Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/519a97e280451c6f3e66b2abecd516f66e544b1d.roa
File:                     519a97e280451c6f3e66b2abecd516f66e544b1d.roa (raw, json)
Hash identifier:          /tEz/gymzmkiIl+Ejf9g4ofWjxWBlgZVcqGud27Noh4=
Subject key identifier:   FB:90:C6:63:92:DF:9E:FF:FA:9A:20:14:B4:5D:83:37:30:80:9F:D3
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       216467
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/519a97e280451c6f3e66b2abecd516f66e544b1d.roa
Signing time:             Mon 12 Jun 2023 23:46:41 +0000
ROA not before:           Sun 11 Jun 2023 23:46:39 +0000
ROA not after:            Thu 12 Jun 2025 23:46:39 +0000
asID:                     52262
IP address blocks:        200.106.237.0/24 maxlen: 24
                          200.106.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188391 (0x216467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: Jun 11 23:46:39 2023 GMT
            Not After : Jun 12 23:46:39 2025 GMT
        Subject: CN=519a97e280451c6f3e66b2abecd516f66e544b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:7b:c9:e0:34:d6:2a:64:b3:cf:a4:78:a8:
                    84:28:4c:9b:c0:84:b1:bf:86:75:65:35:6c:41:5b:
                    ad:c6:3f:62:7c:1b:ce:ff:05:28:45:31:e3:ce:9a:
                    96:65:29:07:bf:9f:00:33:89:be:83:02:ab:1f:b0:
                    b7:b8:4f:60:ba:bb:1f:41:66:52:c1:89:1d:5d:89:
                    ae:2f:c4:a7:2f:f5:2d:b0:22:00:14:b2:44:39:39:
                    94:fd:68:b4:55:78:a5:a4:18:9e:62:00:e5:0c:60:
                    f4:d0:b4:07:47:2c:b1:d4:0a:65:ac:cb:ba:a5:62:
                    2f:71:6d:d4:b5:bf:a9:6f:8d:5e:b4:d5:b4:04:c4:
                    84:0a:bc:b1:0b:2b:ce:91:24:16:96:80:d5:56:50:
                    d3:cd:a9:57:8b:48:a4:9a:3e:83:e7:42:cb:41:07:
                    89:21:f5:91:bc:84:33:3e:a8:45:2d:c9:a8:0f:57:
                    f3:ed:70:de:57:a8:c0:f4:68:3e:51:da:26:0d:79:
                    99:1d:03:c5:4b:58:2f:10:e8:76:5c:db:5a:37:da:
                    0c:bb:17:1e:9c:4b:2f:30:7f:5a:70:b0:1b:01:9d:
                    37:33:61:95:f9:e1:e6:0e:07:fe:b1:8f:85:33:6b:
                    cb:76:56:ba:03:53:c4:69:e0:ac:a2:33:3e:86:18:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:90:C6:63:92:DF:9E:FF:FA:9A:20:14:B4:5D:83:37:30:80:9F:D3
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/519a97e280451c6f3e66b2abecd516f66e544b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.237.0-200.106.238.255

    Signature Algorithm: sha256WithRSAEncryption
         7e:e7:42:ad:f6:82:ff:ca:99:2a:0c:98:f7:22:ff:6c:81:db:
         c3:15:cc:22:22:d6:d5:c9:3a:51:99:f0:ae:29:c2:e5:ed:b0:
         90:74:7b:af:3e:5f:b7:29:c6:d7:a9:5b:7e:d3:0b:78:be:fd:
         31:ff:6c:0d:de:50:f4:fd:32:6e:39:d1:7c:aa:5a:9d:22:54:
         68:38:7f:b9:76:1f:46:0c:19:75:58:72:22:45:c7:38:93:f1:
         10:a0:ec:e4:ac:2e:87:4c:3d:ac:48:6b:8c:02:0c:ce:5e:07:
         23:68:72:bc:48:7c:e9:b2:91:57:a2:59:34:ca:14:42:e0:34:
         b0:d4:3b:cf:30:d4:c2:8d:46:e4:70:20:fd:f5:4a:81:ca:1a:
         41:5d:dd:34:d1:40:db:c0:72:66:ac:eb:6c:ed:fc:8b:ca:89:
         4b:14:87:66:59:53:89:32:6f:6a:09:4c:e5:74:76:32:39:33:
         73:bc:77:b1:cb:6c:df:57:be:6b:22:5c:a0:2b:25:ba:65:d6:
         86:87:b4:5c:e4:e2:fc:3e:96:1f:e7:89:f1:bd:68:5f:8c:3b:
         1c:6b:d5:f9:49:8a:1b:57:d1:d9:18:3d:d4:c9:7d:db:d6:e8:
         ea:a7:04:1c:ad:53:4f:8a:cb:1f:da:b8:8e:4b:82:71:14:71:
         ee:5c:fb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org