Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/7d9c1538ad2b1d9cc27847d75026958eacae3ab4.roa
File:                     7d9c1538ad2b1d9cc27847d75026958eacae3ab4.roa (raw, json)
Hash identifier:          vmhbLmoeE0+O9TEg3A9shyi3d/FQgu6tayCH+o0P8ic=
Subject key identifier:   EF:B8:53:0C:5D:DB:E9:AE:8F:C7:9D:BC:1B:2D:66:0B:A7:66:63:A0
Certificate issuer:       /CN=324de8920173d39f7e57f07a22d818efa49b5475
Certificate serial:       029E
Authority key identifier: DB:87:53:92:F1:F6:36:60:C3:8D:0B:02:48:CF:61:31:D6:70:90:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/324de8920173d39f7e57f07a22d818efa49b5475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/7d9c1538ad2b1d9cc27847d75026958eacae3ab4.roa
Signing time:             Tue 18 May 2021 20:25:22 +0000
ROA not before:           Tue 18 May 2021 03:00:00 +0000
ROA not after:            Thu 18 May 2023 03:00:00 +0000
asID:                     262200
IP address blocks:        200.124.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324de8920173d39f7e57f07a22d818efa49b5475
        Validity
            Not Before: May 18 03:00:00 2021 GMT
            Not After : May 18 03:00:00 2023 GMT
        Subject: CN=7d9c1538ad2b1d9cc27847d75026958eacae3ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:d8:1f:a5:0a:46:d0:1b:70:6a:a7:25:41:
                    06:71:7b:03:4c:3d:cd:07:f4:2b:a6:7c:f5:0c:82:
                    e0:af:93:b8:2e:64:56:6a:eb:fd:2c:e3:2c:d2:ac:
                    39:f5:72:3e:e0:3c:0e:cf:f8:c1:76:11:5e:93:f7:
                    08:65:ab:d0:25:58:9a:78:51:9b:0b:28:33:86:b6:
                    3e:16:99:b3:aa:42:38:c7:02:95:22:6a:6c:4a:29:
                    1a:46:aa:ac:46:06:d5:19:cd:2f:01:17:fb:1e:be:
                    d4:41:49:66:9b:77:9d:93:2b:91:7e:1c:4a:cc:45:
                    a0:1d:10:18:02:7e:a3:07:02:39:76:b3:aa:61:83:
                    5c:2d:37:2c:18:b0:70:8a:d0:12:25:a2:06:b5:ae:
                    09:ec:22:28:6e:73:a8:48:64:b9:f7:67:2f:88:81:
                    2b:59:3b:93:0b:fd:50:9c:0c:22:98:c4:d9:8c:6b:
                    98:61:e9:2e:13:31:05:04:3c:7a:6a:fc:e3:37:10:
                    14:17:4e:94:44:6c:1e:aa:d0:02:f7:64:7e:4a:8c:
                    d7:2f:d0:51:5e:50:99:dd:b0:c0:97:20:9c:cf:82:
                    96:55:75:de:41:ff:0e:3f:a3:c8:b4:01:66:df:bd:
                    0f:2d:fe:78:c8:32:57:96:f5:f6:5b:82:84:84:5a:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B8:53:0C:5D:DB:E9:AE:8F:C7:9D:BC:1B:2D:66:0B:A7:66:63:A0
            X509v3 Authority Key Identifier:
                keyid:DB:87:53:92:F1:F6:36:60:C3:8D:0B:02:48:CF:61:31:D6:70:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/324de8920173d39f7e57f07a22d818efa49b5475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/7d9c1538ad2b1d9cc27847d75026958eacae3ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/324de8920173d39f7e57f07a22d818efa49b5475.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a9:e2:b2:8e:f8:0f:48:6f:01:aa:66:3c:3a:c3:4a:16:f1:
         2c:49:1e:b8:8e:c5:88:fb:4d:5e:71:1a:de:2b:1b:f9:5b:ae:
         d3:2c:bf:00:7e:f4:e0:11:d5:8e:a4:2d:ee:f8:fa:d4:1d:b0:
         04:47:0b:01:d4:4c:b1:2d:2f:ed:7b:a3:52:fc:4d:3e:73:31:
         07:01:de:07:7e:ab:71:56:45:7f:84:f5:de:66:f2:7a:1f:2a:
         76:66:00:95:d0:94:64:ab:d2:cd:c2:ea:5f:94:3b:6b:4e:1f:
         e2:95:51:ce:bb:89:4d:f2:78:89:a2:26:9f:7c:fc:be:14:4d:
         67:fa:59:10:73:19:fa:32:54:ea:6d:f8:2d:0a:96:93:d6:f1:
         76:fc:b5:b8:8a:0f:06:e2:7e:a7:89:a4:ce:d3:36:81:de:4f:
         2b:38:ea:33:54:77:1e:75:ec:04:ad:ca:52:85:21:49:db:ce:
         db:5e:3b:0a:e9:67:f4:9e:0b:fa:eb:42:a9:f4:8d:c6:0b:4e:
         ed:d1:3e:01:aa:72:06:83:94:a2:23:45:ef:ac:c2:7e:cc:2c:
         0d:c4:93:14:44:30:51:a5:04:30:f6:8e:0b:71:64:d4:09:0a:
         29:bc:e6:6d:a0:51:a6:ae:e9:f9:1f:0b:db:f4:08:4e:c8:6b:
         36:7d:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org