Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3139203d3e2034323434.roa
File:                     3230302e33382e3136302e302f31392d3139203d3e2034323434.roa (raw, json)
Hash identifier:          avcPEGSygwHEkQKd32M6I8XiJ29JYGRfliI7SJHMa8w=
Subject key identifier:   5D:D7:F9:77:20:28:44:2F:CC:73:03:EE:0B:93:A8:C8:B9:8B:28:C3
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       6CBC33AC266BA494B52FD87CAEA62CF24538E88D
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3139203d3e2034323434.roa
Signing time:             Tue 30 Jul 2024 16:50:04 +0000
ROA not before:           Tue 30 Jul 2024 16:45:04 +0000
ROA not after:            Tue 29 Jul 2025 16:50:04 +0000
asID:                     4244
IP address blocks:        200.38.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bc:33:ac:26:6b:a4:94:b5:2f:d8:7c:ae:a6:2c:f2:45:38:e8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:04 2024 GMT
            Not After : Jul 29 16:50:04 2025 GMT
        Subject: CN=5DD7F9772028442FCC7303EE0B93A8C8B98B28C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:91:77:87:fd:98:ae:9a:94:90:0d:91:7a:
                    6b:b3:f4:18:1e:5d:43:65:5e:31:b0:9d:0f:09:3f:
                    c9:23:a3:a0:01:c7:85:71:2e:63:e5:45:cc:b9:90:
                    1d:40:e6:22:51:14:5f:c1:f6:ab:4e:f6:99:ec:d0:
                    2e:d3:0e:82:10:a2:83:27:65:3a:51:4e:23:12:21:
                    a5:da:d4:25:16:25:be:28:56:2f:8b:ca:ae:19:d6:
                    e9:26:67:7c:04:fb:2f:73:c2:bb:dc:4d:bf:fc:df:
                    41:01:ed:d0:c4:8e:18:8a:c6:79:6d:26:bc:9c:2f:
                    fe:c2:21:00:56:30:fc:c6:6f:3b:41:b1:4a:b6:50:
                    2e:e1:b5:96:7f:cb:6d:9b:f8:f7:3b:9f:6a:c5:26:
                    8c:15:3d:35:bf:bb:9a:43:aa:67:9c:ac:fb:5c:67:
                    6d:54:6b:cb:75:61:f0:8d:30:9a:7b:72:92:f6:fa:
                    14:7e:dc:30:0f:e2:9b:69:51:04:35:41:cc:0f:a1:
                    6a:61:79:b0:93:5f:e3:ac:15:12:6b:1d:ce:dd:2d:
                    f2:7c:c1:03:db:d7:2b:20:7b:4b:1a:3d:e9:fc:fc:
                    d1:22:ab:5a:4f:bb:77:a8:a7:df:84:c7:1d:30:06:
                    08:cd:57:4c:47:5e:1e:6e:ac:c8:6d:e7:51:27:dd:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D7:F9:77:20:28:44:2F:CC:73:03:EE:0B:93:A8:C8:B9:8B:28:C3
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3139203d3e2034323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.38.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:28:92:2f:a5:12:88:d0:49:e9:21:82:8d:07:1f:93:03:f1:
         ce:29:6d:87:d8:ea:d3:03:99:f1:5c:c4:cc:92:90:16:70:c9:
         bc:56:fe:f9:94:2e:ce:85:b5:cc:82:29:48:ff:91:8a:79:94:
         09:6c:df:fc:c3:d6:f1:2d:e6:3c:c2:e2:87:7b:74:c0:e7:b1:
         65:ba:19:d1:fa:be:c1:5e:0c:18:89:77:53:c3:fd:d2:a7:46:
         6e:0f:43:c1:fb:ad:b7:80:ff:03:e7:b5:92:af:aa:d1:26:33:
         a9:ec:91:0d:f1:cc:c7:09:aa:d7:a2:dc:c9:67:2e:ad:50:27:
         9d:9c:b1:5b:91:27:92:73:c4:8d:aa:ee:6b:c5:3a:a6:4a:1f:
         1f:99:89:0c:52:74:1a:4a:d5:c9:97:d4:e2:52:03:88:35:69:
         61:13:e3:3c:57:64:6b:c6:4f:41:c1:b4:eb:57:83:66:99:99:
         2f:ef:c1:75:1f:24:b5:e7:fd:6d:b2:80:3e:f2:5c:3a:db:93:
         38:3b:0b:d4:15:5c:5a:f5:87:f4:f3:72:25:7d:82:19:ae:1d:
         fd:3e:6e:ca:25:64:73:26:5a:7d:d2:dc:f2:8a:19:ba:59:d8:
         91:99:3f:80:45:7f:42:c6:f2:71:88:dd:31:72:cd:52:fb:6d:
         62:83:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 23:31:19 2024 by rpki-client on console-fra.rpki-client.org