Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/2f3e045dc88ddf034b9fcf78f8ce0aa3b509ccd7.roa
File:                     2f3e045dc88ddf034b9fcf78f8ce0aa3b509ccd7.roa (raw, json)
Hash identifier:          AYs1BYc4573jYHNFU23w7nQaxo6eKszDJl1dOUMTiLQ=
Subject key identifier:   CC:1F:D8:BA:F2:7B:7E:BD:80:BB:58:C1:20:32:76:63:5B:C5:CD:50
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       22E3D6
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/2f3e045dc88ddf034b9fcf78f8ce0aa3b509ccd7.roa
Signing time:             Wed 21 Jun 2023 22:40:57 +0000
ROA not before:           Tue 20 Jun 2023 22:40:57 +0000
ROA not after:            Sat 21 Jun 2025 22:40:57 +0000
asID:                     262206
IP address blocks:        200.30.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286550 (0x22e3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Jun 20 22:40:57 2023 GMT
            Not After : Jun 21 22:40:57 2025 GMT
        Subject: CN=2f3e045dc88ddf034b9fcf78f8ce0aa3b509ccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:73:ec:10:92:0b:d8:f2:34:fc:34:1f:a6:
                    f6:fc:6a:26:80:8f:79:b6:57:51:ba:c1:11:f5:ee:
                    9c:c2:af:5c:6a:96:96:20:ea:47:6a:c0:08:ec:fa:
                    b3:b6:09:c8:63:ee:bd:76:01:d9:ac:c3:8a:ff:72:
                    37:79:69:08:2a:fe:70:8b:63:4f:21:c7:a5:c0:c1:
                    56:9f:2b:6b:7f:f8:11:20:86:33:6b:7a:b6:95:f0:
                    e8:80:2c:41:36:3e:3f:5e:d7:df:de:e5:bf:13:fd:
                    23:4e:58:03:2e:6a:7f:7a:62:8e:89:65:04:11:32:
                    06:e0:d3:48:6f:f8:a1:a4:19:45:96:a0:eb:7d:d6:
                    b1:f5:cf:ab:40:4b:ef:8e:fe:77:64:4b:e8:a3:9a:
                    24:7e:ba:d1:c3:25:57:73:0d:d8:ca:6a:3e:0d:48:
                    c2:b3:41:5b:2d:6c:ef:90:09:f9:62:27:3d:89:8b:
                    a6:b0:85:80:23:26:f1:37:30:38:1b:a5:df:24:e3:
                    f2:40:df:37:b9:78:90:a5:05:19:76:a5:5f:30:d7:
                    d8:37:02:1e:64:78:78:46:f0:e1:c1:07:4b:24:af:
                    89:3e:89:77:1d:85:a7:79:57:8c:25:32:81:b5:e5:
                    78:9f:63:9f:ee:2e:6e:de:6d:65:4c:1f:09:8e:3e:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1F:D8:BA:F2:7B:7E:BD:80:BB:58:C1:20:32:76:63:5B:C5:CD:50
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/2f3e045dc88ddf034b9fcf78f8ce0aa3b509ccd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:08:53:0d:85:3b:5f:6b:64:dc:de:51:78:35:da:09:57:ef:
         32:0c:ad:b4:72:8e:00:b2:c8:c0:64:b8:fa:6d:c8:cd:c5:9a:
         91:08:14:45:f0:e0:d6:1b:b3:fd:e3:91:ab:da:91:51:cd:c8:
         d8:95:6e:9e:7e:48:d8:08:eb:31:ea:fa:0f:b3:c5:46:13:bb:
         d2:e7:4b:26:09:06:c7:70:58:ad:73:77:ce:01:ab:68:4a:c6:
         07:50:d0:86:c7:88:c5:d6:e1:9c:b3:42:1c:c8:f9:1b:6d:63:
         13:12:ca:72:3c:bd:72:59:9a:f0:21:53:b7:67:a1:2c:0b:70:
         64:7d:e2:60:33:e9:fc:86:2b:f7:cc:c8:a4:de:74:05:26:02:
         fa:07:38:74:58:b4:c0:f0:28:16:ce:a2:cd:61:45:1d:07:15:
         90:96:58:23:b5:24:31:e2:01:e7:7e:2d:1f:5d:21:9b:96:af:
         fa:7e:c8:c2:79:aa:e3:39:aa:a1:47:ee:3f:84:3d:d6:c9:ba:
         a7:4d:69:1d:f7:c5:55:58:4b:f2:44:63:26:85:cf:de:cc:d2:
         77:8f:24:50:c2:e9:b6:91:15:dc:70:64:87:b2:f1:0a:a3:c5:
         3a:9b:e1:11:4b:18:02:54:8b:ac:ef:48:69:b3:b4:39:41:d9:
         72:d2:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 00:37:15 2024 by rpki-client on console-ams.rpki-client.org