Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e32332e3130372e302f32342d3234203d3e2034323434.roa
File:                     3230302e32332e3130372e302f32342d3234203d3e2034323434.roa (raw, json)
Hash identifier:          uHQ4GrlbjiCpZmomWjUOoP0EWtT/hiIb9ISQspOQrzA=
Subject key identifier:   45:C4:8D:87:14:4B:AB:D4:85:DD:03:43:A5:52:5E:F3:1F:FA:12:47
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       549038D3CBE981D2AA2EF05A094D3659D26CA4EF
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e32332e3130372e302f32342d3234203d3e2034323434.roa
Signing time:             Tue 30 Jul 2024 16:50:03 +0000
ROA not before:           Tue 30 Jul 2024 16:45:03 +0000
ROA not after:            Tue 29 Jul 2025 16:50:03 +0000
asID:                     4244
IP address blocks:        200.23.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:90:38:d3:cb:e9:81:d2:aa:2e:f0:5a:09:4d:36:59:d2:6c:a4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:03 2024 GMT
            Not After : Jul 29 16:50:03 2025 GMT
        Subject: CN=45C48D87144BABD485DD0343A5525EF31FFA1247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:34:9e:b0:c0:1e:d4:b6:c0:75:44:c2:0c:
                    6f:be:fc:e6:26:47:64:96:c3:6f:bf:ef:42:71:fc:
                    b9:32:00:04:7b:9c:82:ef:1d:3c:83:73:28:a4:26:
                    9a:d6:64:ce:db:f1:50:42:a7:44:c0:95:ef:51:1a:
                    a8:63:64:0f:a6:4e:5a:25:99:cc:19:ce:97:ba:33:
                    2c:3c:20:0b:38:d6:fb:a3:b4:de:b8:50:a0:30:26:
                    e8:45:58:fe:87:d8:6e:9d:80:ae:66:cf:e2:d5:0c:
                    ed:1a:f6:18:eb:75:04:57:e6:0d:37:d9:71:79:34:
                    d2:25:e9:95:93:d1:dc:20:e6:f8:94:a3:0e:27:4a:
                    18:30:3b:f9:46:81:ca:f0:29:88:e4:bc:f8:99:b4:
                    23:8d:94:e8:7f:de:f6:41:bc:93:15:5f:06:8b:0a:
                    a0:57:09:ba:75:81:a3:52:31:47:82:c8:18:26:f3:
                    a4:e8:e4:ca:b6:d7:0f:69:70:32:ab:7c:24:12:d5:
                    77:6f:80:33:e3:b7:3c:da:35:f4:3d:89:b4:6f:10:
                    cd:79:28:8a:18:92:50:f3:15:41:39:63:58:70:31:
                    c8:5f:11:d6:c7:b1:03:f8:94:b3:bc:6a:af:ae:02:
                    fb:0e:6c:0d:1e:74:ef:30:fe:7e:e5:76:41:72:a6:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C4:8D:87:14:4B:AB:D4:85:DD:03:43:A5:52:5E:F3:1F:FA:12:47
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e32332e3130372e302f32342d3234203d3e2034323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:62:af:97:43:07:53:de:e0:40:34:c8:ae:33:08:97:ba:aa:
         e3:c0:63:d8:19:0c:80:93:e8:cc:92:a1:6a:df:f2:c6:bd:c9:
         37:98:76:d8:96:9e:fd:52:7e:3a:21:a3:3c:0a:7c:df:15:c0:
         79:0d:db:cb:24:80:71:86:ba:33:8c:17:1a:3c:47:48:3f:86:
         a3:5d:66:44:52:35:aa:e9:a1:ae:0f:32:ea:09:da:f9:a3:de:
         0d:66:be:eb:26:23:51:1b:c7:c0:32:60:fc:f7:42:66:80:d6:
         62:9b:3a:f8:26:61:d6:73:13:d0:23:1c:0c:94:9a:65:06:6d:
         62:ea:17:8c:e9:ec:15:b6:33:4b:7f:38:1a:cb:00:a3:f5:12:
         f8:c0:a0:e2:d1:b4:a6:d4:87:32:05:bf:41:ab:8f:bf:4e:6e:
         93:11:ee:43:e1:ef:76:46:1c:83:75:c1:63:d2:0b:e7:1d:9a:
         2d:44:b9:7e:7d:90:1d:19:87:d8:9a:6c:f8:96:ea:97:17:42:
         af:0f:ff:ec:1f:bb:66:49:2d:59:0c:dd:ee:c3:4a:e7:bd:b0:
         0c:46:17:d1:89:c7:64:5b:81:70:49:43:55:ba:9f:39:f6:74:
         76:18:09:6f:05:e3:ef:f6:85:74:f7:53:a9:ff:a7:29:3a:e5:
         f3:c1:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 23:16:51 2024 by rpki-client on console-ams.rpki-client.org