Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/47a76d631165bb86ded48b894825a6b42d323393.roa
File:                     47a76d631165bb86ded48b894825a6b42d323393.roa (raw, json)
Hash identifier:          PjUslqePWDa6ovumElCAwcLTPiuwvXEevmLC1bLo5FA=
Subject key identifier:   F9:17:A0:72:8E:54:21:CA:A6:13:AD:F4:31:F0:28:4F:AC:EE:45:EB
Certificate issuer:       /CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
Certificate serial:       1E30AF
Authority key identifier: B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/47a76d631165bb86ded48b894825a6b42d323393.roa
Signing time:             Tue 04 Jul 2023 08:30:01 +0000
ROA not before:           Mon 03 Jul 2023 08:30:01 +0000
ROA not after:            Wed 02 Jul 2025 08:30:01 +0000
asID:                     269928
IP address blocks:        200.108.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978543 (0x1e30af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
        Validity
            Not Before: Jul  3 08:30:01 2023 GMT
            Not After : Jul  2 08:30:01 2025 GMT
        Subject: CN=47a76d631165bb86ded48b894825a6b42d323393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b3:eb:c1:2a:0d:b3:1c:e6:d8:3e:a2:69:83:
                    98:f0:70:0e:7c:c3:7e:ff:7e:ea:bc:81:62:0a:02:
                    97:58:17:8f:01:2a:25:e1:32:fd:91:fc:5d:15:b9:
                    5c:08:14:0e:d2:3f:76:35:68:0c:c1:c5:c0:95:a7:
                    12:8a:fb:98:60:52:d4:52:c2:6c:50:f0:f1:42:c7:
                    8e:2e:42:0f:53:da:5c:d2:2a:be:7b:47:74:7b:8f:
                    15:81:46:24:49:28:1a:af:4a:35:80:12:af:65:c9:
                    2f:05:8a:83:06:e9:7c:fe:ea:1d:36:24:e8:de:49:
                    be:56:db:4a:11:dc:2a:ff:02:76:6b:da:37:61:cb:
                    2e:16:6f:e3:ca:8e:df:97:ef:ba:15:db:84:f1:d7:
                    cd:45:73:3e:ff:62:6a:b0:7a:3f:42:0a:61:e9:71:
                    18:c1:6a:fa:90:62:bd:83:50:3c:32:c2:60:72:03:
                    54:87:fd:44:de:53:ac:db:5d:ce:64:19:ce:cc:19:
                    c0:44:50:87:2a:e5:1a:c6:f8:db:ef:2a:92:83:d8:
                    5c:ab:07:4d:1a:da:68:b3:8e:ee:86:40:46:32:b3:
                    e8:62:11:e4:ff:e6:84:4a:82:ee:b9:ac:22:f6:1a:
                    85:e1:76:9b:63:70:75:50:66:2b:5a:ff:2f:50:59:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:A0:72:8E:54:21:CA:A6:13:AD:F4:31:F0:28:4F:AC:EE:45:EB
            X509v3 Authority Key Identifier:
                keyid:B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/47a76d631165bb86ded48b894825a6b42d323393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:a1:18:02:16:40:7f:b4:6e:b2:8d:01:d2:85:d0:7f:c6:
         8c:06:84:fe:ed:47:2b:bb:f6:4d:ae:b7:77:4d:6c:fe:61:4c:
         a1:56:e7:ae:9f:c9:76:7b:4e:37:1f:6b:c2:28:a4:96:44:7f:
         67:a5:df:62:03:4b:6a:20:a5:82:63:88:7b:2e:58:68:76:35:
         e3:40:0f:f9:54:9b:bb:b0:eb:fa:ad:4b:8d:78:1c:c5:65:42:
         3f:fd:b0:0e:0f:92:5c:a7:c9:f5:c6:d1:25:75:80:b6:62:72:
         75:c2:51:7f:d0:36:af:44:86:46:68:bc:0c:f3:3c:7f:86:43:
         1f:06:4d:f2:75:a1:7a:9a:f5:c1:32:0c:01:c5:a4:eb:67:71:
         93:ac:95:12:d3:52:7d:2f:0e:e5:88:5c:ff:be:f3:ae:d7:9c:
         25:de:53:22:31:0c:bd:dd:f1:cf:44:df:cb:ce:ab:dd:8b:a6:
         0e:27:a0:2d:93:0e:af:97:fc:5d:2f:5c:de:b3:9d:19:51:a1:
         24:46:ec:33:cb:97:b3:e8:1f:3c:73:62:19:13:73:bc:37:63:
         45:ed:8d:fa:2a:76:66:c7:6c:60:e0:9f:9f:48:11:b2:21:23:
         26:24:ef:5a:f0:bc:f2:cf:1e:29:e6:1a:f6:2b:95:29:c1:3e:
         f1:2f:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org