Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/b9875f1c3d21e9ae94dac7800d22e0c9ab1b1cc6.roa
File:                     b9875f1c3d21e9ae94dac7800d22e0c9ab1b1cc6.roa (raw, json)
Hash identifier:          Tl0/4BXTMdYUmxR/ubqduja8evt34T4xqAEtvZMvBoU=
Subject key identifier:   4F:F0:1F:C6:94:13:AA:22:33:41:A8:12:48:B3:8E:D9:AB:55:F8:F7
Certificate issuer:       /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial:       21A140
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/b9875f1c3d21e9ae94dac7800d22e0c9ab1b1cc6.roa
Signing time:             Sat 10 Jun 2023 01:49:34 +0000
ROA not before:           Fri 09 Jun 2023 01:49:34 +0000
ROA not after:            Tue 10 Jun 2025 01:49:34 +0000
asID:                     272913
IP address blocks:        200.85.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203968 (0x21a140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
        Validity
            Not Before: Jun  9 01:49:34 2023 GMT
            Not After : Jun 10 01:49:34 2025 GMT
        Subject: CN=b9875f1c3d21e9ae94dac7800d22e0c9ab1b1cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:a3:37:d2:d9:19:10:99:4e:0f:eb:2a:c9:
                    ee:aa:66:86:79:78:e1:f9:c7:d6:0e:83:3c:e2:2e:
                    58:e3:8a:02:06:84:85:28:5b:e1:d4:a3:a9:67:4c:
                    39:b8:bf:e5:c1:63:27:29:9b:dd:b0:8a:06:10:2e:
                    15:fb:1c:46:0d:46:29:9d:59:9d:8e:70:06:36:70:
                    6a:da:f1:3c:23:c3:17:88:8f:ce:84:d2:ce:f4:ca:
                    9f:78:84:54:33:14:ac:4b:de:31:5e:4c:3d:43:e8:
                    5f:02:fa:9e:64:77:f2:5a:b3:9c:e9:08:83:62:ff:
                    9e:0b:13:47:6e:85:7b:27:f8:5d:59:f1:cb:c2:01:
                    2e:ad:81:6c:1a:d7:c2:e3:66:bb:26:aa:6a:51:61:
                    ef:98:91:cf:06:5a:74:c1:26:1f:a0:af:c5:a9:d6:
                    fd:3d:76:07:9b:c8:27:15:79:94:d7:c2:9f:86:08:
                    30:2a:27:b5:c3:2d:31:d0:79:3e:08:05:df:61:cc:
                    61:01:6b:49:33:d0:f1:89:42:fe:49:54:67:a2:fe:
                    f5:22:65:11:9e:f9:36:fb:cc:e2:3c:a4:a5:d2:78:
                    a7:60:a6:f7:a2:db:0b:58:54:a4:3d:b5:97:58:7d:
                    e3:18:38:7b:13:b6:de:a6:82:a9:22:42:5d:e6:b4:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F0:1F:C6:94:13:AA:22:33:41:A8:12:48:B3:8E:D9:AB:55:F8:F7
            X509v3 Authority Key Identifier:
                keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/b9875f1c3d21e9ae94dac7800d22e0c9ab1b1cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:d1:6a:61:34:79:e0:31:55:9b:b7:1a:b6:74:d5:9f:51:
         ae:64:45:7e:85:05:04:05:42:e3:6f:7c:99:6a:fc:06:30:b1:
         6c:8c:c1:9b:d0:b6:65:9f:06:25:35:93:ad:61:3d:18:63:a0:
         e7:0a:96:49:6b:e3:3a:1b:89:c4:af:a9:8d:9e:31:d3:c6:1b:
         7e:bc:ab:ef:cd:47:d2:16:75:f4:f2:a6:45:db:06:21:48:b6:
         30:91:52:7c:a9:8c:49:b2:4b:8b:9a:a1:71:a5:80:1d:1a:f2:
         e7:a4:3e:2f:cf:17:a5:ef:1f:f7:27:8c:61:e9:62:bc:79:be:
         54:78:cf:b4:ca:e0:bd:4a:3b:45:07:47:5e:20:40:6b:0e:7c:
         09:38:2c:9f:57:ac:a7:27:b2:43:f2:38:b6:10:74:23:b4:89:
         e0:4c:d9:a2:87:ad:f3:fa:0c:ae:b3:e7:28:24:68:53:a5:f0:
         be:28:fd:b9:44:f8:38:59:87:a6:3c:82:48:eb:33:6a:a5:9c:
         82:fd:d2:03:2d:c0:c0:41:0a:ec:44:1c:d1:ae:10:e4:99:9d:
         3a:b3:52:28:ec:05:6f:82:84:d3:c5:d1:e7:41:ec:49:f0:40:
         27:3e:fc:06:ba:8a:a4:af:85:7c:75:b9:a5:b6:f1:6a:d5:1a:
         6d:68:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:14 2024 by rpki-client on console-fra.rpki-client.org