Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/17afd418ba8b00845ef63d0e062604a2951dee0e.roa
File:                     17afd418ba8b00845ef63d0e062604a2951dee0e.roa (raw, json)
Hash identifier:          BNAOkAoCUv+HQgRU0aHvI2/KmPufivy6JsVyz0ipKBQ=
Subject key identifier:   F4:46:2E:7F:3B:DB:B2:8D:C5:7A:F4:ED:50:D3:9F:D6:88:B2:D3:FC
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       10467A
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/17afd418ba8b00845ef63d0e062604a2951dee0e.roa
Signing time:             Tue 22 Jun 2021 23:02:00 +0000
ROA not before:           Tue 22 Jun 2021 03:00:00 +0000
ROA not after:            Thu 22 Jun 2023 03:00:00 +0000
asID:                     198949
IP address blocks:        200.93.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066618 (0x10467a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Jun 22 03:00:00 2021 GMT
            Not After : Jun 22 03:00:00 2023 GMT
        Subject: CN=17afd418ba8b00845ef63d0e062604a2951dee0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:cb:be:f0:18:51:d2:4e:1b:57:d0:55:37:
                    e9:de:fa:65:ea:f0:30:d9:f8:34:a7:25:a2:d4:5f:
                    ea:40:1c:c2:8d:2a:20:c1:7e:23:4a:ba:4b:e2:5e:
                    d9:74:14:70:e8:a3:5b:29:3b:83:e8:d6:68:73:40:
                    6d:d2:d1:4c:4e:b6:9c:09:2f:95:48:e6:d3:c0:97:
                    93:09:3d:54:3f:a7:22:ea:5c:a8:c9:ca:0a:da:45:
                    df:01:56:ac:58:05:46:7b:f0:3e:2e:bf:54:b3:d8:
                    00:38:d7:6e:b9:fb:56:e8:ec:bc:c5:dd:16:ef:8d:
                    f3:03:a6:92:2d:9e:2a:31:f7:90:84:58:7f:cb:da:
                    d8:06:9d:4c:d7:c8:91:39:b0:24:51:b0:90:83:8d:
                    5e:49:b3:2e:92:bf:d6:c9:19:d2:3b:8c:76:25:7e:
                    18:46:47:fc:2f:45:5a:38:85:f4:28:93:a2:0e:2f:
                    eb:f4:dc:3e:b2:57:8a:3d:4a:95:cd:3a:5f:21:1d:
                    a8:13:43:56:1a:34:c3:ed:41:bd:b9:be:63:33:d7:
                    56:55:c9:0d:44:9b:9a:75:89:07:e3:c9:6b:7d:f3:
                    49:38:08:5a:6a:10:71:69:a3:cd:fa:67:4c:45:8f:
                    ee:c6:11:ca:61:f6:97:46:3c:96:9e:be:65:d5:ac:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:46:2E:7F:3B:DB:B2:8D:C5:7A:F4:ED:50:D3:9F:D6:88:B2:D3:FC
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/17afd418ba8b00845ef63d0e062604a2951dee0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:5d:15:1a:77:21:48:6c:1f:b3:50:8a:b3:1e:18:3c:a4:1c:
         ed:7b:f6:b5:ea:cb:12:43:4d:8e:39:3b:e3:dd:69:97:80:fe:
         c3:b5:22:72:c8:78:5e:7f:13:63:84:19:28:df:e5:5f:19:e5:
         75:27:43:1f:b2:fa:88:fb:e2:25:de:30:a6:0e:4d:a2:77:66:
         3e:38:32:74:4b:db:0b:19:83:4a:3d:4d:7f:01:04:35:e9:03:
         53:9e:1f:13:b6:8a:39:13:97:63:28:dc:ad:98:d5:dd:82:40:
         ed:48:4b:17:67:26:62:18:47:b1:71:5b:5c:85:7c:3c:1a:d3:
         fc:6c:74:6f:2b:ba:6a:50:ef:41:5b:b8:36:9d:67:05:4b:51:
         5b:c8:1c:be:58:4d:45:98:6d:19:61:0c:4d:09:5f:b3:bd:fd:
         74:cd:86:9c:60:79:27:ad:c7:99:17:07:7d:cb:42:f3:1e:d6:
         40:f3:3d:7c:4e:d4:32:3f:32:3a:60:81:fe:5b:c2:aa:a3:55:
         3b:bd:70:55:8a:d2:46:1e:d6:a2:79:fc:d5:73:ee:f2:64:59:
         49:14:7e:ad:f2:0b:96:06:1b:38:de:59:04:45:ae:36:9b:71:
         98:1f:17:56:e6:e4:d2:49:1c:ac:41:37:9c:a3:f9:0b:a1:06:
         30:9d:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org