Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/2a53fe8ea1a5c696a0fd27180f35cbc690ef7fb5.roa
File:                     2a53fe8ea1a5c696a0fd27180f35cbc690ef7fb5.roa (raw, json)
Hash identifier:          yeRD2OJOSNrUok+VzVX83MHD7qXoOOhbTJxsV/HBtYw=
Subject key identifier:   21:77:4F:D9:6D:FA:C7:73:C2:96:7C:97:35:5E:F7:8F:97:7A:8E:34
Certificate issuer:       /CN=324de8920173d39f7e57f07a22d818efa49b5475
Certificate serial:       120E3A
Authority key identifier: DB:87:53:92:F1:F6:36:60:C3:8D:0B:02:48:CF:61:31:D6:70:90:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/324de8920173d39f7e57f07a22d818efa49b5475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/2a53fe8ea1a5c696a0fd27180f35cbc690ef7fb5.roa
Signing time:             Wed 17 May 2023 08:30:00 +0000
ROA not before:           Tue 16 May 2023 08:30:00 +0000
ROA not after:            Thu 15 May 2025 08:30:00 +0000
asID:                     262200
IP address blocks:        200.124.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183290 (0x120e3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324de8920173d39f7e57f07a22d818efa49b5475
        Validity
            Not Before: May 16 08:30:00 2023 GMT
            Not After : May 15 08:30:00 2025 GMT
        Subject: CN=2a53fe8ea1a5c696a0fd27180f35cbc690ef7fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:ca:61:e6:a2:2a:53:29:d1:db:34:a2:33:
                    92:e6:0c:e1:d6:7e:45:52:a0:0e:57:cd:36:48:58:
                    da:63:df:07:15:b8:92:2b:90:a6:f3:8d:ff:6a:c3:
                    22:b8:42:bc:3c:1e:7a:a2:6b:5e:1e:28:82:a0:88:
                    04:0e:77:c8:d0:94:90:ca:4b:cc:ee:55:8f:67:11:
                    57:6c:64:65:2a:ca:eb:f0:15:f0:48:2f:8a:e6:6c:
                    f8:af:cf:31:cf:5c:fd:d1:d2:ca:a4:8c:fb:3c:be:
                    ab:6e:84:df:c5:04:c6:65:74:4a:d5:71:3c:12:20:
                    0c:cf:50:5c:64:72:cc:89:ef:12:a7:eb:a1:b9:14:
                    03:31:b7:82:01:09:88:2b:57:7d:16:d7:31:64:f5:
                    66:27:74:df:22:cb:ae:d4:0e:d0:0c:73:f8:43:c6:
                    fb:e4:48:5f:44:57:89:13:a3:12:66:8b:11:ae:0f:
                    b0:e2:c7:14:30:ee:2e:24:9b:7c:cb:25:27:19:de:
                    d3:7d:fb:61:96:2c:9b:1d:43:4d:c6:34:b4:73:c0:
                    69:60:ea:4b:1f:e8:ca:27:7c:2f:e4:f8:77:41:f2:
                    bf:02:29:41:e3:d1:59:6c:0a:fb:8b:8d:e6:39:c8:
                    10:7b:4a:3f:4f:07:73:23:3f:71:c5:96:77:be:4f:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:77:4F:D9:6D:FA:C7:73:C2:96:7C:97:35:5E:F7:8F:97:7A:8E:34
            X509v3 Authority Key Identifier:
                keyid:DB:87:53:92:F1:F6:36:60:C3:8D:0B:02:48:CF:61:31:D6:70:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/324de8920173d39f7e57f07a22d818efa49b5475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/2a53fe8ea1a5c696a0fd27180f35cbc690ef7fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/324de8920173d39f7e57f07a22d818efa49b5475.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:f4:30:87:a4:de:35:d1:3a:8e:7b:6d:7f:e6:7b:ec:70:
         6b:f8:1b:04:e2:d4:f1:1f:f1:b1:80:f2:3a:a3:22:ea:46:f2:
         99:25:30:96:0e:c2:2b:ce:3c:13:75:22:f0:e5:5e:a4:95:1e:
         05:37:e0:1c:33:c7:28:57:12:d2:b9:f6:f0:40:56:ec:b5:eb:
         e1:f5:95:f7:ff:f5:09:1e:b9:e9:44:50:c8:90:19:e4:7f:1d:
         04:26:d1:a1:2a:33:52:a5:3c:a9:0b:32:98:72:ed:64:06:5c:
         5c:4c:d2:68:9d:fa:68:32:60:21:67:73:37:40:05:6e:ad:5b:
         12:84:03:67:36:f8:c9:9d:05:61:68:51:47:d9:96:fe:f5:dd:
         fd:cf:f9:c7:6e:48:4c:86:36:cb:76:4e:da:e3:14:50:82:dd:
         9a:cb:d1:63:65:bd:67:98:b9:d0:96:ba:a5:d7:da:5a:38:8e:
         92:ad:da:cd:88:d8:6a:41:2f:e7:56:ce:51:11:32:9e:89:25:
         b7:dc:11:9e:dc:68:70:14:c7:ff:46:5c:5f:73:fe:ba:e5:ae:
         20:9d:dd:ba:87:00:bf:62:a5:ce:63:fc:1c:03:64:90:26:24:
         03:3c:59:fe:fd:d7:03:45:37:27:9e:ae:a7:d5:f9:a2:48:46:
         dd:72:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org