Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/cb78907708f1e99ba391d6a1ea247c5409bd9210.roa
File:                     cb78907708f1e99ba391d6a1ea247c5409bd9210.roa (raw, json)
Hash identifier:          kgAz797L3WZXz7GD7DorS27S/VX0TVGn6X8mEw+w120=
Subject key identifier:   7D:D1:6D:4D:14:91:E0:06:17:71:EA:D3:B2:79:F9:5F:1C:DA:ED:BE
Certificate issuer:       /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial:       1CA7B3
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/cb78907708f1e99ba391d6a1ea247c5409bd9210.roa
Signing time:             Sat 26 Nov 2022 01:43:53 +0000
ROA not before:           Fri 25 Nov 2022 01:42:35 +0000
ROA not after:            Tue 26 Nov 2024 01:42:35 +0000
asID:                     272913
IP address blocks:        200.85.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877939 (0x1ca7b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
        Validity
            Not Before: Nov 25 01:42:35 2022 GMT
            Not After : Nov 26 01:42:35 2024 GMT
        Subject: CN=cb78907708f1e99ba391d6a1ea247c5409bd9210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:72:7a:28:14:dd:42:c0:1b:49:0f:b7:94:
                    69:6c:0b:80:98:7a:6e:24:72:08:9d:77:f4:7c:5a:
                    51:99:9c:bb:14:95:0d:67:b9:3b:20:d5:64:a3:a6:
                    33:5b:d7:3c:03:71:6c:57:68:7f:43:93:a1:24:76:
                    82:36:49:b5:46:20:5f:57:04:df:fc:14:39:e9:f6:
                    84:ed:81:36:66:94:08:63:2b:cc:02:94:13:54:2b:
                    ff:ae:da:16:b7:ce:5a:3f:b8:08:a5:8a:e6:6a:38:
                    eb:71:62:4f:f9:33:ea:e7:cb:8a:55:9b:b3:4f:26:
                    82:fb:6b:df:0d:0f:b9:17:92:9d:db:55:f8:2d:50:
                    ea:1c:9e:b8:ee:a7:72:93:c9:f9:fe:76:52:6b:01:
                    36:cc:6b:a6:97:92:69:6a:f6:ae:d7:f5:07:f1:61:
                    1c:28:fe:a7:45:dc:5c:a8:5f:4c:67:a5:7c:a5:2f:
                    cb:ea:ba:c0:b7:76:fd:8b:55:5d:c0:ea:5c:29:57:
                    0a:68:da:08:5f:c3:08:79:d5:9b:10:5f:0e:39:c4:
                    d5:4e:3c:96:46:3c:86:a5:93:9f:f6:a8:4d:9d:27:
                    2c:1e:27:15:09:07:be:ab:ac:41:01:24:0e:10:13:
                    74:44:45:6a:2b:3a:92:b3:12:13:53:76:75:66:af:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D1:6D:4D:14:91:E0:06:17:71:EA:D3:B2:79:F9:5F:1C:DA:ED:BE
            X509v3 Authority Key Identifier:
                keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/cb78907708f1e99ba391d6a1ea247c5409bd9210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:2d:bb:22:9d:e1:ce:d8:f7:9f:ef:d1:15:52:8a:00:c5:
         02:79:b7:f1:0a:f3:fe:ae:5f:8d:b7:c3:07:53:4f:27:3a:e0:
         d4:e3:d5:cc:9c:bd:a4:0e:2a:86:89:0a:a8:f7:bb:0b:95:52:
         be:7c:35:c1:f1:08:ed:b7:a2:56:68:89:b6:6d:6f:db:7f:cc:
         db:9a:f0:28:6f:5e:1f:03:18:c2:a2:e4:87:f5:fc:48:20:a7:
         07:be:17:e0:d0:b5:8c:ff:aa:60:15:ec:fa:f3:57:3f:0f:86:
         dd:f0:46:60:29:59:79:50:1d:68:a2:d0:a0:6f:2a:05:55:e6:
         18:30:de:10:d0:5b:80:2f:0b:83:cf:3b:3b:27:38:4b:75:20:
         8a:57:3a:95:f7:9d:03:76:86:78:80:1a:ef:64:18:e2:68:3d:
         3b:e2:4c:18:73:e8:01:1f:df:6a:20:a6:d0:fc:cf:5c:10:cb:
         c4:a4:6f:fc:4a:fa:fa:02:0e:1f:ff:f2:71:d4:a1:52:0e:55:
         b4:34:73:c1:24:8f:87:e5:d5:48:f0:e2:70:7d:89:60:9c:96:
         14:4e:b8:de:ae:ff:86:fe:ae:4b:2f:0b:8c:fb:5a:ef:d7:3c:
         55:c5:c1:8b:cb:d7:3d:d3:63:7c:95:06:be:a4:5f:d3:17:1d:
         59:08:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:14 2024 by rpki-client on console-fra.rpki-client.org