Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/b8541a9ca38c9d0eaf9bedd3b55e8a7643dfeef9.roa
File:                     b8541a9ca38c9d0eaf9bedd3b55e8a7643dfeef9.roa (raw, json)
Hash identifier:          jVrdEzYnpHsJEzZ5LqH9VyNCjLrjbe+nOtrgopDeW34=
Subject key identifier:   1C:21:C4:8E:41:2A:DD:00:4A:08:C4:18:9E:C2:2E:58:56:3C:05:4E
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       223596
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/b8541a9ca38c9d0eaf9bedd3b55e8a7643dfeef9.roa
Signing time:             Wed 21 Jun 2023 08:30:01 +0000
ROA not before:           Tue 20 Jun 2023 08:30:01 +0000
ROA not after:            Thu 19 Jun 2025 08:30:01 +0000
asID:                     198949
IP address blocks:        200.93.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241942 (0x223596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Jun 20 08:30:01 2023 GMT
            Not After : Jun 19 08:30:01 2025 GMT
        Subject: CN=b8541a9ca38c9d0eaf9bedd3b55e8a7643dfeef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:14:6e:10:0d:e0:f5:29:85:f3:de:ab:17:
                    4d:39:de:5b:3c:54:d2:df:66:ee:f0:fd:5f:df:4d:
                    0a:a8:af:43:39:fd:bd:f7:44:ff:61:57:94:4a:3d:
                    bb:df:3d:29:3c:6e:13:dd:3f:9d:d6:d1:bb:2a:39:
                    b6:16:0c:23:b9:d4:0d:81:79:ec:d8:93:b4:af:01:
                    a5:f6:99:bb:63:3e:05:bc:f9:de:e3:06:97:c4:7f:
                    0f:3b:d8:75:fd:cc:6e:ff:aa:76:f3:c6:1c:b6:cb:
                    a0:77:72:46:75:c6:03:f7:8f:50:fc:6e:3b:8f:84:
                    d6:6b:92:e3:2b:bc:6f:2c:c6:be:2d:75:16:45:f3:
                    e3:3c:0e:42:57:79:d7:87:6c:90:f4:2a:49:79:d4:
                    ed:d3:04:20:78:c8:c6:ee:3d:c0:08:ab:fe:04:0a:
                    31:aa:fe:8d:ac:20:89:45:90:10:28:bc:a1:3b:33:
                    a7:30:ea:74:17:a8:3f:2c:34:4d:c1:26:fc:dc:18:
                    9d:4a:b1:4c:45:30:06:85:c5:60:45:95:61:1e:c0:
                    c6:46:aa:ad:dc:a7:d0:9b:de:e9:a1:13:89:6a:b3:
                    0e:7c:82:88:ab:fa:0c:27:e6:b1:4f:8d:3c:88:36:
                    58:73:d0:79:f1:1c:4b:9e:8c:a8:9d:be:64:3c:ab:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:C4:8E:41:2A:DD:00:4A:08:C4:18:9E:C2:2E:58:56:3C:05:4E
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/b8541a9ca38c9d0eaf9bedd3b55e8a7643dfeef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:52:de:3c:2a:b4:35:9f:21:e6:c5:1f:86:5b:5d:ef:25:96:
         ae:12:56:5f:a0:2c:64:08:5a:ba:5d:3e:61:dd:47:5b:c0:98:
         28:bd:18:c5:8e:d9:81:93:84:4a:68:84:9c:be:9b:1d:62:85:
         b6:e2:27:99:d2:4c:da:bd:ac:c6:4a:46:01:18:18:65:0c:1d:
         fe:93:a0:24:36:7e:ce:1c:cd:ab:2f:77:e9:b6:94:85:fd:ff:
         f3:39:d0:73:87:1f:1c:fa:92:b3:1d:39:fd:a4:bf:be:84:56:
         c1:ba:80:97:d2:4e:2a:d1:b2:6f:98:06:aa:ba:67:ba:bf:cf:
         3c:a8:97:6d:02:ae:5a:60:6c:f4:69:cc:ed:bb:44:4a:c7:fe:
         c3:13:f7:cf:df:e2:3a:9d:f0:06:15:20:6c:05:f4:1b:e3:4f:
         09:20:fa:5f:2d:ef:51:a0:a1:e4:a7:03:e1:b4:26:cb:a7:88:
         d0:3f:5a:41:7d:b3:af:b4:3e:a3:b8:4c:9e:39:6e:24:fe:01:
         80:c4:dd:da:78:d4:34:87:af:fe:ce:c2:a9:52:8d:2a:41:11:
         82:4b:22:6d:df:95:fc:a5:d9:af:21:2a:07:c6:08:07:0a:58:
         ae:47:32:50:e2:b5:61:93:d0:25:45:45:99:88:82:d2:56:bc:
         e7:6b:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org