Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/c7daea02bf18124d2586bc9734563105c928c674.roa
File:                     c7daea02bf18124d2586bc9734563105c928c674.roa (raw, json)
Hash identifier:          bG9+WvfRCVuC27rFVTxMdx+xjVJaGDdesZUAg/OBsLE=
Subject key identifier:   74:5A:00:A4:0A:1C:DA:73:B5:23:C2:87:AC:EF:0C:1C:02:39:03:79
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02BED2
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/c7daea02bf18124d2586bc9734563105c928c674.roa
Signing time:             Wed 12 Jul 2023 15:27:35 +0000
ROA not before:           Tue 11 Jul 2023 15:27:35 +0000
ROA not after:            Sat 12 Jul 2025 15:27:35 +0000
asID:                     7418
IP address blocks:        200.113.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179922 (0x2bed2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:27:35 2023 GMT
            Not After : Jul 12 15:27:35 2025 GMT
        Subject: CN=c7daea02bf18124d2586bc9734563105c928c674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:ee:86:f2:61:f1:37:3c:90:43:4d:a0:37:
                    fd:35:fb:6c:b8:82:5f:73:0d:db:7e:b4:f8:2c:a2:
                    d3:0a:dd:37:4b:42:a6:b4:d4:d4:00:75:d3:7b:dd:
                    a6:70:85:c2:28:dc:ae:7a:63:3d:71:bb:c0:bf:ca:
                    5d:1c:83:17:94:cf:84:79:8e:2b:2d:9b:e7:fc:ab:
                    a0:e9:26:1f:18:5c:d7:87:b2:0e:07:f3:df:e9:35:
                    05:49:9b:99:1e:0b:6c:66:98:77:28:a9:50:42:57:
                    96:fa:27:d3:08:5e:dc:fd:68:fc:c0:a5:2f:09:83:
                    9d:cc:35:28:36:eb:e0:bd:cd:c5:4e:94:5c:fa:ee:
                    78:57:fa:d3:bb:ff:3c:04:48:9e:2a:79:ef:3e:6d:
                    21:1d:8a:19:c8:bc:67:59:40:93:fb:8f:f6:71:22:
                    fa:ef:be:10:f7:c7:87:19:89:ac:47:ba:d3:ac:1d:
                    40:6b:45:84:de:d5:a9:ae:f9:31:16:1d:39:e3:b0:
                    aa:c4:d2:8a:fd:12:74:75:41:b5:06:01:f1:8e:52:
                    ec:e4:6a:e7:7b:0c:86:dc:7e:b0:50:b0:f2:a2:ca:
                    b4:50:66:dc:f6:30:72:3d:3d:b6:e4:86:ad:73:2d:
                    e4:b7:92:f9:8b:cc:d4:8e:7a:55:85:4b:4c:42:87:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5A:00:A4:0A:1C:DA:73:B5:23:C2:87:AC:EF:0C:1C:02:39:03:79
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/c7daea02bf18124d2586bc9734563105c928c674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:c4:b5:bd:b0:29:0f:65:79:68:92:58:70:23:16:02:e3:e5:
         fc:f5:15:20:6b:a5:29:52:77:d8:43:c3:91:33:6c:a6:b3:f9:
         d5:51:bb:09:39:8d:5f:4e:83:22:57:7f:57:e4:29:58:a8:31:
         71:b2:ab:c8:77:61:ae:b1:3c:4a:7f:3f:36:7e:34:85:8d:04:
         ac:fd:e4:87:db:50:3e:a9:00:6a:f5:6b:d4:d2:0d:72:de:ee:
         bd:9c:8b:a4:c0:38:c3:d0:ac:81:b1:82:71:a8:89:9a:2a:3b:
         12:8a:43:c1:e5:c5:58:72:66:7a:5f:d7:10:98:3f:bd:c3:f7:
         11:89:d3:0c:7b:5d:a6:7f:e2:c9:87:6d:b0:37:a4:12:d7:8c:
         6b:b4:13:86:52:85:fc:94:83:33:12:f6:6a:60:9d:e3:00:f5:
         cf:c0:7b:f7:35:31:62:60:6d:55:fe:c7:5a:b6:1a:f1:a4:2e:
         bf:1a:0b:bc:60:42:7c:46:a0:64:53:ab:8f:77:f0:c8:d6:24:
         d3:64:e7:77:45:bd:ad:f9:73:76:e2:a9:29:90:c7:09:65:0a:
         df:db:d4:f0:f7:91:bf:c0:ec:84:c5:f6:92:da:e3:53:79:ef:
         64:29:ec:92:38:dd:d2:31:ca:93:78:05:3d:7d:e0:b0:c6:41:
         2b:95:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org