Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7.roa
File:                     dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7.roa (raw, json)
Hash identifier:          Y568PGN8iRtKOelw8eNiyREv3RsqTeNWVVdlRI5jGn8=
Subject key identifier:   AB:26:EF:1F:4D:60:A1:9A:B9:B4:FE:ED:57:30:58:A0:AE:57:81:2A
Certificate issuer:       /CN=ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4
Certificate serial:       20B3DA
Authority key identifier: E0:AD:97:2A:32:EC:3F:13:D6:08:8D:F0:11:88:38:BC:17:33:25:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7.roa
Signing time:             Fri 05 Jan 2024 19:48:52 +0000
ROA not before:           Fri 05 Jan 2024 19:48:51 +0000
ROA not after:            Mon 05 Jan 2026 19:48:51 +0000
asID:                     61468
IP address blocks:        200.7.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2143194 (0x20b3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4
        Validity
            Not Before: Jan  5 19:48:51 2024 GMT
            Not After : Jan  5 19:48:51 2026 GMT
        Subject: CN=dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:28:cf:9d:fc:6f:c6:29:14:5e:e3:85:be:
                    a0:db:1a:4c:c2:1f:66:ea:e8:d1:99:c6:22:38:8f:
                    80:4e:ad:ee:ad:3e:60:a8:bf:cf:1c:17:a8:40:5c:
                    64:fa:9d:3a:04:32:b5:86:69:5b:7c:92:e4:16:bd:
                    40:12:7a:bc:cd:fd:1c:fc:1d:f7:de:7a:fc:69:5d:
                    2a:5e:a0:12:15:03:f3:b2:88:5d:b1:bc:a6:5c:37:
                    3d:bd:4b:3e:80:ba:a4:89:24:f8:24:97:04:da:39:
                    91:db:55:84:87:4f:be:1c:54:a0:39:b0:1a:de:98:
                    b2:b6:79:2a:04:32:19:ff:d5:fa:9a:55:3d:2a:20:
                    87:ff:68:f4:e5:26:71:ba:6e:32:c8:69:39:54:a8:
                    ad:12:47:b6:0f:66:b1:b8:65:67:b9:6e:a5:5b:bb:
                    49:50:61:5f:29:e7:ce:1f:85:4d:05:76:45:c8:34:
                    c2:68:62:d5:96:96:c5:7e:12:20:15:0c:c4:ad:64:
                    f1:8a:f3:cd:0b:9a:58:f0:7f:18:f6:bf:31:79:f1:
                    3b:db:9a:6a:f0:9e:22:53:9b:c2:dd:7d:8a:0a:16:
                    7f:21:d3:36:8f:59:7e:08:05:8d:29:0e:46:0a:53:
                    ea:43:84:86:7d:77:d5:76:74:f1:75:0f:4e:1b:00:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:26:EF:1F:4D:60:A1:9A:B9:B4:FE:ED:57:30:58:A0:AE:57:81:2A
            X509v3 Authority Key Identifier:
                keyid:E0:AD:97:2A:32:EC:3F:13:D6:08:8D:F0:11:88:38:BC:17:33:25:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:3c:67:36:c4:50:66:b0:36:a2:b1:fe:ed:b5:0a:9b:fe:
         6f:38:26:7a:2e:48:14:ae:b0:a2:19:d2:0f:c0:a8:a0:c9:14:
         4c:a6:64:1f:dc:25:bd:b3:66:a7:cd:21:7e:c1:44:8b:bc:c3:
         66:08:d8:40:ee:68:7f:95:6c:f1:d3:89:78:1a:86:85:e4:2f:
         66:d1:07:58:5c:93:23:16:76:41:58:a1:ab:6d:19:16:35:63:
         a7:17:a8:f6:d0:fd:e8:f1:de:78:1b:12:ac:ae:40:9a:ce:46:
         cb:8d:39:06:d6:e6:ac:47:c2:cd:1b:fb:d9:d3:07:99:8b:50:
         01:60:10:5c:1b:0f:93:4b:2f:fe:93:0c:28:01:ba:2e:e5:58:
         56:ac:81:bb:71:50:9d:e3:fd:0c:c1:1a:4f:20:58:06:d7:d5:
         4a:b7:a2:dd:73:6e:f1:75:82:49:a8:e5:4e:a1:ba:63:cd:e0:
         e7:57:41:1b:78:ff:c5:bb:01:93:05:c1:44:a1:5e:72:be:ff:
         11:3b:b8:4d:90:ef:84:cf:f0:e2:d5:42:a4:dd:20:8c:18:a3:
         8e:e3:8b:dc:9f:14:ad:4a:8b:a1:19:92:e8:6c:a2:43:3e:fe:
         2a:03:ef:ce:79:73:81:be:33:2b:df:73:54:d9:c1:7e:17:46:
         89:d4:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org