Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9c49cfb0ec57da9e39017adb83cd553d6635f429.roa
File:                     9c49cfb0ec57da9e39017adb83cd553d6635f429.roa (raw, json)
Hash identifier:          esQGbI4y/Hs2JpIDcIgW+B6eWL6n69yddnDIRPITaFc=
Subject key identifier:   2E:16:7B:00:33:71:5A:03:E8:E9:99:30:91:F0:61:0F:E1:10:79:54
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24E993
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9c49cfb0ec57da9e39017adb83cd553d6635f429.roa
Signing time:             Tue 26 Sep 2023 17:12:56 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     198949
IP address blocks:        200.93.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419091 (0x24e993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=9c49cfb0ec57da9e39017adb83cd553d6635f429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:f6:83:65:03:da:63:da:e2:df:82:6c:3b:
                    fb:27:a6:b9:25:18:ee:4b:f7:d0:0b:b5:12:25:5c:
                    cd:f9:3f:9c:a2:49:1d:8b:65:bc:92:df:3b:c2:e9:
                    71:d9:4f:5d:2a:19:16:3c:6c:48:ee:4b:a4:91:a3:
                    68:d2:16:2e:3b:d9:14:39:25:8c:9f:05:24:b7:31:
                    a7:0b:80:32:e2:5e:b7:c5:a5:ed:84:af:f7:0d:1b:
                    8f:c9:6d:d7:17:ba:4a:c5:9e:ec:26:4d:a6:9b:c4:
                    c8:d1:d4:b7:15:d9:7c:5a:40:4c:65:da:74:8f:dc:
                    eb:53:88:27:87:58:f9:4c:24:b5:d9:8e:31:dc:de:
                    57:27:8f:bf:5b:79:99:a2:78:54:3c:9f:89:7d:e1:
                    9b:b0:17:58:5a:54:d7:eb:20:13:d9:52:03:23:88:
                    89:35:da:6a:b2:f7:80:47:98:4f:69:3b:e2:e8:83:
                    bf:b1:b4:d3:4d:07:a8:3d:e3:b5:f3:5f:8b:ef:2d:
                    53:96:e2:f4:3b:57:ee:3f:21:f0:19:17:7b:14:78:
                    e6:52:0f:90:bd:4d:74:37:c6:0d:91:54:7b:0f:b4:
                    ad:38:f5:8d:78:49:be:fd:ee:a7:63:ab:35:82:22:
                    83:85:0b:49:b6:3b:11:a4:96:f2:10:55:89:d1:12:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:16:7B:00:33:71:5A:03:E8:E9:99:30:91:F0:61:0F:E1:10:79:54
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/9c49cfb0ec57da9e39017adb83cd553d6635f429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:79:e0:a2:91:a4:d1:28:13:f0:a9:33:ab:70:99:83:7a:
         20:0c:38:da:75:f3:a3:af:67:54:f3:ab:5f:97:7a:22:c9:8f:
         be:d4:12:98:ac:19:78:1d:53:05:ef:ce:28:34:f6:c9:f4:d6:
         a6:96:08:96:2f:bd:e8:9d:95:4f:08:1c:27:7a:58:1d:90:b2:
         fa:a6:64:66:68:4c:63:12:98:4d:09:62:b1:33:04:30:21:e3:
         ae:a5:19:1f:b7:06:2f:66:1c:d8:2b:e0:a1:29:10:8b:57:57:
         2e:1e:40:2f:ad:39:57:dd:71:1f:0c:0b:68:b2:46:45:5b:77:
         2e:29:ef:ac:39:3c:66:69:d9:88:b0:63:29:be:1c:c4:e3:94:
         af:b5:a4:eb:11:85:91:b6:88:a9:2b:40:7f:75:43:0c:3b:5c:
         e1:3f:dc:99:45:7c:4a:15:fe:a2:02:95:4a:5f:ad:a9:6f:8d:
         3c:39:51:11:78:4c:a2:f2:64:17:95:51:9f:2a:fd:78:f4:de:
         52:02:d5:4e:9d:1c:6a:29:42:fa:18:0c:f7:88:34:4f:53:2c:
         17:42:f3:76:1c:65:a1:29:cc:61:e1:05:5b:9e:23:fd:16:8c:
         6f:f1:ff:b9:fb:60:83:65:9d:c2:33:bd:18:5c:38:9f:5e:f8:
         7e:7f:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org