Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/0b65b0581b5aa26585ab5a4ee21cc014400b8b9e.roa
File:                     0b65b0581b5aa26585ab5a4ee21cc014400b8b9e.roa (raw, json)
Hash identifier:          qFlquCQzjkeBiO2bRl8E26+2ImNK36P0qNxFg7fU0Wg=
Subject key identifier:   04:6D:CD:2F:04:C6:FB:EE:D8:85:D4:9C:87:D6:AA:94:9A:DC:2E:59
Certificate issuer:       /CN=e85efae22e3a2742c6ce22ce987058a023b76f56
Certificate serial:       1737F7
Authority key identifier: 0C:C2:EC:FC:9C:CA:AB:A8:B2:A6:E6:46:4D:C6:29:4E:67:60:C9:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e85efae22e3a2742c6ce22ce987058a023b76f56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/0b65b0581b5aa26585ab5a4ee21cc014400b8b9e.roa
Signing time:             Thu 03 Aug 2023 22:13:47 +0000
ROA not before:           Wed 02 Aug 2023 22:13:47 +0000
ROA not after:            Sun 03 Aug 2025 22:13:47 +0000
asID:                     265844
IP address blocks:        200.115.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521655 (0x1737f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85efae22e3a2742c6ce22ce987058a023b76f56
        Validity
            Not Before: Aug  2 22:13:47 2023 GMT
            Not After : Aug  3 22:13:47 2025 GMT
        Subject: CN=0b65b0581b5aa26585ab5a4ee21cc014400b8b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:d2:af:b8:27:e8:24:60:ea:89:8e:fa:78:
                    94:e9:ee:e0:3f:67:8f:7c:aa:47:ba:fd:fe:a6:02:
                    8c:72:42:f0:98:53:c9:36:cf:84:4d:6d:fc:2d:00:
                    a1:ba:3f:d6:fd:07:0a:fb:69:a5:02:d2:51:a4:f7:
                    e6:4e:02:1e:96:45:64:67:9c:17:80:9c:5b:b4:27:
                    70:53:60:00:69:6a:23:16:d7:93:3e:87:b7:2d:0d:
                    7b:08:41:1a:c1:18:2c:4d:b1:79:0d:5f:2d:dd:e3:
                    c5:2e:04:12:86:49:12:99:e1:5f:68:53:51:67:a0:
                    a6:cc:a8:60:a4:18:b5:95:1b:f9:dd:b9:2c:66:22:
                    24:f7:e4:2d:86:7d:1d:31:d4:44:8b:fa:0c:b9:06:
                    eb:49:59:e3:a9:3e:6b:cd:2a:47:16:03:1a:f3:a6:
                    90:73:9a:67:a5:af:4a:41:76:82:87:91:fc:ec:4f:
                    74:06:6b:24:55:aa:4a:35:36:c8:e7:c0:19:ba:89:
                    b1:a7:31:8c:b8:e5:df:b8:55:d2:9d:1a:25:cc:88:
                    e5:f0:b4:01:4d:90:d0:ed:f4:44:b3:fd:f4:fa:28:
                    a2:87:61:43:ac:58:ae:db:95:b7:fd:9d:71:ba:e4:
                    7e:13:af:41:5a:57:66:60:98:5c:33:fb:78:cb:8f:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6D:CD:2F:04:C6:FB:EE:D8:85:D4:9C:87:D6:AA:94:9A:DC:2E:59
            X509v3 Authority Key Identifier:
                keyid:0C:C2:EC:FC:9C:CA:AB:A8:B2:A6:E6:46:4D:C6:29:4E:67:60:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e85efae22e3a2742c6ce22ce987058a023b76f56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/0b65b0581b5aa26585ab5a4ee21cc014400b8b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/e85efae22e3a2742c6ce22ce987058a023b76f56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:0c:b1:5e:d4:97:6e:22:ae:87:52:74:90:d6:3d:6f:f3:71:
         28:81:97:19:00:d1:a5:53:9c:7f:57:8e:49:33:a8:6b:b3:af:
         dc:c3:39:e8:22:15:c6:31:d4:0e:2c:19:55:35:19:d9:8c:2f:
         69:a2:e1:b5:a2:8c:7e:e7:30:3d:bc:8c:60:98:61:50:8e:ce:
         8a:00:89:d2:18:d5:2a:26:21:88:a8:b9:e6:ec:53:f8:4b:bb:
         e5:03:23:7b:86:be:6a:91:c8:d6:7c:b4:2d:e5:56:5f:59:8a:
         6e:57:41:93:0f:92:b6:b7:98:f0:63:8d:80:c9:2b:64:0a:14:
         41:15:64:b5:db:3d:04:5c:7f:e2:51:c9:35:2e:13:fc:b6:9c:
         38:05:e2:3c:e1:a0:19:0a:d1:4e:45:2b:37:30:b8:ae:a0:1b:
         30:d5:ac:8e:a1:d8:54:e1:f0:4b:44:67:3a:d5:26:30:80:d5:
         7c:e6:3d:18:a4:ac:45:86:d3:50:3c:b5:76:a0:fe:0a:f8:26:
         6d:23:b5:5c:c5:64:62:7a:c4:7c:d2:b7:e0:7b:84:63:cd:e5:
         25:70:3f:83:7b:e5:e8:02:b6:59:6a:d0:17:83:5a:bb:fc:9b:
         3e:52:d0:bf:78:0a:6d:b8:f9:e6:74:8f:39:03:e0:ca:21:ab:
         f4:b4:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 23:46:21 2023 by rpki-client on console-fra.rpki-client.org