Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/559b02c06c96631461f6ed815496254829f67f27.roa
File:                     559b02c06c96631461f6ed815496254829f67f27.roa (raw, json)
Hash identifier:          SGRWJiD8OpPi+cxBQSJL5NLhJPcwNa8YlGKUgTeRtdA=
Subject key identifier:   52:8B:38:E4:1E:66:B4:13:3A:3E:90:C1:C9:F6:C3:C9:7E:6D:60:ED
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0177B6
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/559b02c06c96631461f6ed815496254829f67f27.roa
Signing time:             Wed 14 Sep 2022 14:41:15 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96182 (0x177b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=559b02c06c96631461f6ed815496254829f67f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:d4:b0:29:f5:8c:28:f3:86:22:0d:aa:81:
                    8d:13:d4:0e:7a:ec:9e:67:a7:f9:1c:c7:cc:d1:45:
                    db:bd:13:6b:89:85:e2:e9:e3:1a:1e:b2:43:ac:3a:
                    d1:63:6b:9d:49:6e:f0:d2:11:03:7b:d9:ca:8d:a2:
                    b5:06:be:a9:2e:80:51:b1:26:96:9c:b4:c1:13:d4:
                    0d:67:82:1f:89:96:15:5a:14:e8:9c:99:84:1e:67:
                    b6:df:32:c5:2a:b5:a0:c3:e8:a8:04:e9:88:a7:ac:
                    df:be:25:2d:8e:a7:29:b6:d5:01:b1:b3:26:4c:1e:
                    f6:89:bf:05:5d:b2:3e:2c:f3:5e:7e:5a:27:88:e1:
                    ec:32:9e:17:7e:f8:ec:16:91:55:15:ee:55:9d:09:
                    79:8c:e8:99:de:9c:6f:78:7e:85:6c:50:a0:95:cb:
                    ff:d7:26:66:bb:07:18:a0:22:ad:52:a1:63:9f:94:
                    58:cd:6c:9b:af:82:34:85:9d:92:65:09:05:90:e7:
                    9a:67:d6:38:8f:bb:54:67:59:6a:2f:c4:7d:e2:e8:
                    18:f1:d6:1b:50:20:f9:fd:07:88:e3:5d:f7:e8:9a:
                    55:fb:de:89:8f:8e:bb:bb:9b:61:55:ae:01:0d:72:
                    10:5d:85:69:4e:b4:84:9a:6f:b1:26:f7:cb:df:fa:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8B:38:E4:1E:66:B4:13:3A:3E:90:C1:C9:F6:C3:C9:7E:6D:60:ED
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/559b02c06c96631461f6ed815496254829f67f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:8e:83:d8:ec:3c:54:4c:b8:49:ad:b2:24:f4:c9:a2:e4:
         91:a7:32:c8:d8:fb:e1:29:d0:37:37:12:af:85:41:9a:22:48:
         24:b3:3c:19:01:03:09:b2:3b:37:a0:83:18:55:00:4a:24:4e:
         e2:65:3b:ea:e8:ba:f4:77:4e:71:ac:4e:26:33:e2:b2:31:80:
         b9:73:47:d9:62:7e:9d:ab:ce:8a:a3:b4:0f:8d:d9:fd:65:23:
         e5:4b:7c:c4:39:0e:81:05:3a:37:38:e5:a2:ae:50:8e:7f:08:
         47:bd:24:88:b9:5e:2b:2c:b6:bd:d2:32:44:f6:9c:84:7f:58:
         37:22:63:8f:74:73:62:af:0e:99:82:17:b4:eb:cc:09:b2:64:
         e5:9c:a3:31:d6:b4:e3:ee:9e:72:19:70:da:2f:79:84:b3:8a:
         89:26:f7:d2:dd:55:b5:95:8a:97:48:7c:ef:6b:85:1c:ad:4c:
         88:08:ef:0f:3f:a6:82:30:07:b4:90:fb:ed:5c:f4:cf:d5:37:
         56:f5:eb:d7:53:c2:6d:3f:e9:ed:c8:bf:b9:86:13:9c:12:e6:
         36:d6:d3:35:f6:fe:26:a6:6a:7c:64:d4:cd:d4:66:47:69:8d:
         f9:40:b6:9a:05:f5:8d:3b:69:c0:e4:7e:52:50:28:76:1c:8a:
         e7:2f:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org