Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a164765f64cc67cb523c23622132e896b10915dc.roa
File:                     a164765f64cc67cb523c23622132e896b10915dc.roa (raw, json)
Hash identifier:          rlDNo/tejIF3uiANymBnl9/HxnT63oVB7yOFt25fjo8=
Subject key identifier:   44:C4:A1:B4:56:55:8F:B4:07:0C:D0:51:DA:39:4B:0D:15:90:34:BD
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02B465
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a164765f64cc67cb523c23622132e896b10915dc.roa
Signing time:             Wed 12 Jul 2023 15:26:47 +0000
ROA not before:           Tue 11 Jul 2023 15:26:47 +0000
ROA not after:            Sat 12 Jul 2025 15:26:47 +0000
asID:                     15311
IP address blocks:        200.113.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177253 (0x2b465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:26:47 2023 GMT
            Not After : Jul 12 15:26:47 2025 GMT
        Subject: CN=a164765f64cc67cb523c23622132e896b10915dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:d8:6e:ef:d7:a7:22:fb:16:34:cf:13:28:
                    2a:c7:93:02:a9:16:3b:e8:d0:c4:7d:94:b2:ef:f9:
                    73:99:68:a1:39:66:2c:45:6e:e2:ef:02:94:f7:2d:
                    fe:59:1e:2f:98:dd:5b:8a:49:ab:e8:b4:79:50:1d:
                    ad:53:4e:20:b3:cd:ec:4f:7c:a3:bd:26:63:c3:95:
                    b1:de:92:26:38:88:91:30:1c:ad:89:50:13:d2:12:
                    bd:a8:ff:4b:3b:5b:94:16:7c:f6:74:45:65:9a:69:
                    8e:6c:67:29:bf:17:d4:17:b7:39:68:52:a0:d2:e6:
                    a4:09:af:a5:1e:9e:1c:1c:80:98:5b:d5:c2:41:0b:
                    00:c2:53:31:ba:28:3c:40:59:f8:81:4b:0d:00:56:
                    f0:f0:68:f9:58:a4:30:eb:35:69:ef:f8:e0:66:dd:
                    9d:21:64:a0:59:cd:77:46:4c:88:08:2c:5c:32:ff:
                    43:83:17:48:70:b6:3a:fa:29:a1:44:08:c6:c4:5d:
                    20:72:32:71:2d:45:01:3a:f2:a3:c0:fa:90:ad:5b:
                    10:a8:18:7e:c4:ca:24:06:ae:ed:f3:27:59:03:a3:
                    5a:17:80:7d:24:b7:b4:97:9b:c7:e5:7d:7c:fc:a2:
                    cf:cf:db:a4:2f:df:d3:0f:5d:76:96:87:be:9a:34:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:A1:B4:56:55:8F:B4:07:0C:D0:51:DA:39:4B:0D:15:90:34:BD
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a164765f64cc67cb523c23622132e896b10915dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ea:d8:d2:94:42:24:03:66:e5:fb:ec:58:5b:b0:ec:a9:9f:b2:
         e2:21:59:55:5f:22:60:aa:ad:c3:9e:bd:03:f7:6f:16:35:e6:
         fd:66:4e:d1:05:ef:d3:11:b2:12:e7:94:4d:fe:22:4e:ec:54:
         28:a0:d6:b0:ab:1a:7e:db:75:70:9b:69:85:f9:53:e7:10:4b:
         42:27:5b:31:86:1f:1b:12:9d:8f:be:cc:8a:1a:75:43:75:81:
         34:43:fd:e8:a0:02:94:e1:da:cb:08:d9:ec:cb:67:ae:d6:d8:
         48:da:a4:6f:21:05:74:c7:6e:a8:8d:91:ec:36:9c:20:07:7d:
         6c:6b:8a:f5:b8:23:7e:47:5f:50:51:62:de:b8:6b:96:7e:c5:
         92:ed:ca:be:45:95:16:26:0e:5a:ca:b7:eb:c4:44:e3:89:0c:
         a6:f1:34:56:eb:61:f1:06:92:e1:76:bd:d1:26:18:12:6c:aa:
         b8:47:17:41:26:bf:2a:d8:ce:a4:60:a1:27:74:12:09:29:4b:
         1d:cb:e9:4c:f6:8a:b3:8e:1a:77:4b:5d:d5:11:29:b0:f1:42:
         31:d6:93:e1:5a:98:99:4f:0e:8a:52:55:45:8c:e4:4a:0a:13:
         1d:6a:4e:72:e5:e8:e4:88:e0:1e:70:be:d0:c5:93:5a:43:bf:
         2d:a6:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org