Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/ba21b6db8e9fe5c3a3c2595461f5c4edc18e628a.roa
File:                     ba21b6db8e9fe5c3a3c2595461f5c4edc18e628a.roa (raw, json)
Hash identifier:          RmLcNDJxKjuouuGtciAh4qcZJmUaOhjvk8q46opwccU=
Subject key identifier:   AC:39:9B:AE:43:18:B1:AB:1A:FD:80:6A:6C:42:82:09:71:33:64:70
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       029729
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/ba21b6db8e9fe5c3a3c2595461f5c4edc18e628a.roa
Signing time:             Tue 11 Jul 2023 17:45:58 +0000
ROA not before:           Mon 10 Jul 2023 17:45:58 +0000
ROA not after:            Fri 11 Jul 2025 17:45:58 +0000
asID:                     7418
IP address blocks:        200.42.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169769 (0x29729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 10 17:45:58 2023 GMT
            Not After : Jul 11 17:45:58 2025 GMT
        Subject: CN=ba21b6db8e9fe5c3a3c2595461f5c4edc18e628a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:05:15:8e:e5:1a:fa:28:96:86:9e:0c:a5:
                    4f:1f:0f:54:22:b2:3e:06:51:70:9b:bd:0e:cc:f6:
                    31:66:ea:6d:4a:3d:0c:1b:78:06:65:e3:da:a2:13:
                    ee:98:34:0c:0a:e5:89:68:8c:d3:7a:83:53:f0:9d:
                    62:da:18:d9:eb:6d:45:9b:ca:85:73:7e:d3:d0:a3:
                    1e:4b:c1:82:7f:4c:9e:23:79:e2:d3:24:e9:11:a8:
                    77:cd:8d:70:e5:09:ac:b6:d8:1e:9c:c3:fd:17:12:
                    ba:b2:81:4c:3c:8f:22:46:37:f4:b6:75:a0:bd:58:
                    dd:a9:ac:74:f6:da:0b:52:01:4b:0c:cf:34:cc:5d:
                    35:7b:7d:4d:0f:26:d7:9a:76:bc:56:94:4f:65:62:
                    9e:d6:7f:80:ac:f3:c6:7a:03:06:48:16:72:26:a1:
                    0d:a2:9e:7e:f1:19:fa:62:06:8c:b7:ab:20:be:53:
                    36:f5:ff:c3:4e:3b:bc:54:3c:2b:2e:c1:53:25:a5:
                    0f:dc:16:17:d0:0d:7f:db:3c:93:4a:54:39:5d:fb:
                    e8:89:54:d1:24:a2:96:31:8f:f5:35:56:12:6c:14:
                    1d:9d:ea:1a:e8:cc:15:46:88:cb:01:b9:52:29:86:
                    a7:83:ea:81:5f:9f:92:38:af:e9:cf:6d:5b:30:43:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:39:9B:AE:43:18:B1:AB:1A:FD:80:6A:6C:42:82:09:71:33:64:70
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/ba21b6db8e9fe5c3a3c2595461f5c4edc18e628a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:9d:c5:12:72:e4:e5:1e:50:8e:29:5d:68:f1:43:07:1d:2f:
         b7:ee:46:f3:4d:5a:83:31:a8:03:8f:f5:eb:d8:18:e6:b1:e0:
         85:30:49:1e:8c:05:4a:8a:ab:b4:74:e5:51:5b:5c:43:4e:fb:
         a0:c3:74:b0:3f:57:41:d7:83:8d:8a:db:a6:f6:87:80:fe:22:
         11:ed:2e:14:fb:f5:91:15:8d:2c:b2:80:d6:45:01:82:d2:b2:
         93:c5:56:a7:86:10:14:aa:ed:5b:24:2d:1f:55:4b:69:f2:90:
         98:8d:da:cb:10:c0:02:78:f1:d0:08:8f:36:d9:3b:e7:c5:b6:
         61:0e:21:0d:67:2e:8e:67:82:b5:a2:99:6d:06:1f:cd:79:fa:
         18:6d:55:25:77:46:88:b4:5e:17:0f:26:ee:7c:77:4f:26:c0:
         26:10:5f:42:bf:8e:20:4f:0e:72:65:46:2c:f7:3f:b4:27:63:
         99:ef:4c:9a:4f:97:47:ac:e7:90:29:bd:8d:36:bf:f4:7a:0d:
         91:13:e9:fd:76:70:82:95:e7:93:a8:11:6d:1a:55:b8:6c:bf:
         9a:6f:fb:d5:0f:9c:00:c1:7c:3b:a4:38:8b:ee:ef:fe:7b:1d:
         93:de:99:e3:f5:96:ce:3c:36:76:03:c2:95:2c:46:72:6a:2e:
         4d:91:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org