Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/b3d270537a7b69f5e1b89c068d675ba2b219924a.roa
File:                     b3d270537a7b69f5e1b89c068d675ba2b219924a.roa (raw, json)
Hash identifier:          i2nTZLJ4y4lwd/ocF4b1xT0g95wAgLheYm++kV/gp/w=
Subject key identifier:   7C:8C:DD:C7:F9:24:D8:5F:43:2C:B9:AD:12:3C:FB:AD:5C:B6:6F:31
Certificate issuer:       /CN=4213629bff1656b039692adab742735c1703764c
Certificate serial:       28C8D4
Authority key identifier: 14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/b3d270537a7b69f5e1b89c068d675ba2b219924a.roa
Signing time:             Mon 19 Feb 2024 17:00:38 +0000
ROA not before:           Mon 19 Feb 2024 17:00:37 +0000
ROA not after:            Mon 19 Feb 2029 17:00:37 +0000
asID:                     272043
IP address blocks:        200.25.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2672852 (0x28c8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4213629bff1656b039692adab742735c1703764c
        Validity
            Not Before: Feb 19 17:00:37 2024 GMT
            Not After : Feb 19 17:00:37 2029 GMT
        Subject: CN=b3d270537a7b69f5e1b89c068d675ba2b219924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e8:83:2a:74:a1:16:01:b8:f2:ab:3b:d9:73:
                    57:ee:bf:ab:48:1e:1f:bd:a8:00:e9:e4:0c:ce:c6:
                    ff:9e:e7:2b:9a:44:8f:76:d3:30:a3:c0:d7:cc:16:
                    42:14:c6:7e:88:9d:4e:2f:7e:f2:ec:50:1f:9c:99:
                    bd:f2:65:be:e6:6a:54:88:81:23:e9:84:d1:51:ac:
                    7c:5d:ea:7d:7c:37:bd:97:99:0e:b9:4b:8d:e4:18:
                    40:d8:f9:b4:ac:f2:45:cb:74:a4:9a:e1:d3:b4:1d:
                    f2:3c:fc:c6:bb:fe:43:55:eb:4b:fb:c1:94:8c:56:
                    15:b3:88:f3:d8:42:e6:bd:3a:e8:2b:6e:87:07:0a:
                    06:71:fa:f7:cc:16:64:3c:4e:23:f8:dd:79:e3:59:
                    8d:87:25:83:79:67:33:56:22:dc:57:04:e1:e0:5a:
                    23:61:57:91:2c:17:8d:0f:29:01:68:0f:f3:41:72:
                    bd:ed:1e:38:36:40:42:ac:b7:fc:e3:d0:84:13:36:
                    81:66:2e:03:b8:48:16:25:ba:20:65:cb:57:bd:71:
                    5b:85:6a:84:0d:23:44:ee:cb:ce:db:ee:48:4d:59:
                    1e:22:71:cb:60:1f:d7:0d:85:20:4a:99:f0:c2:33:
                    08:61:99:e7:a3:d1:e7:d7:cd:cc:ff:ca:3e:25:10:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8C:DD:C7:F9:24:D8:5F:43:2C:B9:AD:12:3C:FB:AD:5C:B6:6F:31
            X509v3 Authority Key Identifier:
                keyid:14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/b3d270537a7b69f5e1b89c068d675ba2b219924a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4213629bff1656b039692adab742735c1703764c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:31:93:78:4d:1b:2a:69:d3:02:b7:be:59:84:df:f5:4c:
         0d:54:01:8b:51:c2:a5:e3:a4:a0:9a:35:2f:7d:29:b1:fd:d4:
         97:61:9f:4b:60:44:f1:b0:e2:1b:8c:dd:37:1a:1a:12:74:0f:
         29:a0:b2:d6:cd:61:9b:17:ed:60:31:17:7d:de:2e:ed:e8:ad:
         eb:f8:85:bd:b5:36:f4:4b:9f:4a:26:f6:4a:bd:4e:2b:24:03:
         6e:98:64:10:19:24:54:e0:e6:cc:e9:b0:ee:08:4c:a7:16:73:
         d2:e8:08:9a:e5:1e:f9:fe:51:a3:7c:e0:3e:e8:45:0a:61:d9:
         94:9c:3b:1a:3b:be:83:92:19:35:6b:c3:f7:91:c7:a3:19:a2:
         1a:9d:c1:f0:c9:ba:56:87:86:f8:e7:b4:11:d1:75:9f:9e:fc:
         00:84:1a:5d:cf:1d:0f:31:a6:64:5b:75:8e:e0:b0:0e:52:9f:
         41:67:b4:8b:51:9c:7c:2a:92:8c:1d:b8:9e:2b:11:31:d7:f9:
         1d:29:22:f7:00:37:c4:62:3d:67:de:e8:4d:38:8d:74:29:68:
         00:5e:86:5a:6a:3b:3f:d9:05:2a:26:03:a9:63:bf:e1:a7:bc:
         58:33:19:90:74:24:92:90:21:69:d1:7b:d5:6b:73:21:d3:17:
         3a:d7:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org