Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/e0660d8e5b83da948d937f0e6e34b41568138bae.roa
File:                     e0660d8e5b83da948d937f0e6e34b41568138bae.roa (raw, json)
Hash identifier:          krNIPlOLp6KFOnTwYlOymQ/37oYUlgkwUX4H9cBoZDU=
Subject key identifier:   AE:DE:4B:4C:32:50:9C:98:34:3D:8A:08:83:30:FA:EB:E8:0C:23:06
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       0301AC
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/e0660d8e5b83da948d937f0e6e34b41568138bae.roa
Signing time:             Wed 12 Jul 2023 15:37:24 +0000
ROA not before:           Tue 11 Jul 2023 15:37:24 +0000
ROA not after:            Sat 12 Jul 2025 15:37:24 +0000
asID:                     16629
IP address blocks:        200.113.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197036 (0x301ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:37:24 2023 GMT
            Not After : Jul 12 15:37:24 2025 GMT
        Subject: CN=e0660d8e5b83da948d937f0e6e34b41568138bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:b9:e4:24:22:c9:1e:ac:ef:69:72:cf:ed:
                    28:e6:56:ae:d0:3d:08:ad:66:79:81:77:d9:82:74:
                    ea:6c:6a:b3:c9:d8:4d:ad:50:1a:78:2a:02:58:aa:
                    5d:2c:8f:86:b4:f7:38:ff:14:49:1a:a9:53:d9:e5:
                    63:90:f3:72:d0:ae:af:93:32:f2:f7:6f:1f:ed:4f:
                    e8:1b:89:49:fa:a8:15:54:1b:7c:30:9e:17:69:5c:
                    b4:70:db:98:bf:57:a4:46:20:7c:24:81:27:c4:11:
                    01:bc:79:7b:33:d0:70:fe:bb:32:e1:ff:7a:58:06:
                    ae:16:43:7e:f4:bf:e4:ca:15:e7:38:0d:5d:12:4b:
                    95:4d:a0:65:df:b6:f8:c1:90:b5:5e:d0:a5:62:79:
                    44:3a:e8:fb:8d:2c:7c:d9:f2:b4:00:62:e8:56:52:
                    c7:52:95:74:f3:42:fa:0f:e1:2b:45:8b:0e:a7:3c:
                    9c:8e:3a:fd:95:15:06:e3:82:d4:42:d6:33:ee:a4:
                    0f:65:05:98:2e:03:8c:e7:1c:2b:99:f9:27:de:bc:
                    d1:ee:b5:c0:b1:3a:70:67:8e:e8:46:c2:81:83:ac:
                    41:99:5a:79:af:e2:c9:26:ea:2a:5c:20:a3:a8:f5:
                    5a:e4:fd:86:38:99:4b:13:25:7c:10:70:e0:ef:b6:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DE:4B:4C:32:50:9C:98:34:3D:8A:08:83:30:FA:EB:E8:0C:23:06
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/e0660d8e5b83da948d937f0e6e34b41568138bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:37:b4:b6:23:88:ea:6a:fc:aa:ae:68:4a:03:f0:5f:f4:0e:
         88:38:72:6f:d4:7c:55:29:bb:b0:b8:19:4f:df:52:7b:10:2a:
         ab:ef:c6:77:09:0c:67:7f:65:28:21:5a:d4:1a:62:3b:d4:16:
         ea:e7:9a:7b:20:eb:57:86:08:22:4b:c8:6c:7b:4a:b8:28:97:
         da:d6:87:7a:f6:70:0c:74:b5:dd:7c:41:c4:76:10:06:90:1c:
         40:1e:b5:da:a3:cc:56:a7:ee:32:05:e1:44:5d:c2:95:3c:63:
         86:59:25:86:d1:94:8d:66:53:cc:3b:37:96:55:a6:92:d6:cd:
         8b:0d:e0:b4:3d:99:56:da:e7:3a:ce:18:b9:92:f9:a5:b5:1c:
         06:a3:6c:dd:6a:1e:ae:9c:92:76:f5:b9:2c:a9:76:24:dd:05:
         d8:80:29:4e:4a:14:d0:96:5b:5d:cc:28:20:21:4a:c4:1d:38:
         09:42:57:a2:b0:d6:84:f2:9a:ca:a8:c7:03:de:89:72:62:01:
         10:cd:09:77:66:9e:ba:0d:67:0c:3c:b7:a0:13:3f:60:82:7a:
         77:c7:cd:78:86:5b:4b:cf:a3:99:c5:3e:c1:0f:0f:6b:c5:0c:
         11:91:43:c4:f0:90:10:97:a0:97:9f:41:1d:87:30:4e:3e:be:
         e1:f3:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org