Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6a39d033c0238a89d1fe90c94595e8d8fb1894e7.roa
File:                     6a39d033c0238a89d1fe90c94595e8d8fb1894e7.roa (raw, json)
Hash identifier:          UFmo52GTyP9KBQtZiplmpgEW+wpoWvABRNIqqcaedGY=
Subject key identifier:   09:94:9A:C6:A6:DE:2C:6B:78:C4:DC:3E:1D:3B:2B:BE:F8:B0:B7:4B
Certificate issuer:       /CN=893407337be5ac09529c27b6e17d4d0664581246
Certificate serial:       201E2C
Authority key identifier: 1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6a39d033c0238a89d1fe90c94595e8d8fb1894e7.roa
Signing time:             Tue 27 Jun 2023 21:50:41 +0000
ROA not before:           Mon 26 Jun 2023 21:50:41 +0000
ROA not after:            Fri 27 Jun 2025 21:50:41 +0000
asID:                     269781
IP address blocks:        200.108.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104876 (0x201e2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893407337be5ac09529c27b6e17d4d0664581246
        Validity
            Not Before: Jun 26 21:50:41 2023 GMT
            Not After : Jun 27 21:50:41 2025 GMT
        Subject: CN=6a39d033c0238a89d1fe90c94595e8d8fb1894e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:10:6b:87:fc:78:56:8f:e2:41:4f:73:4e:c6:
                    66:e5:55:82:89:31:02:44:a7:e1:2a:7c:a8:76:15:
                    33:ec:b7:6a:d9:f4:f2:9a:f7:73:e8:9b:f6:a7:e0:
                    02:ed:d1:fa:36:a3:66:e3:f2:a2:ce:ac:a9:b2:e3:
                    83:6a:e3:09:79:91:aa:9d:4d:e4:7c:dc:3a:e1:5b:
                    c0:4f:1f:46:ed:08:05:1e:3f:b9:f9:be:1b:68:7a:
                    b0:f6:e1:dc:56:73:8c:c0:f4:73:4e:2e:20:4d:65:
                    17:9f:b2:4d:0e:64:4a:18:54:6c:4f:36:08:ea:38:
                    9b:cb:6a:4f:04:d0:f2:7b:aa:ae:8f:95:a7:38:f7:
                    27:78:b0:de:19:98:18:5a:32:40:82:ea:56:53:02:
                    ef:ec:17:58:bf:20:6a:fa:e5:02:c5:29:e3:b3:42:
                    c0:38:c9:d3:80:fb:be:a5:60:35:90:8a:fe:38:b3:
                    69:a2:64:1d:4b:1b:6b:56:5d:b5:6c:91:09:2c:19:
                    b3:cf:fc:f9:30:71:25:83:0f:fb:06:7e:59:f1:8f:
                    b8:ac:cf:87:78:87:0c:5c:8b:36:ed:8b:19:30:a0:
                    0f:93:b3:49:23:91:ca:a9:f6:4c:08:f2:8a:a2:96:
                    56:c1:27:99:94:99:1b:71:ce:fe:be:5e:79:9d:07:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:94:9A:C6:A6:DE:2C:6B:78:C4:DC:3E:1D:3B:2B:BE:F8:B0:B7:4B
            X509v3 Authority Key Identifier:
                keyid:1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6a39d033c0238a89d1fe90c94595e8d8fb1894e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/893407337be5ac09529c27b6e17d4d0664581246.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:31:71:22:4b:12:b2:ea:44:a2:14:ba:a6:50:f9:aa:d8:d0:
         cb:8d:35:6d:28:bc:a0:5e:2d:5a:60:fd:6c:42:7b:1e:2b:fd:
         e5:33:f9:eb:c3:20:a6:95:f3:f1:82:3b:d5:d2:09:49:b5:90:
         c8:18:ad:ca:a5:90:dd:b4:f8:9f:a1:de:b5:f6:b2:ce:aa:ba:
         61:b8:f7:10:91:86:89:05:70:14:75:92:86:07:27:63:2f:3c:
         76:94:4b:2b:bc:e6:4f:1d:c9:72:ef:8b:bf:b1:4c:92:16:cc:
         9d:0c:53:41:66:47:f4:d8:3a:ee:b7:e1:5e:1e:48:93:01:d7:
         c1:b4:4f:c2:54:d3:11:cd:55:2c:5f:20:1c:cf:05:e6:f7:8f:
         cd:6e:d5:f3:20:80:71:a5:d3:49:60:7a:28:8a:8f:f8:5e:b8:
         8d:ef:b1:d7:c8:af:8d:be:31:54:2f:fd:42:16:0c:92:ae:14:
         06:2c:c7:a8:28:62:e4:cd:35:98:20:7d:4e:02:51:4e:7a:8d:
         91:c2:fd:29:82:00:16:ac:91:e9:84:cd:5e:5e:ea:fb:dc:e4:
         e5:0d:e8:ad:c3:01:92:87:ac:3a:75:de:da:cd:5c:75:65:01:
         70:cf:bc:f6:62:14:a3:1d:8a:1c:e6:61:7c:e8:58:3e:75:cf:
         f4:9b:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:20 2023 by rpki-client on console.sobornost.net