Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b1593d9f1f3e46ef364b71ff663333f4452a03d8.roa
File:                     b1593d9f1f3e46ef364b71ff663333f4452a03d8.roa (raw, json)
Hash identifier:          vVGJ1QAXYptfnsvwmo3AMa9Sy6VWoq+1k8xPCfkH7j8=
Subject key identifier:   AD:25:42:A1:57:86:2D:BA:78:AA:CC:C4:A8:2B:42:7F:18:9F:66:C0
Certificate issuer:       /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial:       29A55C
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b1593d9f1f3e46ef364b71ff663333f4452a03d8.roa
Signing time:             Sat 16 Mar 2024 22:03:24 +0000
ROA not before:           Sat 16 Mar 2024 22:03:19 +0000
ROA not after:            Fri 16 Mar 2029 22:03:19 +0000
asID:                     27742
IP address blocks:        200.30.128.0/24 maxlen: 24
                          200.30.132.0/24 maxlen: 24
                          200.30.165.0/24 maxlen: 24
                          200.30.170.0/24 maxlen: 24
                          200.30.177.0/24 maxlen: 24
                          200.30.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2729308 (0x29a55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
        Validity
            Not Before: Mar 16 22:03:19 2024 GMT
            Not After : Mar 16 22:03:19 2029 GMT
        Subject: CN=b1593d9f1f3e46ef364b71ff663333f4452a03d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:b1:d1:0c:df:35:f0:eb:99:55:34:4a:61:
                    2c:04:c9:f4:11:f2:19:bd:0b:c2:81:57:7c:6d:6a:
                    cf:ed:60:ac:f8:69:23:43:79:2a:43:d2:f1:42:41:
                    c0:f4:aa:4b:02:9d:08:bb:c3:39:11:14:09:38:21:
                    3a:66:1f:9b:26:85:20:5b:1b:8b:c7:69:25:b3:19:
                    22:99:b5:5a:90:fe:71:d8:24:36:a0:0f:a2:f5:71:
                    d2:12:26:5f:bf:c9:78:71:b0:6b:98:e4:ec:51:be:
                    c9:49:85:6a:63:bf:ad:53:ff:da:1e:3b:0f:50:b6:
                    55:ba:66:53:9f:37:5f:8e:8e:af:d2:9b:dd:86:b0:
                    61:41:6b:44:23:2e:e7:f6:65:db:20:3d:fb:f1:c1:
                    11:41:c6:06:83:3a:c5:ad:28:f0:0d:f2:32:ae:f4:
                    e9:95:39:28:c8:4e:77:b2:9b:f6:cf:86:29:c9:f2:
                    15:2a:cd:8c:f8:c0:22:fe:24:8e:8f:24:45:95:b7:
                    86:6f:e9:07:31:9a:4d:a3:03:46:22:9e:01:96:60:
                    ae:df:f2:0e:99:41:3e:9d:29:cc:33:69:bc:9b:ca:
                    8a:00:bb:69:c5:63:27:58:58:7f:e2:0f:a6:ed:74:
                    b1:87:71:37:07:70:80:56:18:f9:a6:ef:fd:11:94:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:25:42:A1:57:86:2D:BA:78:AA:CC:C4:A8:2B:42:7F:18:9F:66:C0
            X509v3 Authority Key Identifier:
                keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b1593d9f1f3e46ef364b71ff663333f4452a03d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.128.0/24
                  200.30.132.0/24
                  200.30.165.0/24
                  200.30.170.0/24
                  200.30.177.0/24
                  200.30.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:90:f8:ad:45:e8:ed:f8:13:2b:30:01:d0:78:4a:0a:46:
         c0:f6:0b:f8:e5:dc:a8:fa:df:86:8a:fc:ae:e0:05:83:69:66:
         33:c8:f8:f4:a4:33:98:a8:f9:08:df:46:70:1b:7e:a7:f1:80:
         25:b4:ca:95:28:ae:3b:98:c4:c7:e6:2d:0d:75:39:0a:ea:57:
         e7:57:1e:9a:82:fd:32:05:f4:df:a4:87:48:f1:1f:64:da:92:
         5a:d3:08:c0:e4:a7:c6:18:42:9d:3b:1f:1a:47:98:6d:f9:58:
         bf:8b:7d:8b:25:1d:f6:06:a7:fb:e6:73:51:67:79:ad:28:0c:
         1c:17:33:aa:25:1d:07:99:a2:ff:05:d2:2a:ab:fe:38:69:57:
         82:e9:13:2a:f3:57:f7:95:55:37:83:30:3e:94:a9:cc:4d:44:
         ae:70:87:a6:ca:02:68:a6:04:8a:c5:24:7c:4a:3e:89:cf:e8:
         c3:a5:65:26:db:69:8a:78:4e:b2:a2:8c:d0:3e:ea:cc:c3:47:
         bc:6a:e8:5d:74:00:d7:a5:2c:8b:7d:1f:89:2c:5f:9e:9a:55:
         58:3d:e8:e8:75:95:22:73:5d:f7:3f:a8:ef:dc:73:99:00:c2:
         75:78:ca:51:59:37:13:d6:a8:be:9f:6b:21:32:66:f4:e5:2e:
         03:f2:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org