed 12 Jul 2023 15:37:04 +0000
ROA not before:           Tue 11 Jul 2023 15:37:03 +0000
ROA not after:            Sat 12 Jul 2025 15:37:03 +0000
asID:                     7418
IP address blocks:        200.113.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196379 (0x2ff1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:37:03 2023 GMT
            Not After : Jul 12 15:37:03 2025 GMT
        Subject: CN=855771039eb5ffe8556cb8729e5ed0089e0ab06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:78:26:a8:ca:7d:96:b4:6c:e7:06:54:a3:
                    e8:29:eb:b6:4c:f4:8d:90:d7:a6:a7:99:9a:9b:68:
                    a2:15:c2:6d:da:9d:84:24:9d:33:24:c8:03:c7:43:
                    b4:96:da:9d:5d:3e:b7:71:f9:6f:b7:cf:37:0d:b6:
                    2d:aa:50:68:e6:b1:f6:60:71:14:ba:f1:de:d2:64:
                    84:6f:a1:ce:a5:f6:da:76:ec:06:9f:a4:60:68:77:
                    f6:36:9f:30:0e:f4:63:54:b4:ad:69:90:a3:16:74:
                    b9:da:98:f4:f7:bc:38:63:57:e4:ae:e7:90:7f:93:
                    88:ff:d6:38:e0:83:6c:5f:09:9d:ab:ae:70:cd:52:
                    83:9d:c0:2a:fe:27:ef:fc:45:b9:da:8e:41:43:35:
                    4e:68:4d:00:f5:93:b5:59:de:84:d7:44:c4:6a:aa:
                    00:4f:81:2c:e1:9d:ac:d3:25:01:7b:c0:31:61:a5:
                    7d:f9:cb:62:49:a8:21:09:9e:57:61:75:ac:9c:28:
                    94:1c:77:68:2d:54:75:27:46:61:16:4f:31:f7:f0:
                    f4:4d:b8:08:16:88:2e:96:d6:80:a8:93:5c:76:b4:
                    78:ad:4a:88:d5:b7:aa:a4:ac:e3:a0:80:58:e2:af:
                    6c:0a:92:a8:3c:12:d3:e0:02:85:8a:17:5e:6f:ee:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:10:F2:59:FE:C8:2D:86:0D:24:A2:C9:86:51:72:4D:4A:F7:8E:F4
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/855771039eb5ffe8556cb8729e5ed0089e0ab06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e6:ce:a0:7f:76:81:94:62:aa:13:90:70:88:4b:da:d9:35:1b:
         0e:cc:0b:fc:99:85:c4:70:62:28:13:5f:5b:5d:ef:47:6d:62:
         fa:08:78:14:e3:5d:b6:1b:8b:f9:53:e3:88:57:36:75:e7:2a:
         af:02:39:d8:bb:5f:93:34:4c:ae:c8:00:50:b6:8c:b0:3a:a5:
         b9:31:c2:3f:7e:eb:3d:31:ea:56:04:97:77:fe:59:13:b0:c6:
         a0:2f:7c:68:4a:3e:85:c5:59:0a:f4:db:84:26:c2:04:82:b0:
         0f:e6:1d:60:4d:ed:49:46:99:92:b2:12:21:a3:4f:e0:34:88:
         73:10:72:d4:f5:a9:eb:2c:67:39:7e:b1:bc:bb:88:91:62:8d:
         05:08:5f:b1:9b:62:78:6e:f1:7e:ac:67:35:d8:90:ac:55:88:
         e0:3a:e5:69:00:2c:13:e1:0b:f8:8e:74:7e:a5:84:ab:ee:ff:
         84:e8:36:a5:a5:ca:b0:46:fd:5f:d1:f2:4b:f6:73:d5:57:ca:
         b9:38:5c:90:3f:e0:d4:14:e2:fc:e1:06:a9:7c:15:e5:d5:c7:
         b4:1b:2f:10:9f:45:65:76:d6:98:4b:cf:60:8e:72:0e:69:00:
         b9:37:c3:63:83:f2:2d:d3:a8:f0:f6:34:9c:1c:c5:44:ae:a2:
         99:cb:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org