Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/016cbb403830b99b769f11a84a88d1e1ef4115b9.roa
File:                     016cbb403830b99b769f11a84a88d1e1ef4115b9.roa (raw, json)
Hash identifier:          hXgxDTSdp+azkj2K9sF7a8IYZjTj/Z6itV0YKqZwRyE=
Subject key identifier:   BF:B3:47:5D:01:D5:E5:0B:26:28:96:D1:E5:31:4E:92:E8:CC:3C:79
Certificate issuer:       /CN=ead29b83faed797d3bc08fb554018f7693cf4391
Certificate serial:       0C77
Authority key identifier: 0F:3D:8B:4D:45:D9:21:4A:E8:7D:88:E1:84:55:53:02:7A:05:64:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ead29b83faed797d3bc08fb554018f7693cf4391.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/016cbb403830b99b769f11a84a88d1e1ef4115b9.roa
Signing time:             Wed 03 Aug 2022 18:06:34 +0000
ROA not before:           Tue 02 Aug 2022 03:00:00 +0000
ROA not after:            Fri 02 Aug 2024 03:00:00 +0000
asID:                     10964
IP address blocks:        200.31.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead29b83faed797d3bc08fb554018f7693cf4391
        Validity
            Not Before: Aug  2 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2024 GMT
        Subject: CN=016cbb403830b99b769f11a84a88d1e1ef4115b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:9e:4b:80:a2:d6:59:fa:f2:85:73:c6:26:
                    97:1d:f5:5a:79:ae:21:98:c7:b1:4d:51:35:66:c7:
                    1c:ad:5d:19:59:a0:2a:8e:3d:67:5f:bb:69:12:0d:
                    67:d4:2b:bd:e5:a4:92:c8:f0:06:58:08:12:e5:7e:
                    89:40:49:90:45:90:f7:b6:e3:94:92:70:d4:7a:71:
                    7d:fd:56:a3:bf:47:4d:74:6d:72:cf:78:33:64:2a:
                    4b:cf:23:19:80:a5:7d:1d:09:f2:8e:bf:d6:b1:85:
                    d6:27:a9:57:16:bd:48:fc:26:89:91:60:a8:5c:08:
                    fb:a7:04:90:18:fe:92:38:bc:87:b8:ce:d7:0f:2b:
                    48:f9:f9:a5:64:f2:85:54:85:da:33:7e:9e:d5:02:
                    0e:a4:a7:e5:86:b9:5e:35:c2:86:87:41:f6:a7:2f:
                    36:f1:c7:70:e1:13:61:24:87:62:81:a2:1d:cc:ed:
                    b5:71:9e:2e:f6:72:5e:59:bc:ec:7f:59:26:b4:96:
                    08:d8:8c:35:ab:26:9a:a8:8c:f8:ac:b2:7f:2a:f1:
                    e2:10:44:9d:e8:89:e5:9e:87:23:e5:dc:c1:73:e8:
                    be:5c:d6:10:7a:64:31:0d:5f:a4:f8:76:47:5a:96:
                    f0:e0:b7:86:c3:bb:b2:9d:ec:5f:f5:02:69:b4:46:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B3:47:5D:01:D5:E5:0B:26:28:96:D1:E5:31:4E:92:E8:CC:3C:79
            X509v3 Authority Key Identifier:
                keyid:0F:3D:8B:4D:45:D9:21:4A:E8:7D:88:E1:84:55:53:02:7A:05:64:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ead29b83faed797d3bc08fb554018f7693cf4391.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/016cbb403830b99b769f11a84a88d1e1ef4115b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/ead29b83faed797d3bc08fb554018f7693cf4391.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:af:dd:c9:e2:0e:64:76:b8:71:44:01:e5:02:03:34:c2:4a:
         c0:ea:bd:36:8e:0e:93:1a:92:94:93:c7:2f:ab:ab:54:e5:20:
         ff:65:5b:fc:6b:82:67:a8:84:96:a0:e8:8d:40:7a:6a:52:0f:
         d6:5b:0a:5d:bd:59:46:0a:9d:22:79:9d:19:ed:4d:af:58:1d:
         43:7f:28:34:9e:0d:48:7c:c2:9a:6e:cd:1f:b2:ca:27:79:3d:
         2b:f7:7f:a6:30:28:12:fb:1b:b9:9e:60:c3:d2:7e:1e:01:4a:
         78:f1:8d:f0:98:90:e6:63:c8:cd:9b:78:0a:e2:3c:4c:1c:8b:
         08:83:c5:04:42:12:f7:30:55:41:21:7a:77:b1:f6:90:94:09:
         b4:a8:fa:d4:26:c0:f6:91:1a:ee:20:62:23:77:2e:18:2a:29:
         73:5e:a2:f2:81:09:c0:82:d7:50:7e:c4:85:d6:9f:d6:fc:43:
         e1:e4:7c:3f:7f:0a:40:59:8a:e1:56:f8:87:25:93:34:e0:a0:
         9d:36:e2:f5:1c:17:5a:3f:da:82:84:b1:ba:81:c8:3b:03:5b:
         cf:94:51:e4:31:e5:73:b2:bf:a2:69:f5:86:56:78:d3:c6:2d:
         0f:42:fc:83:31:90:7e:7b:fa:43:8b:40:ef:ed:b8:15:03:c7:
         c0:4c:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org