Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/4449c150fa99b141d768e0ba38cfe02b894f1d5d.roa
File:                     4449c150fa99b141d768e0ba38cfe02b894f1d5d.roa (raw, json)
Hash identifier:          AQNRcnQqvMi/V/DU/pRSEIHBDD7ICk8G9uLFSX7zgU8=
Subject key identifier:   83:F8:0D:F6:39:DF:A9:99:D5:58:B2:F1:8B:DE:40:B1:18:43:81:0B
Certificate issuer:       /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial:       0EA4BF
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/4449c150fa99b141d768e0ba38cfe02b894f1d5d.roa
Signing time:             Tue 04 May 2021 22:26:58 +0000
ROA not before:           Wed 28 Apr 2021 03:00:00 +0000
ROA not after:            Fri 28 Apr 2023 03:00:00 +0000
asID:                     211397
IP address blocks:        200.85.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959679 (0xea4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
        Validity
            Not Before: Apr 28 03:00:00 2021 GMT
            Not After : Apr 28 03:00:00 2023 GMT
        Subject: CN=4449c150fa99b141d768e0ba38cfe02b894f1d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ca:bb:9c:7c:a4:15:45:a9:8b:ab:55:4c:52:
                    de:a3:d9:6c:0f:cb:3c:02:f5:e1:fd:46:cd:ab:a1:
                    55:16:7a:df:b4:06:fb:86:67:4e:2f:a2:18:6a:9b:
                    13:7d:7f:64:04:bc:65:f0:30:1c:96:77:d5:57:a3:
                    bf:30:38:d8:2f:cf:7e:d2:15:4d:94:50:15:46:0f:
                    66:0b:91:2b:80:4b:d1:e1:30:23:15:5a:b0:b2:4a:
                    ff:c2:90:54:56:bd:bd:fa:57:60:53:26:21:c1:d1:
                    bc:7a:9e:07:cf:8c:11:45:83:ad:30:9a:39:21:04:
                    5f:7b:eb:d8:26:ce:5a:47:10:75:96:4f:e6:1b:d6:
                    d0:e0:60:57:b1:38:95:59:08:54:e9:b7:57:97:a8:
                    bd:89:e7:48:22:8d:60:1d:29:c9:8f:bf:33:0c:1c:
                    57:78:aa:4f:f0:6f:e3:77:c3:88:96:6b:8f:4c:71:
                    6f:2e:ef:86:78:10:c5:ec:31:fd:bf:03:fe:5c:3e:
                    aa:4b:9c:db:ac:49:fb:18:94:88:34:bf:f6:98:7b:
                    5c:38:16:02:c9:ae:22:a8:a5:b2:c0:a6:2a:7a:b1:
                    b9:64:b6:cd:55:67:60:db:14:6e:70:da:e7:07:bb:
                    43:21:f6:fe:b9:e1:27:c3:82:10:0f:05:27:9e:bb:
                    14:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:0D:F6:39:DF:A9:99:D5:58:B2:F1:8B:DE:40:B1:18:43:81:0B
            X509v3 Authority Key Identifier:
                keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/4449c150fa99b141d768e0ba38cfe02b894f1d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:01:21:70:53:6d:2c:e4:4d:91:d5:36:99:e9:1d:5a:d9:
         a1:9d:3f:26:bd:3e:26:45:9f:59:38:ad:cb:86:a8:29:a6:76:
         1c:12:1f:d1:a2:a5:dd:ac:26:27:36:0d:99:89:f4:00:d9:3a:
         cd:58:9a:1c:32:3c:29:ce:ec:0e:04:ab:79:f7:ae:2c:96:d7:
         f5:12:c0:9e:5e:9d:85:9d:85:71:07:29:cb:d6:b3:ac:35:6c:
         5a:7f:7d:2c:ae:28:a4:e4:3c:62:5b:5f:5f:b5:2b:95:93:c7:
         d7:c9:90:12:b8:b4:c0:d2:04:15:57:41:bf:a3:36:3b:96:90:
         0a:82:60:c1:99:89:54:ac:ff:86:d8:2b:85:20:b5:33:6e:05:
         75:09:6e:4c:c2:b1:97:0a:32:61:1e:e8:c8:20:3f:cd:ba:41:
         bd:e8:95:42:ad:b1:97:7c:83:e6:25:3a:7b:bc:02:8e:7b:55:
         5c:f3:db:ab:cf:20:f4:5b:f2:00:5e:af:66:4f:68:98:27:4d:
         f8:d8:25:5c:8e:f3:07:d6:f1:d0:0b:ab:f4:bf:29:86:c2:f2:
         35:e7:8e:e5:29:0b:74:a7:b8:9e:eb:09:15:ee:24:89:a0:6d:
         9f:e2:c8:b2:b9:3c:4e:07:ed:bf:ec:69:19:8d:e0:7d:ca:48:
         e8:f0:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org