Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/d5b7c224d3410ad50857b0ff82d400f068d32780.roa
File:                     d5b7c224d3410ad50857b0ff82d400f068d32780.roa (raw, json)
Hash identifier:          32rvIgQV/GnrDOhTwwAQ4cgjMO6cw9loM0HaD5hCBK0=
Subject key identifier:   F9:B3:1C:F2:F3:55:0B:14:27:67:36:AF:DC:FB:F3:C3:C3:8F:6F:EE
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       17B508
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/d5b7c224d3410ad50857b0ff82d400f068d32780.roa
Signing time:             Fri 13 May 2022 15:20:36 +0000
ROA not before:           Fri 13 May 2022 03:00:00 +0000
ROA not after:            Sat 13 May 2028 03:00:00 +0000
asID:                     16509
IP address blocks:        200.12.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553672 (0x17b508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: May 13 03:00:00 2022 GMT
            Not After : May 13 03:00:00 2028 GMT
        Subject: CN=d5b7c224d3410ad50857b0ff82d400f068d32780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:8f:c9:20:59:5a:21:bd:f5:27:94:a2:99:
                    6d:3d:a6:89:9a:24:84:e4:d9:41:be:8b:ce:6d:50:
                    da:b5:51:51:85:46:0d:20:1d:92:03:44:7b:d6:ab:
                    a6:80:be:62:0a:a9:13:46:04:c7:26:a3:40:01:9c:
                    9a:20:bc:cd:e0:4d:65:21:e7:26:81:91:49:f9:21:
                    83:48:8d:58:2f:48:74:a7:5a:00:5b:6f:7a:6c:6c:
                    c7:86:82:5b:bd:1a:ed:52:c6:96:3c:24:df:34:ec:
                    8f:92:37:ab:ba:ea:15:ae:ba:b0:9b:7e:a7:2b:f6:
                    83:ff:70:9c:4a:28:b5:a3:ce:66:0b:c4:83:92:0d:
                    fb:29:30:e6:91:09:68:24:46:8d:ea:9d:81:94:99:
                    15:c5:00:23:73:3c:4b:38:b7:99:d3:3f:b8:bf:3d:
                    ae:a4:02:70:bd:31:3f:b8:cf:e6:ef:f5:b0:79:51:
                    e2:de:62:aa:e0:08:d8:57:3b:c3:e0:5d:2e:a2:47:
                    ac:8e:d0:40:e5:2e:d9:76:65:d2:2e:d2:66:1e:1b:
                    2a:74:a4:72:2a:67:9a:b1:12:96:b1:a5:c2:f5:bc:
                    d2:3f:a9:73:88:82:50:19:a0:f5:7e:06:ed:b1:90:
                    e2:49:06:20:e8:27:28:1d:13:03:b4:82:66:84:a6:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B3:1C:F2:F3:55:0B:14:27:67:36:AF:DC:FB:F3:C3:C3:8F:6F:EE
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/d5b7c224d3410ad50857b0ff82d400f068d32780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:4f:1b:ce:7b:5e:53:2d:fb:f0:f0:ab:0f:0f:5b:14:32:da:
         59:45:ad:28:f4:75:0d:4c:7f:52:b0:f9:0e:70:b3:58:74:68:
         18:ed:c3:b2:5d:7b:66:c7:b2:8d:ad:2c:79:51:ad:d3:d3:6a:
         63:6f:4e:64:39:a3:c6:2c:40:79:27:2a:0d:52:74:6a:da:7b:
         8a:bc:9b:72:d2:db:c4:2d:63:39:9e:d2:10:3e:ca:3f:b3:3a:
         82:e2:20:ea:21:f6:ac:71:aa:35:8f:35:6e:8f:e7:49:0e:8d:
         d9:cc:7f:4f:0e:25:1f:f5:8a:6b:bc:2d:f9:1a:5e:ca:af:8d:
         a4:88:ea:dd:f1:b7:7b:68:6a:f7:db:03:f1:71:dc:d2:98:63:
         bd:c3:41:bf:39:b8:da:93:d1:68:f1:57:be:5f:b2:bd:00:b1:
         a0:2b:6c:31:0e:61:18:2e:94:b6:63:45:15:b6:aa:5c:85:44:
         a8:de:fb:81:f4:71:3a:37:2f:b3:43:e5:93:9e:6a:22:2b:bf:
         f0:df:27:72:74:fe:ad:e1:7b:50:75:2a:04:82:45:c8:00:ab:
         da:5c:d6:7c:a9:bd:6a:a9:6b:b2:24:15:10:66:c0:51:1c:e2:
         be:cf:65:db:51:dd:5c:d7:8b:0d:ff:49:e1:f1:4c:1f:68:d1:
         41:3d:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org