Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/96716e51f25f42328faa8b685a531db76c804404.roa
File:                     96716e51f25f42328faa8b685a531db76c804404.roa (raw, json)
Hash identifier:          6+s3nCpxMtsX1rwrFdnFwsDdBLEQbkhw5K0+x2TpMtY=
Subject key identifier:   5F:E9:4F:EE:46:CB:C1:96:4C:2F:E9:B2:40:7C:33:0C:E9:FD:20:EE
Certificate issuer:       /CN=8174f9e0234527f23fb0bcfd7cea896897ec3191
Certificate serial:       11F58E
Authority key identifier: FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/96716e51f25f42328faa8b685a531db76c804404.roa
Signing time:             Sat 03 Feb 2024 07:30:00 +0000
ROA not before:           Sat 03 Feb 2024 07:30:00 +0000
ROA not after:            Mon 02 Feb 2026 07:30:00 +0000
asID:                     14339
IP address blocks:        200.47.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176974 (0x11f58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8174f9e0234527f23fb0bcfd7cea896897ec3191
        Validity
            Not Before: Feb  3 07:30:00 2024 GMT
            Not After : Feb  2 07:30:00 2026 GMT
        Subject: CN=96716e51f25f42328faa8b685a531db76c804404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:b5:44:82:c0:b6:9b:3a:3a:4f:d1:df:b0:
                    83:4f:e6:bb:11:47:1d:2a:95:f6:c1:70:3e:27:0f:
                    95:6b:db:60:84:57:b2:b9:79:c1:19:cd:6b:3b:3f:
                    39:7c:fb:56:c9:18:ec:61:5e:19:5d:4a:ed:97:41:
                    6d:e8:e0:f8:8c:af:b6:90:08:12:cd:bb:b0:d2:41:
                    dd:95:75:85:5e:67:4d:7c:87:19:11:0b:4e:a5:c8:
                    bd:22:c3:20:ee:f2:04:76:8e:73:0c:61:e8:96:54:
                    ef:c8:d9:6c:bb:d5:a9:99:11:bf:5d:45:36:97:f8:
                    c6:15:7e:0c:1c:49:08:36:f6:d7:df:0a:3f:44:36:
                    47:70:69:bd:21:13:5a:57:94:51:46:57:81:a6:a3:
                    45:1d:ed:32:60:d7:0e:7a:ab:7f:e9:7b:38:ec:22:
                    8f:02:1d:d2:82:a7:82:10:d1:bf:89:38:52:65:cf:
                    b6:9a:e7:06:5e:ad:a8:61:d0:f9:e1:77:65:ef:13:
                    81:79:30:73:e4:28:4c:d3:72:53:7c:3a:6b:dc:0e:
                    df:dc:43:96:54:ef:5b:42:a2:46:14:99:62:2b:30:
                    e6:1e:b3:11:99:28:0f:5c:50:99:19:39:0a:86:2c:
                    8c:1b:da:22:a0:2f:b6:92:6f:2a:d9:58:1d:41:5a:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:4F:EE:46:CB:C1:96:4C:2F:E9:B2:40:7C:33:0C:E9:FD:20:EE
            X509v3 Authority Key Identifier:
                keyid:FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/96716e51f25f42328faa8b685a531db76c804404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:cc:30:6d:0d:75:4e:55:ed:09:f5:69:af:26:28:fe:b8:
         f7:02:bd:62:a7:14:3a:f1:0c:b0:9d:e4:50:3e:01:2e:39:05:
         87:82:33:2a:78:88:6e:2f:eb:90:ad:8c:ad:ac:88:96:23:a0:
         a1:84:97:4d:5e:5d:1d:75:c2:41:b2:18:66:b3:a5:db:cb:d1:
         0e:61:59:c9:43:02:3d:c9:49:46:65:b1:7f:1b:47:ac:67:c4:
         af:ad:27:b7:ad:c4:fb:6c:59:96:73:3a:8d:b5:41:a4:43:b8:
         82:29:92:46:13:49:2c:46:4e:be:7b:9f:44:27:a8:7c:a8:74:
         6d:40:d5:a5:af:f7:59:3c:d4:0b:42:dc:04:2c:69:e0:b2:41:
         2a:4d:08:9e:f5:de:5c:d8:7c:90:ff:4b:b9:48:4a:57:17:59:
         35:e8:7b:3e:e8:38:ee:92:ad:07:e9:cb:21:8a:76:53:da:f1:
         b5:f8:7b:bc:e6:00:34:d1:1c:b3:49:68:0f:f1:2d:8e:53:4a:
         6b:55:98:20:e2:f6:63:14:60:12:25:cd:2d:eb:fb:81:1d:40:
         34:39:e2:4a:b5:38:fa:ca:3b:dc:3e:2c:90:1c:7b:5a:33:32:
         4c:2f:cf:20:a2:c6:a5:a5:94:07:9c:3b:9d:c8:60:93:c5:fa:
         46:2b:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org