Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/15aa113fe5cff682362bed7fe60c846f760e0f9b.roa
File:                     15aa113fe5cff682362bed7fe60c846f760e0f9b.roa (raw, json)
Hash identifier:          s9GKtolVRBqZlremj00pRBIotxrH0PrWFjBY2cWEoa0=
Subject key identifier:   2D:20:84:36:11:73:FA:48:28:48:5A:34:03:55:A3:22:94:7C:C8:7D
Certificate issuer:       /CN=cabb0cf6251beebdb70ee6bb05d5743481029a07
Certificate serial:       283F6A
Authority key identifier: D1:5E:AA:17:52:36:CC:A2:7C:F1:BA:D2:14:3C:8A:28:9A:3E:A9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cabb0cf6251beebdb70ee6bb05d5743481029a07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/15aa113fe5cff682362bed7fe60c846f760e0f9b.roa
Signing time:             Thu 21 Mar 2024 14:56:56 +0000
ROA not before:           Wed 20 Mar 2024 03:00:00 +0000
ROA not after:            Tue 20 Mar 2029 03:00:00 +0000
asID:                     27806
IP address blocks:        200.13.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2637674 (0x283f6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabb0cf6251beebdb70ee6bb05d5743481029a07
        Validity
            Not Before: Mar 20 03:00:00 2024 GMT
            Not After : Mar 20 03:00:00 2029 GMT
        Subject: CN=15aa113fe5cff682362bed7fe60c846f760e0f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:50:36:d8:6c:0a:27:91:58:89:41:d8:a4:6f:
                    6b:a9:fe:13:aa:7c:dc:2e:f9:27:5f:09:74:8e:0c:
                    3b:6d:f0:72:b5:e7:9e:24:7c:ae:eb:bc:94:1e:46:
                    a5:a7:12:47:f7:c6:84:0a:7e:84:7f:9b:11:d8:7f:
                    cd:f8:2c:76:23:73:bd:5d:d2:56:4c:ec:a5:fe:31:
                    e3:d3:43:02:f7:73:f7:a5:5e:67:66:16:92:0b:f9:
                    a3:c4:e7:47:b8:99:e9:b1:96:ac:7d:d5:f9:73:d7:
                    76:37:24:bc:dc:9e:c0:50:29:b7:99:f4:56:5e:d1:
                    da:59:c8:42:60:f1:96:a2:84:ee:17:a2:82:8b:c4:
                    ef:22:2a:ce:88:9d:ec:91:13:07:c4:df:45:d5:39:
                    c1:6c:8c:28:7e:c1:21:52:07:5a:12:15:c4:4d:1a:
                    ba:0e:d7:31:30:ee:25:20:aa:69:3e:6b:7c:87:0d:
                    e0:52:da:ac:66:bf:9a:c9:81:4c:02:e4:33:c1:df:
                    5e:08:f3:06:d8:04:49:06:5b:94:09:5e:98:b0:cd:
                    cf:db:2c:4f:59:03:b8:fa:d6:c3:c5:c9:2d:68:b9:
                    9d:fe:93:af:46:bf:ab:07:b6:7c:67:38:8b:c1:37:
                    6c:de:66:9d:46:95:73:95:06:a6:db:b7:24:28:f5:
                    38:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:20:84:36:11:73:FA:48:28:48:5A:34:03:55:A3:22:94:7C:C8:7D
            X509v3 Authority Key Identifier:
                keyid:D1:5E:AA:17:52:36:CC:A2:7C:F1:BA:D2:14:3C:8A:28:9A:3E:A9:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cabb0cf6251beebdb70ee6bb05d5743481029a07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/15aa113fe5cff682362bed7fe60c846f760e0f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/cabb0cf6251beebdb70ee6bb05d5743481029a07.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:fb:94:16:9a:e1:96:ff:cf:6e:0c:e7:d2:18:bb:d9:cc:b0:
         95:6d:9a:33:ba:d9:d1:d1:a8:09:0e:50:e2:c3:d5:03:ec:09:
         5c:20:6c:2d:e3:ae:85:d3:cf:25:e7:9c:d8:9e:c8:66:77:c4:
         a9:54:65:4b:d0:e8:1a:04:4a:6d:a1:19:46:29:34:c9:b3:8b:
         c5:d3:21:be:85:ae:56:04:7c:c7:83:f5:60:55:fb:70:a9:bc:
         c5:7c:f6:dc:85:66:35:72:ec:e2:1b:23:ff:56:66:50:ee:ae:
         1f:3e:9c:04:6c:bc:66:56:4c:55:0d:b1:d3:3e:cc:fe:96:69:
         80:11:22:d1:8d:44:c0:07:7e:f4:c9:ed:c4:b2:20:9b:e6:aa:
         bd:41:bf:8f:06:7d:b8:02:5a:68:c3:ba:de:06:15:57:8a:d2:
         80:c0:e2:5c:2e:fb:08:03:7c:77:14:5e:37:bb:b3:75:2b:f1:
         f2:96:60:08:fc:a5:5f:e1:4e:7c:94:d7:74:db:84:8d:53:30:
         04:0f:cf:53:f4:bd:6a:f1:ba:ed:d3:34:6d:ac:44:20:09:be:
         16:0d:86:03:06:aa:80:5b:f2:0a:cb:75:bf:10:60:11:64:5d:
         3b:a6:dc:9a:5a:17:0b:24:4d:ee:d9:45:be:d7:b8:17:d1:ec:
         18:10:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org