Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/61cf06007d70500a3b4ab546aa58725fccf6e948.roa
File:                     61cf06007d70500a3b4ab546aa58725fccf6e948.roa (raw, json)
Hash identifier:          j7KtuR2mp44EoQKffdtjzZUBMAHKPkiPYCKx/LfrAX4=
Subject key identifier:   D4:72:97:11:10:B1:66:91:E9:9D:9C:F6:9E:77:9C:4D:14:59:6B:37
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       1789E7
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/61cf06007d70500a3b4ab546aa58725fccf6e948.roa
Signing time:             Tue 10 May 2022 22:12:27 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     16509
IP address blocks:        200.12.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542631 (0x1789e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=61cf06007d70500a3b4ab546aa58725fccf6e948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:a2:e5:4e:f9:94:3b:02:10:5b:d1:0b:7e:
                    80:7b:d2:e8:c9:89:6c:f2:b2:2a:bf:96:60:de:1a:
                    93:2e:51:7f:8e:ae:ff:52:95:6d:51:82:9b:1e:2f:
                    a3:fc:3e:9a:58:fa:5d:52:c8:20:16:f5:14:76:70:
                    57:03:40:f9:7d:2a:11:7e:a1:17:3b:ff:57:55:74:
                    6d:87:f0:55:b3:e0:93:35:07:bb:d2:ce:9e:cd:c7:
                    b7:89:02:a7:c4:f2:6b:3a:d3:a1:ee:25:9e:ca:f2:
                    a9:fc:9a:8d:40:a8:1e:f0:cc:9a:1b:e6:fc:22:2e:
                    eb:10:c3:5d:0a:41:44:b2:75:46:e2:f7:03:8c:f6:
                    9d:4a:bf:60:b1:7e:e0:75:57:8f:04:85:aa:31:3e:
                    1b:8d:a3:0a:bb:ed:51:6a:a3:ef:45:71:28:1b:95:
                    f6:5c:f6:7d:0d:29:0e:5b:22:d9:d3:35:74:4a:17:
                    71:38:f3:72:b8:9f:1b:f9:30:1b:5a:7f:3d:80:5b:
                    1f:d8:d4:aa:f0:23:3c:03:e8:c3:2d:e5:ae:0e:98:
                    6b:af:9b:95:96:07:1b:9e:54:3f:3d:4c:ca:21:a4:
                    5c:55:a5:f9:20:b5:8c:d8:1c:72:40:2e:65:de:da:
                    67:48:fd:2b:ed:e0:9d:81:70:8b:67:92:29:88:4f:
                    d2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:72:97:11:10:B1:66:91:E9:9D:9C:F6:9E:77:9C:4D:14:59:6B:37
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/61cf06007d70500a3b4ab546aa58725fccf6e948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:58:45:c1:85:55:da:b9:20:63:17:c8:dc:14:fb:3b:57:33:
         d8:9a:21:b7:4d:e8:36:6e:c0:9b:54:15:45:48:a7:97:58:bc:
         7a:59:b0:7e:75:a1:98:0a:52:27:6d:a2:71:c4:41:5a:9e:12:
         92:d6:07:ce:ff:52:e3:ae:64:f3:e8:c0:34:cd:1f:19:8b:a2:
         4d:a4:91:c3:71:60:8e:ea:6e:4a:32:bb:f0:25:86:22:bf:a7:
         8a:a0:ae:bb:63:88:fb:ac:fd:32:79:80:f6:06:db:34:bd:ff:
         b7:6e:16:0c:e2:81:9e:93:9c:83:0d:85:41:75:8b:46:8a:24:
         bc:15:f2:7d:c8:78:13:83:61:d5:c0:44:a4:49:3b:28:14:48:
         9a:43:b3:02:92:3b:fb:1f:93:c6:a9:03:42:2e:0c:9f:78:c3:
         9b:ab:a7:03:cb:03:a4:53:9b:ba:5b:80:e7:fe:c1:93:f7:7b:
         41:43:94:d1:6e:7a:7f:38:29:b9:a4:b5:4b:e1:c5:68:d8:2a:
         e6:ab:26:99:af:50:b3:dc:82:68:e0:1b:6a:d7:ec:ec:7b:82:
         6e:87:e2:1e:b8:43:67:95:c8:2f:1a:ee:c5:8c:25:6c:e6:ea:
         1a:49:48:d2:cf:07:01:cb:fb:bd:88:c6:7f:14:c0:bc:a5:9e:
         4b:21:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org