Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d41437d70df4800729bbb8d09e61817fee9d54c5.roa
File:                     d41437d70df4800729bbb8d09e61817fee9d54c5.roa (raw, json)
Hash identifier:          CiiI6Uf555XMJ3xlNsUcQPp5kXYsS03kq76gqxlWfR4=
Subject key identifier:   A8:56:D3:B2:7C:CD:EA:6F:EE:69:49:E5:EA:10:EA:91:53:FD:E8:C4
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0165FD
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d41437d70df4800729bbb8d09e61817fee9d54c5.roa
Signing time:             Wed 14 Sep 2022 14:38:03 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91645 (0x165fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=d41437d70df4800729bbb8d09e61817fee9d54c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:9d:39:80:0a:b0:50:97:e3:c5:be:80:78:
                    81:bd:1f:66:ad:3e:8f:a3:6d:46:2f:a0:7d:25:fb:
                    3c:d4:38:08:10:cb:25:f0:b1:90:ab:41:d9:fd:3e:
                    16:45:42:0c:b1:f2:22:dc:47:cf:cf:f0:33:d9:5a:
                    4c:6e:57:c8:6f:0d:bf:59:c3:df:3a:05:2f:f5:46:
                    ef:4d:e6:34:4c:64:ff:b1:89:23:8b:6e:d2:9e:68:
                    9b:a0:34:1f:50:87:a7:e3:6f:53:01:1a:06:f4:a9:
                    02:e9:b7:12:c5:29:0a:a4:53:24:61:66:72:65:84:
                    7d:ad:8a:2d:7b:67:a3:1d:d8:86:91:97:06:94:f2:
                    ad:fe:61:68:08:27:70:b7:3e:2c:49:44:7a:2f:9d:
                    b9:02:53:8a:cc:89:2b:ee:e0:f5:11:7d:e0:72:0a:
                    29:7a:f7:24:ad:dd:f0:10:5d:29:c4:f6:8c:14:7a:
                    7f:57:ce:42:77:b5:ad:9c:1a:35:32:55:55:e4:90:
                    a1:7b:7a:08:d6:6c:04:84:ee:c9:11:39:d1:57:00:
                    28:e1:07:0b:f2:91:fa:58:73:19:08:be:a5:ef:0f:
                    88:21:5b:c5:1e:ff:2b:8d:56:39:93:b7:e1:c6:6f:
                    72:7b:93:7c:12:cc:2e:47:b7:ad:2c:93:24:74:65:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:56:D3:B2:7C:CD:EA:6F:EE:69:49:E5:EA:10:EA:91:53:FD:E8:C4
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d41437d70df4800729bbb8d09e61817fee9d54c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:c6:be:d7:6d:71:4c:55:9a:a4:3a:31:87:cc:87:25:5c:
         9c:63:ec:38:21:b8:c7:b0:62:d8:fa:2b:ca:4d:22:bc:66:27:
         cf:6b:29:c7:49:52:c2:ac:f4:e7:64:b4:ee:19:9b:f0:18:24:
         f6:81:d5:4b:db:fe:7c:8d:47:78:27:e0:a8:a2:08:5c:bf:90:
         a4:65:ae:cc:38:6d:af:34:43:f6:2e:9c:70:ff:5f:fb:04:1c:
         56:59:a0:94:af:f0:95:10:f7:41:59:9f:16:4d:cf:32:64:36:
         93:4d:63:fc:87:fd:68:4a:fd:8b:fb:ce:30:43:20:d7:f8:f2:
         47:08:ab:cb:6d:63:35:f5:54:8b:df:84:39:7a:6e:eb:ee:d7:
         97:fd:98:e0:f3:fa:bd:45:7f:80:da:6e:e3:dd:e8:c1:17:27:
         25:e5:73:af:46:d4:ba:e0:29:87:ba:7e:34:94:4e:b1:fb:66:
         b1:ad:87:de:70:01:72:7c:6c:0e:ff:80:18:3b:25:d9:94:f7:
         8e:4d:a3:18:1b:72:28:48:30:5b:7c:bc:37:f9:3f:03:e5:f8:
         6e:a1:0c:22:61:19:ab:8d:60:91:a9:aa:03:fc:f2:c8:72:66:
         9a:7f:e2:ec:79:b6:e9:4e:eb:d2:e7:ae:1b:02:1a:bc:c0:3d:
         52:a2:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org