Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/a786521ec644359cb718ff1f98dd1272b2f57238.roa
File:                     a786521ec644359cb718ff1f98dd1272b2f57238.roa (raw, json)
Hash identifier:          gdtr19WUW5YJZdf1EO7oWhuc/Gb5znqyFw9CyD1Ljac=
Subject key identifier:   1A:CE:54:69:19:33:29:13:9A:EC:E5:6A:D9:70:8C:32:00:13:27:5F
Certificate issuer:       /CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
Certificate serial:       162E14
Authority key identifier: A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/a786521ec644359cb718ff1f98dd1272b2f57238.roa
Signing time:             Wed 23 Mar 2022 08:30:00 +0000
ROA not before:           Wed 23 Mar 2022 08:30:00 +0000
ROA not after:            Fri 22 Mar 2024 08:30:00 +0000
asID:                     19114
IP address blocks:        200.50.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453588 (0x162e14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
        Validity
            Not Before: Mar 23 08:30:00 2022 GMT
            Not After : Mar 22 08:30:00 2024 GMT
        Subject: CN=a786521ec644359cb718ff1f98dd1272b2f57238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:f6:9b:d8:b4:86:11:24:a6:f9:f9:ee:af:
                    b7:d4:9b:31:b2:17:48:15:25:e2:66:d4:f0:63:e8:
                    71:c2:ee:a9:aa:8c:21:13:4d:bb:22:65:22:db:81:
                    d7:9e:90:37:d0:4f:57:79:ee:eb:73:b2:76:c7:83:
                    25:d0:67:51:41:7e:ec:9d:3a:e3:7f:dc:83:62:04:
                    1a:76:c7:f5:5b:80:58:12:94:b3:0f:57:81:13:35:
                    8f:11:1c:63:44:d5:6b:a9:9e:dd:17:de:33:44:b1:
                    42:3a:bf:79:24:a4:1d:94:22:c0:54:2a:a8:5b:31:
                    2f:89:b6:7a:3e:86:00:be:4e:72:b8:b4:09:18:09:
                    ed:03:e1:2f:33:aa:89:ba:07:36:92:e2:e0:13:27:
                    ae:d9:46:5d:2e:ac:7e:61:68:be:c5:d3:bf:5a:e8:
                    11:41:cf:b4:42:fc:a1:c4:a8:18:b7:dc:fb:22:e4:
                    89:29:fd:b4:c3:09:60:ac:cc:22:97:10:cc:d5:c6:
                    ab:5e:ad:2d:40:8d:4a:32:1e:20:4e:43:b8:1e:a6:
                    32:ab:0d:96:29:f4:ba:55:1c:4c:f8:61:94:3f:ec:
                    95:3d:92:c1:88:91:10:bd:d1:5b:37:75:f8:9e:64:
                    56:4f:19:a1:77:8c:4b:ea:79:2b:fd:68:22:e6:04:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CE:54:69:19:33:29:13:9A:EC:E5:6A:D9:70:8C:32:00:13:27:5F
            X509v3 Authority Key Identifier:
                keyid:A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/a786521ec644359cb718ff1f98dd1272b2f57238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:61:c8:83:77:e3:73:1e:de:89:88:e2:b5:84:b3:b6:4d:f2:
         e6:85:87:6b:dc:dc:f6:7e:2d:4f:b0:62:d4:e3:83:36:55:2f:
         29:07:33:7e:c2:02:fa:2c:55:5f:3a:7d:5e:e0:8c:b6:bb:d0:
         1f:1b:74:3b:fa:a4:3c:69:cd:07:80:ea:1a:a9:49:75:8f:af:
         7c:11:d0:45:89:15:28:2b:1a:98:c0:b9:a2:41:c5:25:11:0b:
         86:4d:ce:b5:2b:4c:27:58:cc:5e:4e:9d:6c:b1:1b:f0:da:a5:
         32:4a:dd:e0:ec:26:ae:cd:8d:58:df:05:75:e7:53:de:b4:1a:
         9e:70:39:77:c4:2b:ac:bb:99:58:26:0a:78:71:65:f7:41:26:
         d0:98:b8:91:ef:56:0b:35:68:9e:0e:c0:37:5e:29:f1:bd:34:
         00:60:7d:b4:e3:b4:c6:cd:0c:f9:bb:3a:98:09:2e:33:09:36:
         31:a9:ad:99:9a:2a:67:40:53:3a:ec:b8:fd:c4:82:03:75:cd:
         a6:4b:a9:d8:66:e4:80:3b:f4:39:e6:08:c3:43:5a:2a:03:2c:
         a8:da:c9:2d:6c:ca:4e:93:06:ee:26:20:30:88:d7:63:e9:c1:
         62:60:d3:4e:0d:2d:ae:af:5d:09:70:9a:8d:9b:9b:0d:fa:df:
         48:91:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org