Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/3c9a63040c1f6ed461c4fd43e613ba26391170e0.roa
File:                     3c9a63040c1f6ed461c4fd43e613ba26391170e0.roa (raw, json)
Hash identifier:          LgZ1gLq3nZdpHKMBNxs68HrbNBGQCRrbl+q6O6nW0IA=
Subject key identifier:   63:E9:57:AF:16:5E:7F:A5:8B:80:37:B1:B1:CA:17:76:B1:81:51:8B
Certificate issuer:       /CN=893407337be5ac09529c27b6e17d4d0664581246
Certificate serial:       200582
Authority key identifier: 1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/3c9a63040c1f6ed461c4fd43e613ba26391170e0.roa
Signing time:             Tue 27 Jun 2023 21:38:12 +0000
ROA not before:           Mon 26 Jun 2023 21:38:12 +0000
ROA not after:            Fri 27 Jun 2025 21:38:12 +0000
asID:                     26593
IP address blocks:        200.108.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098562 (0x200582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893407337be5ac09529c27b6e17d4d0664581246
        Validity
            Not Before: Jun 26 21:38:12 2023 GMT
            Not After : Jun 27 21:38:12 2025 GMT
        Subject: CN=3c9a63040c1f6ed461c4fd43e613ba26391170e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:d5:03:94:41:b9:78:47:41:d2:5a:98:cd:
                    1a:f1:dd:40:3f:6e:54:7f:ae:7b:76:c0:61:e2:b3:
                    f7:3e:67:5c:d2:a3:be:b7:4b:6f:ea:a9:5d:83:cc:
                    68:7f:df:97:5a:c1:9e:4c:69:2c:a2:8d:ad:01:bd:
                    cb:42:85:3b:9e:eb:4a:86:f6:45:98:86:b3:10:13:
                    74:e9:f5:71:75:d2:29:29:a0:e2:e9:d5:b4:a4:76:
                    65:c5:19:f2:bf:2f:44:69:07:85:20:58:db:a6:5e:
                    ed:92:4a:01:41:d7:2a:b6:af:6f:33:47:1f:dd:d2:
                    26:ae:dd:50:54:92:fd:c7:be:a5:ed:c8:fc:a6:48:
                    7d:db:d9:9c:f8:8f:d1:7d:5d:ce:d0:9b:93:45:0d:
                    64:e2:c4:b7:87:f1:fe:21:ae:e8:f2:34:4d:28:af:
                    ac:98:4f:84:c7:56:a9:1c:4c:34:d7:73:e0:7b:2b:
                    0d:f4:e8:bc:ec:05:5c:b4:43:59:29:f5:75:d8:cf:
                    30:37:ef:5c:3a:66:3f:95:72:9a:b8:e6:e8:e4:b4:
                    19:7d:ca:b5:4b:c9:c1:5c:72:86:57:a4:65:f8:c2:
                    cb:1a:e7:10:7c:74:f4:11:86:ac:61:ee:77:75:3b:
                    a6:f1:a2:3e:0b:e6:12:df:d7:b8:3f:ad:11:3f:61:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E9:57:AF:16:5E:7F:A5:8B:80:37:B1:B1:CA:17:76:B1:81:51:8B
            X509v3 Authority Key Identifier:
                keyid:1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/3c9a63040c1f6ed461c4fd43e613ba26391170e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/893407337be5ac09529c27b6e17d4d0664581246.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:a6:3c:26:1c:13:fd:84:a7:7f:ff:ce:ea:94:80:ad:4d:
         7e:d2:49:9d:eb:3a:2b:0d:01:f9:ad:1f:b1:24:63:67:a1:b9:
         59:84:5c:6d:c1:31:29:25:8a:5b:de:80:71:89:b7:e9:34:5d:
         a0:64:c3:9a:b2:af:16:d5:3c:1c:4e:e3:ff:7e:4b:da:bd:dd:
         bd:10:92:35:22:7e:b0:6a:35:3d:ab:49:f4:a6:a6:f1:b0:8a:
         91:d3:c2:e6:e3:c1:0c:7a:cb:43:d2:4f:c1:02:b6:ea:a1:0c:
         69:eb:92:89:47:c7:81:4a:94:50:c0:ba:ec:9e:f7:ea:aa:da:
         a2:6a:62:32:1c:02:3b:5a:43:06:a2:ad:1b:c9:5a:f4:11:18:
         36:0e:f9:b4:89:ff:32:89:60:fa:5a:ab:83:80:16:cd:ed:f6:
         e3:0c:2d:08:4a:3f:3e:f4:86:e8:28:e0:1b:70:f3:c1:ca:8b:
         50:59:c3:27:14:80:ac:4c:8b:a0:a5:1f:3d:23:30:f1:26:9d:
         0e:8b:8c:45:77:1f:fe:cb:37:34:50:df:85:1e:bb:d2:78:0d:
         db:9b:85:d5:5b:f2:93:f9:a4:09:98:17:48:e3:b5:20:02:fe:
         f9:29:fb:73:22:54:a1:93:a9:50:16:ef:87:ab:af:c3:98:fc:
         80:75:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:20 2023 by rpki-client on console.sobornost.net