Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7cff274e15da723e126503a6ae2ebb565c6a5e10.roa
File:                     7cff274e15da723e126503a6ae2ebb565c6a5e10.roa (raw, json)
Hash identifier:          qGReI0n3rpbzIwTSCsvZwb7Rq8Fx+e69WbUPUaZ1M8Y=
Subject key identifier:   84:10:D0:3D:3F:E2:A5:AE:B8:0A:B8:21:63:59:09:20:C4:8B:78:1C
Certificate issuer:       /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial:       299D0B
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7cff274e15da723e126503a6ae2ebb565c6a5e10.roa
Signing time:             Sat 16 Mar 2024 22:03:22 +0000
ROA not before:           Sat 16 Mar 2024 22:03:19 +0000
ROA not after:            Fri 16 Mar 2029 22:03:19 +0000
asID:                     52262
IP address blocks:        200.30.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2727179 (0x299d0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
        Validity
            Not Before: Mar 16 22:03:19 2024 GMT
            Not After : Mar 16 22:03:19 2029 GMT
        Subject: CN=7cff274e15da723e126503a6ae2ebb565c6a5e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:e8:73:26:3a:8f:1f:85:97:44:6a:43:dc:
                    31:0c:cf:cd:78:11:da:d4:88:5e:8e:d9:c6:66:c4:
                    95:3c:5e:0e:9a:b1:95:88:4c:68:34:ec:22:33:f4:
                    aa:fb:68:e1:77:15:e1:40:83:8f:f0:31:b9:e5:24:
                    1a:47:8d:3f:05:a5:93:d9:10:35:7e:8f:bc:39:53:
                    7f:35:3d:d2:41:0c:3c:41:b4:fa:1a:30:5b:75:68:
                    78:5d:db:6e:02:d9:9d:d1:c5:67:3d:64:52:88:fb:
                    92:41:63:c5:c2:07:b9:dd:87:bc:fa:11:35:bb:50:
                    51:5e:a9:30:34:50:26:29:ef:05:a0:52:18:95:94:
                    71:99:51:32:72:d2:80:1a:ce:db:bc:da:3a:a4:cc:
                    96:6c:89:8b:44:d8:b4:58:e3:b6:40:c1:53:ab:97:
                    40:c7:91:b8:84:1d:7d:fb:36:65:de:66:38:e8:9d:
                    bf:66:b3:5c:96:22:97:da:41:f1:62:67:10:f4:56:
                    16:19:cc:12:74:09:28:77:68:35:89:50:34:3c:e2:
                    2e:93:92:cf:8e:8e:df:3c:d3:dc:ee:27:b1:a5:53:
                    70:4c:84:cb:6e:a5:34:f9:59:94:83:de:15:46:86:
                    e9:05:c9:3b:b5:c2:17:45:35:ad:e4:11:b8:56:de:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:10:D0:3D:3F:E2:A5:AE:B8:0A:B8:21:63:59:09:20:C4:8B:78:1C
            X509v3 Authority Key Identifier:
                keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7cff274e15da723e126503a6ae2ebb565c6a5e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:1d:32:af:69:14:40:c4:c8:a3:38:20:a7:ef:d6:33:fd:47:
         a7:b3:96:bd:70:74:ce:ce:07:f3:0f:d5:2f:64:5e:9c:3c:c6:
         96:44:3c:40:8f:c0:d8:38:56:64:6c:2c:e3:2e:b0:74:a8:cd:
         4d:d7:6b:d1:a9:3a:20:9d:f5:2f:5c:7a:4a:33:86:3b:27:59:
         9b:d1:23:bc:e0:9d:8d:9a:97:e6:1b:da:95:24:77:13:22:18:
         b9:24:f2:8b:4d:f1:93:dc:0f:97:54:3d:c8:4b:ca:72:25:29:
         08:06:92:8c:6a:4b:d0:ae:ab:d5:12:4b:83:a4:da:41:7a:fa:
         d9:86:05:56:e9:e1:29:b8:f9:a4:d6:1f:9a:d2:ad:43:25:c6:
         38:d7:b6:67:7a:9f:29:0d:b0:31:38:b2:db:3b:21:f5:33:dd:
         2c:c5:fe:7b:5c:26:b1:54:d4:17:b0:66:2f:8e:83:ec:37:1c:
         e5:4c:70:54:52:0c:0d:28:57:6f:1d:9f:b5:9c:43:bb:13:f4:
         50:19:e4:fa:54:40:77:2f:0d:43:e9:06:b8:32:a0:1b:fc:45:
         af:d6:36:29:0f:a6:30:c2:b1:d0:7c:6c:7a:40:6f:ae:3f:0b:
         e0:8d:a6:0c:97:8c:77:7c:20:ff:7a:87:d5:7b:8d:51:1b:17:
         cc:49:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org