Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/6da75a2daeb4b73ad4784ae7b124c6e0ba369701.roa
File:                     6da75a2daeb4b73ad4784ae7b124c6e0ba369701.roa (raw, json)
Hash identifier:          CCWDrj1idGhQ6DTLAtCzEle3AM3ue+i9p9X/J1DCsfM=
Subject key identifier:   F5:58:E4:30:C2:A8:BE:19:46:C7:C9:B0:CB:35:40:63:00:DE:48:3C
Certificate issuer:       /CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
Certificate serial:       1EB988
Authority key identifier: B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/6da75a2daeb4b73ad4784ae7b124c6e0ba369701.roa
Signing time:             Mon 24 Jul 2023 08:30:00 +0000
ROA not before:           Sun 23 Jul 2023 08:30:00 +0000
ROA not after:            Tue 22 Jul 2025 08:30:00 +0000
asID:                     269928
IP address blocks:        200.108.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013576 (0x1eb988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
        Validity
            Not Before: Jul 23 08:30:00 2023 GMT
            Not After : Jul 22 08:30:00 2025 GMT
        Subject: CN=6da75a2daeb4b73ad4784ae7b124c6e0ba369701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:29:34:03:88:fe:82:ed:d7:ff:e0:d4:98:
                    4d:50:22:b3:45:3b:c5:28:25:0e:5f:5b:27:2f:25:
                    ad:01:6b:82:ed:7a:79:d1:5a:c9:03:2d:e3:fe:40:
                    8b:67:b1:fb:dd:0b:7f:ac:3b:fc:e5:25:60:7d:ad:
                    d9:49:43:9e:1a:f7:13:46:e9:10:ed:97:8d:1e:d7:
                    fc:35:15:4b:c6:61:11:64:01:68:6f:b5:b1:b6:e6:
                    42:2e:bd:40:6d:c9:ae:19:c3:00:d4:8a:ab:86:b6:
                    4d:c2:54:95:80:38:6c:c7:11:29:52:61:47:5b:97:
                    88:a1:76:b4:72:2e:90:e6:7a:58:eb:d4:d4:32:51:
                    68:0f:af:4b:7f:a1:f0:35:f2:00:ee:8a:ef:65:38:
                    a4:1d:f3:dc:86:66:e8:16:11:de:ee:32:39:64:31:
                    3d:b6:73:3b:dd:fd:1d:99:55:16:3b:06:96:b8:30:
                    90:7f:64:4d:84:84:b3:fe:29:14:99:64:90:87:99:
                    2d:af:8e:4b:c5:08:0c:06:f1:0f:a7:ad:c5:3c:84:
                    a2:ab:21:f9:79:d3:08:c5:b9:69:39:8d:2a:c9:f5:
                    a2:8c:dc:a4:8e:cb:66:d4:38:1a:39:18:ea:c3:11:
                    f1:6c:42:32:69:1d:d1:0c:72:0a:17:02:5f:36:2d:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:58:E4:30:C2:A8:BE:19:46:C7:C9:B0:CB:35:40:63:00:DE:48:3C
            X509v3 Authority Key Identifier:
                keyid:B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/6da75a2daeb4b73ad4784ae7b124c6e0ba369701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:69:d0:a7:e0:a0:41:7e:97:f3:ce:d4:7c:67:22:87:50:d5:
         af:03:67:e6:f0:00:d4:09:1b:ed:1e:99:9c:6f:03:3f:01:2a:
         eb:15:a3:dd:07:68:88:79:74:4e:29:3d:36:bc:e4:08:e6:bb:
         db:bc:e5:ae:ae:6a:74:1b:1b:cc:a4:a2:ea:5b:a4:f2:db:48:
         db:4a:9c:db:e0:41:aa:56:bb:c5:35:45:e4:72:02:73:65:19:
         0a:a3:d9:38:5c:be:f4:26:44:00:6a:c1:20:eb:11:e1:c4:6b:
         9d:ba:a1:da:ba:f0:56:61:9f:d9:ee:2b:49:b8:33:c9:b0:bb:
         00:66:4f:26:b6:43:96:9a:7f:e0:41:91:f3:f9:81:7b:a7:3b:
         46:d7:31:b9:9d:ab:4a:91:eb:80:8f:57:e2:48:7f:c2:42:bb:
         db:cf:b0:75:0e:a4:7b:74:88:88:bb:82:1a:75:bd:ba:80:60:
         65:5a:08:41:11:12:fd:bb:6d:0a:d6:86:bc:75:9c:16:28:88:
         a4:40:82:80:e4:58:60:a0:f9:d6:b7:2c:b4:0c:97:68:e6:b8:
         36:a5:f5:74:3a:90:d1:d8:72:fd:d5:11:fc:a9:59:97:8d:85:
         a4:e5:b7:27:d0:13:7e:17:e6:30:52:4d:ba:b2:74:07:5e:7c:
         fb:bd:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org