Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea477c64-f386-4a55-818f-345d482e9f98/e8dc898974a19b1a7b513435b78dc0e89d4bfc9d.roa
File:                     e8dc898974a19b1a7b513435b78dc0e89d4bfc9d.roa (raw, json)
Hash identifier:          A4IjUzlP+w9X/PtYf6Xswn0uS0ca14ISh6ZvfkDbraY=
Subject key identifier:   87:8B:77:2D:87:D7:D6:A9:53:CA:D0:AA:FB:AF:38:B8:AB:A9:94:2E
Certificate issuer:       /CN=5352cb9d9e8375d7694abf527699bfe585bc2cd5
Certificate serial:       0DC2
Authority key identifier: 12:AD:21:74:B4:3B:EA:A0:1B:B4:12:A5:05:72:6B:12:63:97:0D:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5352cb9d9e8375d7694abf527699bfe585bc2cd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea477c64-f386-4a55-818f-345d482e9f98/e8dc898974a19b1a7b513435b78dc0e89d4bfc9d.roa
Signing time:             Tue 10 May 2022 20:20:33 +0000
ROA not before:           Mon 09 May 2022 03:00:00 +0000
ROA not after:            Fri 10 May 2024 03:00:00 +0000
asID:                     265504
IP address blocks:        200.23.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3522 (0xdc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5352cb9d9e8375d7694abf527699bfe585bc2cd5
        Validity
            Not Before: May  9 03:00:00 2022 GMT
            Not After : May 10 03:00:00 2024 GMT
        Subject: CN=e8dc898974a19b1a7b513435b78dc0e89d4bfc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:f6:50:17:2e:b6:11:0f:eb:63:06:0d:3b:
                    86:04:0e:10:92:db:67:25:a7:95:06:61:e9:d6:91:
                    2b:19:06:b5:c7:e1:a8:87:d5:6f:4c:5d:26:54:1d:
                    66:c8:a3:1b:4f:97:16:b4:3c:a2:f1:d6:37:61:9f:
                    fb:bd:f6:dd:fd:5f:3a:0f:f3:24:09:ed:cd:19:be:
                    a8:2b:96:11:b4:f0:82:4d:d7:a9:c2:e0:09:01:35:
                    de:07:b3:26:68:36:dd:a0:21:2b:68:9b:1a:bb:fb:
                    c2:7f:f0:7d:5d:e5:ae:1a:c0:27:bc:da:5c:a1:54:
                    fc:dc:34:0e:3c:d3:90:0c:93:7f:c3:95:e1:8d:ca:
                    99:39:ee:e5:aa:ff:bf:35:c8:a9:c9:f9:87:ed:d3:
                    c9:13:db:dd:d8:b3:da:9a:7a:17:30:9c:09:ef:55:
                    57:29:74:a4:fe:1b:cb:7f:9c:cd:8b:07:09:66:29:
                    7d:50:88:5f:1f:e2:3c:05:75:c6:37:bc:a9:f0:49:
                    9c:24:c4:cf:57:7e:3e:6c:06:58:d9:1e:bc:51:b2:
                    08:a5:c8:51:3d:bb:19:e2:dc:dc:b5:54:ec:29:7b:
                    bb:d4:9a:e1:35:65:2f:c5:4c:8c:f7:f0:c2:3a:00:
                    f8:d7:3c:2c:ee:b4:ab:0c:96:82:46:4a:56:da:cf:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8B:77:2D:87:D7:D6:A9:53:CA:D0:AA:FB:AF:38:B8:AB:A9:94:2E
            X509v3 Authority Key Identifier:
                keyid:12:AD:21:74:B4:3B:EA:A0:1B:B4:12:A5:05:72:6B:12:63:97:0D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5352cb9d9e8375d7694abf527699bfe585bc2cd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea477c64-f386-4a55-818f-345d482e9f98/e8dc898974a19b1a7b513435b78dc0e89d4bfc9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea477c64-f386-4a55-818f-345d482e9f98/5352cb9d9e8375d7694abf527699bfe585bc2cd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:bf:92:28:80:ad:1b:d3:c8:d5:47:bc:29:19:41:79:51:43:
         8e:9c:76:e2:94:6f:4b:e0:f9:02:c8:75:18:48:71:e4:54:6b:
         bf:3f:05:2b:b4:a6:1a:61:27:8e:98:72:54:8e:ea:00:93:c1:
         30:0e:08:75:68:b3:6f:5c:a0:d2:da:8f:9a:cc:f3:b5:0e:85:
         37:a1:5d:02:e6:53:59:96:af:96:7b:c1:61:6f:4b:47:2e:f3:
         8d:90:ba:e1:88:d2:f9:0d:43:4e:39:84:f5:e3:82:aa:b5:5a:
         b7:db:3d:dd:0b:60:98:05:0c:69:15:7b:61:ac:a2:fb:c6:00:
         88:c6:d8:11:e5:85:6f:4d:4f:ca:12:ca:e9:4a:53:c2:fc:a0:
         d6:a8:75:01:2b:08:55:77:56:49:4c:3b:06:eb:c8:b4:1b:5c:
         38:3f:9a:10:84:f4:c6:2a:05:5e:ab:de:ed:89:1b:e4:07:5b:
         01:2e:36:99:ac:d4:4e:ae:fe:a3:28:2a:d5:66:b3:0d:a5:22:
         d0:1e:c1:91:fa:a1:20:f5:58:d8:dd:21:9d:64:2f:fd:e8:d5:
         f8:f8:92:55:d3:95:a1:fc:75:82:fb:df:ef:47:42:d9:2e:f6:
         d6:c0:06:0c:07:f2:e1:fb:e7:58:f5:10:e0:2b:41:f4:c7:c4:
         5d:50:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org