Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d4c56a0b195a25177c970f683598d2226a65c385.roa
File:                     d4c56a0b195a25177c970f683598d2226a65c385.roa (raw, json)
Hash identifier:          WtYwaLXGYpAmCRr7n8D/HZzZEcb2xuGPw1rFS0rAbAk=
Subject key identifier:   3B:89:24:4C:F6:92:4A:77:7B:8D:73:46:E4:68:51:E9:5A:58:66:9A
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02878A
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d4c56a0b195a25177c970f683598d2226a65c385.roa
Signing time:             Tue 11 Jul 2023 17:44:52 +0000
ROA not before:           Mon 10 Jul 2023 17:44:52 +0000
ROA not after:            Fri 11 Jul 2025 17:44:52 +0000
asID:                     7418
IP address blocks:        200.42.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165770 (0x2878a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 10 17:44:52 2023 GMT
            Not After : Jul 11 17:44:52 2025 GMT
        Subject: CN=d4c56a0b195a25177c970f683598d2226a65c385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:c4:c2:f0:3f:d9:eb:01:0e:0f:c3:fb:36:
                    4b:99:f7:12:10:68:64:b7:0e:a5:fd:60:57:5f:f3:
                    86:47:30:51:8f:f9:4e:74:9d:13:a0:27:0b:76:7a:
                    2e:e5:e2:33:a1:f1:34:5f:73:4d:16:39:32:95:b2:
                    2d:f5:ec:d9:c1:39:10:44:e0:95:4c:ec:cd:88:85:
                    36:10:49:9d:d4:88:92:f0:57:57:cf:5b:bd:25:7e:
                    35:27:c1:e2:4b:c1:bc:ce:cd:e3:f5:10:45:40:cd:
                    be:7a:51:03:a8:aa:f1:62:1c:a2:b9:a5:6f:39:4d:
                    c6:d5:2b:ff:b6:d8:c9:5c:21:70:cf:55:5a:d3:15:
                    b7:b5:6f:e0:0f:8f:68:bd:e3:f7:1d:86:de:b8:15:
                    7b:cf:ea:2b:00:7d:a8:b6:f3:96:b8:b1:f8:44:1c:
                    74:0c:ea:6c:f6:f9:e4:2f:bc:52:bf:b7:6e:d4:4c:
                    f9:11:15:3b:72:a1:11:72:f8:36:7f:d9:e9:76:88:
                    f4:a3:cb:1c:a0:9c:f5:42:69:a2:0b:2c:2b:06:ec:
                    ed:71:f3:72:d7:18:4f:c2:80:60:20:f9:40:6a:48:
                    6b:47:81:fb:1c:3a:0d:04:da:7a:54:c0:06:57:40:
                    10:8a:b9:45:a1:c5:b7:d2:19:2c:90:43:fd:bb:de:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:89:24:4C:F6:92:4A:77:7B:8D:73:46:E4:68:51:E9:5A:58:66:9A
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d4c56a0b195a25177c970f683598d2226a65c385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:66:58:05:fe:3e:55:08:22:07:ef:5e:c3:6a:47:a4:ba:16:
         09:49:a5:2b:cf:96:12:2a:c8:cf:ae:15:03:d0:4e:3e:67:75:
         f1:bc:0a:70:8b:30:19:ca:02:94:a1:dc:f4:be:8a:9a:15:68:
         4e:36:dc:ff:ce:b2:b6:19:d1:32:18:be:1f:8e:98:14:3d:da:
         e7:73:4b:f4:b5:8c:f5:41:f6:f1:2f:59:3a:22:91:2f:68:2f:
         97:00:5e:f6:03:2e:2c:99:84:d2:15:41:21:69:42:c6:29:fb:
         f6:36:97:9e:0b:3c:de:c6:4c:6a:cf:4c:e8:09:62:39:fc:b6:
         30:3a:84:29:6b:bd:5f:26:e0:ed:0e:b6:96:fc:2a:4b:59:c7:
         71:08:a6:8f:91:ee:dc:ef:eb:db:ae:94:64:1c:d3:41:c0:20:
         22:7e:cd:99:1b:71:f4:de:8a:98:7e:c2:02:2d:7f:8a:2a:a3:
         de:e7:8a:83:79:9b:c2:5f:48:8a:0a:46:cc:47:29:a9:bd:17:
         2f:0b:44:23:f8:4b:a7:0c:80:89:97:a3:f1:51:9d:5d:18:40:
         70:c7:25:1c:4c:d7:40:db:23:88:02:de:92:38:2e:40:5e:1a:
         f1:b9:95:b0:f6:b1:81:55:41:9e:4f:5b:83:4d:c1:9d:46:de:
         f5:21:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org