Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/df002ccce956d6d2aa0c57c786f2cc3d820b9965.roa
File:                     df002ccce956d6d2aa0c57c786f2cc3d820b9965.roa (raw, json)
Hash identifier:          AWXhdY6qYdSM3vF0drTGzTrOkJ1gk1EFszoBIwDgTJg=
Subject key identifier:   A9:B6:6C:8D:62:FD:40:01:E5:E9:A5:27:BB:00:39:E8:67:6F:F8:CD
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       170CCA
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/df002ccce956d6d2aa0c57c786f2cc3d820b9965.roa
Signing time:             Mon 11 Apr 2022 23:07:51 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     272043
IP address blocks:        200.25.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510602 (0x170cca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=df002ccce956d6d2aa0c57c786f2cc3d820b9965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:94:d1:1e:9a:37:7c:91:b5:40:17:1f:bb:79:
                    c8:37:ce:fe:29:4e:ff:80:97:8c:7d:51:f1:0e:03:
                    52:7c:7a:1b:3e:e4:d6:fd:1f:60:ac:8c:62:da:c8:
                    3d:87:3a:da:87:c6:b9:51:94:42:48:aa:3c:1b:cf:
                    ea:23:96:9d:41:42:d4:0c:e6:17:a1:a4:35:fd:73:
                    ad:c1:ae:c2:8a:a5:38:6d:c1:8c:05:04:6d:3c:c6:
                    ec:20:86:5a:4a:52:be:09:d7:b4:60:0f:c2:8a:e6:
                    31:80:c1:13:22:98:d8:61:01:b2:fd:b4:35:05:b1:
                    b0:a7:5b:2b:8e:68:5f:7c:33:2e:71:25:81:3d:f5:
                    36:f7:64:16:db:a5:db:c4:cc:5d:5c:60:e1:a0:9f:
                    26:3e:0e:fe:78:4b:c7:08:55:69:bd:8e:12:3f:52:
                    6a:1f:ed:98:e4:61:11:21:ee:37:a4:69:b2:74:07:
                    61:70:19:ee:01:01:9b:83:2a:da:c3:ab:3e:89:88:
                    54:d2:1a:0a:dd:e9:71:ea:9f:e4:c5:b9:31:18:5e:
                    8c:5a:22:f9:b9:12:4d:3f:47:f1:aa:7a:b5:2d:5f:
                    7d:20:0e:1d:c8:07:c1:b3:0d:97:9c:14:e0:5e:cc:
                    47:8c:b6:40:09:33:6e:f5:94:21:e0:37:dc:90:69:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:6C:8D:62:FD:40:01:E5:E9:A5:27:BB:00:39:E8:67:6F:F8:CD
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/df002ccce956d6d2aa0c57c786f2cc3d820b9965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:27:21:22:10:ca:41:ad:68:02:11:ab:9e:16:3b:5f:7f:f0:
         7c:d2:12:81:16:c7:db:8c:2d:ba:d6:10:9d:e1:ea:e4:97:29:
         80:76:8b:f3:61:df:6d:09:fd:16:cb:10:5f:4f:8a:48:c1:43:
         fd:75:1e:b4:01:46:f4:5b:82:fd:28:71:13:94:3a:3e:d6:f8:
         21:4d:97:13:d3:cd:5b:33:f9:93:3c:ac:e5:f4:6d:a2:75:01:
         8b:55:4f:b7:5d:e6:9d:98:66:d1:ba:58:66:fa:87:92:fe:46:
         eb:7f:40:0e:c7:22:a5:9e:4b:c4:21:fa:e4:73:90:1a:50:1c:
         d4:8c:f7:84:ae:1c:f0:ef:ff:58:87:a2:42:9e:97:cc:65:f6:
         68:a0:04:07:f8:95:f8:67:1d:f8:4a:66:9a:cb:f3:f1:eb:25:
         28:6a:02:31:73:3c:8b:f9:49:28:d1:b5:e8:a5:50:10:c3:f5:
         33:0e:91:30:22:67:9e:d0:c7:d0:7c:8e:4e:be:38:6e:b4:20:
         43:95:e3:66:0a:9c:29:33:08:0c:73:24:0a:df:66:ad:f6:54:
         b8:29:70:ca:32:3f:69:9a:1a:ed:5f:6a:e7:a7:d9:37:6a:ca:
         70:06:61:a3:2a:e8:47:84:ea:fc:8a:ef:87:73:41:49:82:8f:
         db:72:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org