Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/8ad589d9f1341e1166ff8b5cc2dfaffe9460d083.roa
File:                     8ad589d9f1341e1166ff8b5cc2dfaffe9460d083.roa (raw, json)
Hash identifier:          vkdJEJH1pN/vVsWmMxfkHuQu2oNgw2jSy209/URiLsA=
Subject key identifier:   34:92:F9:4C:73:5C:D1:84:B1:36:F2:DC:BE:06:0D:38:5E:E9:25:51
Certificate issuer:       /CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
Certificate serial:       0D82B3
Authority key identifier: CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/8ad589d9f1341e1166ff8b5cc2dfaffe9460d083.roa
Signing time:             Wed 24 Mar 2021 14:37:26 +0000
ROA not before:           Wed 24 Mar 2021 14:37:26 +0000
ROA not after:            Tue 24 Mar 2026 14:37:26 +0000
asID:                     263248
IP address blocks:        200.192.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885427 (0xd82b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
        Validity
            Not Before: Mar 24 14:37:26 2021 GMT
            Not After : Mar 24 14:37:26 2026 GMT
        Subject: CN=8ad589d9f1341e1166ff8b5cc2dfaffe9460d083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:df:82:85:c5:4b:43:50:eb:ac:ef:09:33:
                    2d:d3:65:d6:06:51:3d:2c:f2:4f:40:c1:39:57:ec:
                    85:d4:5d:19:4e:80:7b:d0:5d:91:80:4c:c6:a6:2e:
                    7e:1f:bf:d5:3b:0b:c4:76:73:0e:39:42:e1:44:bd:
                    28:22:e7:e6:77:a7:7f:b3:43:ba:05:ca:f8:b2:80:
                    b5:5d:f4:7c:3f:2f:3e:5f:f8:d4:32:fc:2b:28:97:
                    65:de:89:45:f1:1b:b3:7b:22:82:9a:95:87:04:5b:
                    48:fa:ac:dd:4c:d0:61:84:35:9c:df:74:52:ee:a1:
                    ea:bb:d4:11:a7:51:5c:49:0b:40:b3:56:14:f6:69:
                    c7:1a:9d:03:7e:82:65:d2:c6:9d:f6:74:82:20:84:
                    4a:0b:2c:bb:18:a7:c4:d2:09:44:da:06:06:0d:12:
                    0c:09:4e:cf:4a:57:0c:b5:04:b3:b2:a0:a2:10:a0:
                    9e:d4:c4:b0:c4:e6:9e:b5:98:58:54:f9:4d:84:f0:
                    3c:e1:bc:d6:e4:14:34:bb:55:dd:b3:81:10:20:33:
                    e3:78:e1:f1:be:60:ff:da:5d:7b:f3:0e:c9:12:42:
                    06:9a:5a:aa:7c:82:48:46:16:14:7f:e4:6f:25:3c:
                    c9:bb:4e:f1:39:b8:0f:94:1a:15:a8:99:5a:53:63:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:92:F9:4C:73:5C:D1:84:B1:36:F2:DC:BE:06:0D:38:5E:E9:25:51
            X509v3 Authority Key Identifier:
                keyid:CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/8ad589d9f1341e1166ff8b5cc2dfaffe9460d083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:06:b5:fd:8f:42:4e:7b:56:2e:ee:1b:a7:d6:85:7a:87:a2:
         a4:98:92:22:7c:ec:f2:24:26:55:c2:80:b5:76:51:eb:af:91:
         91:51:64:80:fa:58:bf:f4:63:38:79:06:07:b7:51:bb:c2:10:
         45:ab:98:ac:06:80:14:5e:a1:78:ae:01:c1:72:61:98:42:09:
         cd:18:ae:cd:f7:b7:24:00:15:8b:94:23:4e:3f:f8:c7:06:fe:
         d6:b7:83:8b:ae:32:12:16:03:f4:59:bf:af:2b:a9:fd:5e:9d:
         ef:88:85:c4:6a:dd:00:b1:4d:2d:af:7e:0a:06:f6:51:b2:d4:
         27:fe:2f:23:19:d8:8d:71:8d:d1:74:38:4c:7e:f0:28:ac:d1:
         ed:35:cf:cf:b7:a9:37:30:4d:2d:61:66:83:7f:8f:be:b9:36:
         97:61:2e:cd:88:48:29:1f:73:c7:c6:a5:cc:6a:8f:44:dc:07:
         00:6a:09:be:8e:08:ce:4f:ce:95:cc:83:a2:99:21:66:4e:29:
         c8:96:26:e2:6c:19:5a:ab:f6:1d:e0:3a:46:7a:ad:45:e5:fc:
         d8:d4:cd:a0:2a:f8:2f:bd:81:03:bb:b4:0e:7e:73:74:f6:e2:
         5f:63:92:67:75:8a:af:8e:60:94:f4:96:39:81:28:df:b9:42:
         2a:13:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org