Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/cee4af932df24c55dc54fa1cf3c0252c592a8c15.roa
File:                     cee4af932df24c55dc54fa1cf3c0252c592a8c15.roa (raw, json)
Hash identifier:          4XNZNVerxaAA7NIERDyP9LHp+OMfMtTS0IoBGAypthw=
Subject key identifier:   BC:97:8E:4E:6F:FD:56:48:F7:89:BB:F8:84:C0:25:B7:F4:F0:1B:94
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       034DA3
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/cee4af932df24c55dc54fa1cf3c0252c592a8c15.roa
Signing time:             Tue 18 Jul 2023 19:46:54 +0000
ROA not before:           Mon 17 Jul 2023 19:46:54 +0000
ROA not after:            Fri 18 Jul 2025 19:46:54 +0000
asID:                     7418
IP address blocks:        200.50.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216483 (0x34da3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 17 19:46:54 2023 GMT
            Not After : Jul 18 19:46:54 2025 GMT
        Subject: CN=cee4af932df24c55dc54fa1cf3c0252c592a8c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:5b:50:39:1e:6c:0f:76:ae:ee:47:ec:3a:
                    6c:a0:eb:52:0f:50:5a:32:de:5f:50:76:89:7f:da:
                    17:52:f8:df:f7:bc:7c:de:f6:f9:dd:34:6c:23:c3:
                    c8:81:6a:ac:1b:0d:9a:96:c1:54:f8:b0:7a:bc:86:
                    e7:ae:fe:ae:a8:5f:96:0e:f7:65:79:03:47:21:da:
                    63:d4:7c:d6:9a:ae:02:85:5e:8f:43:f6:6f:cd:a5:
                    2b:52:c2:61:0f:f5:44:0c:fb:86:61:41:ef:17:21:
                    f8:a4:40:57:0b:71:db:cd:e4:cd:32:b9:1d:6c:c3:
                    9d:4c:6b:95:05:81:a1:07:99:5f:06:e8:3e:86:5a:
                    fb:42:91:e4:be:8a:eb:30:e5:f8:b1:15:c7:8e:3a:
                    05:1d:01:97:81:c2:66:41:92:ca:4d:70:bd:2f:09:
                    43:9e:61:8c:1c:50:4f:f9:e5:8e:d5:52:36:29:85:
                    cc:57:13:0d:b7:21:c1:4d:5f:66:43:15:f8:06:4e:
                    15:de:2d:77:57:09:9e:64:74:5c:50:f4:77:56:79:
                    90:b0:e8:d1:20:e2:c2:33:4b:0d:d7:a3:51:03:1c:
                    64:1b:d8:69:bb:1a:94:1a:eb:f6:e9:29:4d:93:06:
                    64:af:4e:a6:57:e5:f9:ed:9f:af:a9:16:10:1f:b8:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:97:8E:4E:6F:FD:56:48:F7:89:BB:F8:84:C0:25:B7:F4:F0:1B:94
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/cee4af932df24c55dc54fa1cf3c0252c592a8c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:a1:31:4c:7b:cb:54:6d:fc:70:42:63:b6:81:d6:09:97:98:
         68:5c:b8:b0:67:47:11:97:e8:8c:8f:15:48:f6:96:80:c2:1d:
         70:c7:b8:f3:5a:69:21:24:d4:44:70:37:04:a8:10:ff:46:07:
         fb:67:67:81:02:74:19:cc:bd:37:1e:f3:98:22:67:17:bf:59:
         97:1a:99:58:61:8d:76:93:03:65:60:76:06:33:50:d1:43:df:
         93:8f:2f:90:a1:82:8d:93:a1:6c:13:2d:bc:c7:1e:4a:aa:c4:
         12:1e:c4:63:31:12:50:a8:2d:6b:13:94:21:30:97:bd:cc:d4:
         bb:30:ae:2b:91:4a:fd:4b:f3:9d:4f:a9:25:c2:63:94:f4:73:
         51:08:cd:67:72:f9:7d:5b:e0:53:d2:6e:e2:ce:45:13:68:85:
         76:21:9e:15:93:b1:10:e2:c0:69:90:b5:86:99:6e:ef:a7:24:
         7d:15:fd:aa:1a:c8:e7:52:d0:7d:e7:6d:a6:65:fa:7c:e1:96:
         a6:04:86:5d:ce:ea:79:28:7c:d9:7f:14:04:ee:ed:41:f1:58:
         b0:0f:0d:cc:ec:fc:03:c0:58:9f:53:41:34:ad:ea:88:44:01:
         72:e4:2a:7c:46:5c:2d:35:22:37:dc:42:6a:fc:71:c6:d4:60:
         80:ff:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org