Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7a4df59ae1cd651c2d100c050ff12c8cd81ab100.roa
File:                     7a4df59ae1cd651c2d100c050ff12c8cd81ab100.roa (raw, json)
Hash identifier:          4Rfj7pRvE0hhxGeqYPzsova2KEdGpi3vmfl7u4qUpRI=
Subject key identifier:   91:A6:77:B5:72:E4:01:03:C8:22:F7:B5:F9:A8:75:45:18:55:13:DC
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       298C23
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7a4df59ae1cd651c2d100c050ff12c8cd81ab100.roa
Signing time:             Sat 16 Mar 2024 17:41:07 +0000
ROA not before:           Wed 18 May 2022 03:00:00 +0000
ROA not after:            Sat 18 May 2024 03:00:00 +0000
asID:                     272130
IP address blocks:        200.30.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722851 (0x298c23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: May 18 03:00:00 2022 GMT
            Not After : May 18 03:00:00 2024 GMT
        Subject: CN=7a4df59ae1cd651c2d100c050ff12c8cd81ab100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:77:2f:e8:93:a5:f0:a2:0a:10:04:87:60:
                    45:a9:05:7f:39:0f:f1:2b:62:f0:3e:04:27:0f:e9:
                    0a:71:2a:43:a8:3d:13:aa:2f:d9:ce:44:2d:fe:5f:
                    7e:c8:46:9d:dd:bb:bb:37:b7:ba:b9:80:19:90:58:
                    c6:f2:f0:20:98:81:68:1b:ad:cf:68:e0:eb:4c:5d:
                    86:6c:fc:e0:06:16:e9:de:c6:72:b8:eb:f2:0a:4a:
                    f1:ec:0c:18:b4:9f:93:23:7b:5b:5e:13:75:40:51:
                    7a:31:b4:90:60:39:f5:69:03:34:ff:d4:ec:f0:7e:
                    aa:a3:98:bf:a9:af:e9:02:a8:38:3c:8f:4a:c7:81:
                    21:8a:54:5a:92:9a:b4:1d:be:c0:2e:c2:4e:0a:b7:
                    2e:9c:f1:2a:3f:5c:f3:79:cb:26:3e:86:16:52:03:
                    a4:82:b0:89:8b:8d:cf:85:0d:f4:54:33:f7:96:92:
                    4c:56:83:45:4c:72:be:7d:db:f0:92:f9:2c:cc:c6:
                    48:3d:c6:1a:5d:0a:10:cb:f0:cf:6c:3b:69:16:f9:
                    a5:96:ab:9c:cb:42:d4:8b:44:23:2b:12:93:85:9c:
                    18:16:08:9a:2f:e1:20:5c:db:43:95:9d:70:41:24:
                    0c:1b:be:7d:17:e5:f2:72:b5:71:39:69:4f:7e:0d:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A6:77:B5:72:E4:01:03:C8:22:F7:B5:F9:A8:75:45:18:55:13:DC
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7a4df59ae1cd651c2d100c050ff12c8cd81ab100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:27:b3:b8:d9:8c:91:0e:02:f8:36:67:ab:30:c0:7b:73:
         e3:14:b4:1b:7c:99:91:ac:b4:b6:1a:ba:2f:24:c4:4d:b1:b6:
         e1:0b:ae:a7:dd:c7:08:82:5c:80:be:a4:3c:37:d0:9a:28:74:
         db:1c:13:b2:4c:77:a2:16:06:b1:de:2b:2c:b9:12:1a:24:2d:
         d3:ac:82:88:0f:a2:06:ff:e5:3c:fc:6b:e5:7a:71:5c:61:e9:
         d9:2c:bc:16:94:27:39:a1:96:ea:d5:21:7b:8e:2b:6a:af:53:
         28:e0:c4:ac:f2:9d:c3:8f:fd:0f:fd:67:2d:29:90:b0:04:9d:
         02:a8:c8:46:1e:da:44:7f:cc:36:ff:59:f4:a6:54:f3:af:b4:
         74:b4:18:09:c5:7f:b6:ab:07:86:f7:97:98:0e:f7:8d:cf:ca:
         87:ab:0e:a7:49:76:84:f8:56:8e:bb:1e:16:79:f5:d2:f8:bf:
         dd:03:98:8b:2f:8b:eb:9d:37:c6:bb:d2:f4:8b:72:c0:9e:f8:
         1e:33:28:80:8d:f2:90:0a:68:b9:c0:13:c9:71:b4:7a:28:f4:
         23:cd:29:81:c3:9a:b4:60:2b:e3:68:55:d5:28:84:ec:dd:dc:
         ee:69:20:91:14:bf:88:98:e5:5c:8d:08:49:43:2e:a6:80:19:
         94:58:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 00:39:15 2024 by rpki-client on console-fra.rpki-client.org