Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7dd42f5281fa2e189cc96c9e9490df39b04879fc.roa
File:                     7dd42f5281fa2e189cc96c9e9490df39b04879fc.roa (raw, json)
Hash identifier:          CsolFtnwSKrz4pHgPfYt3zWoW8Z9ehDrkOUpz1cxtfs=
Subject key identifier:   E7:32:E8:4D:3E:82:DF:48:95:E9:1B:E6:B2:55:3D:4C:EE:72:A3:AC
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       2982C5
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7dd42f5281fa2e189cc96c9e9490df39b04879fc.roa
Signing time:             Sat 16 Mar 2024 08:30:05 +0000
ROA not before:           Sat 16 Mar 2024 08:30:05 +0000
ROA not after:            Mon 16 Mar 2026 08:30:05 +0000
asID:                     262197
IP address blocks:        200.30.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2720453 (0x2982c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 16 08:30:05 2024 GMT
            Not After : Mar 16 08:30:05 2026 GMT
        Subject: CN=7dd42f5281fa2e189cc96c9e9490df39b04879fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f1:cf:34:c3:9a:89:98:e9:c9:d0:23:b1:7f:
                    9a:22:48:e1:2f:a5:a1:9f:b6:39:6f:cf:33:73:39:
                    1d:d9:30:75:a1:89:e2:fe:01:56:13:53:e4:b2:9f:
                    b3:e5:d5:e7:a4:52:51:05:7d:47:6e:10:5b:51:5f:
                    74:45:bc:38:03:2a:f4:0c:a0:95:4c:cb:c7:cd:21:
                    39:e4:1a:6a:29:f6:4d:84:d2:52:48:96:53:ea:c0:
                    5b:35:15:e3:97:88:fc:71:e8:c1:53:6f:17:5a:32:
                    ad:22:83:ef:ce:fc:a6:12:dc:b0:68:2a:c8:e5:79:
                    e9:34:b8:7a:10:d8:78:09:8c:11:b8:db:a7:4c:6b:
                    5d:10:da:96:f9:e2:93:be:3b:14:09:0d:36:da:0f:
                    78:e2:1f:85:46:44:b9:aa:9f:72:62:29:f8:ea:4f:
                    fc:4c:83:85:08:a7:0a:e0:ef:05:41:da:7f:d1:b0:
                    a6:40:94:c8:9d:16:03:9f:5e:5d:47:f0:79:78:0d:
                    73:0b:5e:fc:d5:2f:94:04:0b:3b:56:8f:8e:1c:9e:
                    bb:e9:9f:3b:b4:46:38:16:3f:2f:e5:75:e7:f7:19:
                    19:c2:ed:83:9a:f9:ca:76:3b:19:5d:14:99:1c:f7:
                    1f:e2:14:64:50:5c:2d:65:5a:3d:1a:e9:a3:0d:2e:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:32:E8:4D:3E:82:DF:48:95:E9:1B:E6:B2:55:3D:4C:EE:72:A3:AC
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7dd42f5281fa2e189cc96c9e9490df39b04879fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:8b:6e:e5:08:87:bc:2a:e1:d7:18:66:28:d3:0c:0f:ac:ea:
         57:45:27:90:d2:da:bc:67:ab:50:be:8f:ed:df:1d:56:5f:d8:
         ad:ed:ac:c5:90:ac:b2:9a:d1:8f:70:62:38:0f:5b:af:38:e6:
         d1:74:7b:2b:62:17:cd:b2:e2:58:ec:57:96:42:09:3e:38:43:
         5b:7b:f5:c7:8f:46:fa:90:26:ec:ef:2f:62:31:60:56:af:44:
         d4:13:c3:af:3a:09:0e:60:f6:da:2c:db:ea:aa:ef:a3:44:d4:
         b4:d5:63:a8:86:90:c4:66:65:4c:5d:af:d6:ba:b9:5a:80:a7:
         f2:bf:3e:0f:a5:09:a9:2b:03:8e:3d:97:06:8c:28:ac:02:7d:
         10:2f:17:fe:ee:20:88:ec:cd:58:5d:39:79:52:1d:ec:80:9c:
         27:54:7f:77:ff:4d:eb:cc:3d:7c:05:3d:33:03:e2:e2:bc:59:
         6b:11:0b:2b:79:70:b0:e9:ea:b1:5b:1d:f7:a0:16:d1:35:a5:
         7f:c3:64:fd:7e:f8:4a:df:9c:bb:96:d2:dc:a7:b7:e9:3a:df:
         9a:76:57:bf:34:7e:44:e0:cb:2c:26:26:3f:58:1e:59:d2:d0:
         79:32:0c:da:aa:13:6d:77:0b:46:8a:a5:72:6f:0f:4b:72:53:
         3b:97:10:d1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKYLFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
YWIzYTFiMWQzMGIxNGI2ZDlhM2ZlMzljZWZlODY3ZDYwZmYzNTAwHhcNMjQwMzE2
MDgzMDA1WhcNMjYwMzE2MDgzMDA1WjAzMTEwLwYDVQQDEyg3ZGQ0MmY1MjgxZmEy
ZTE4OWNjOTZjOWU5NDkwZGYzOWIwNDg3OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkPHPNMOaiZjpydAjsX+aIkjhL6Whn7Y5b88zczkd2TB1oYni
/gFWE1Pksp+z5dXnpFJRBX1HbhBbUV90Rbw4Ayr0DKCVTMvHzSE55BpqKfZNhNJS
SJZT6sBbNRXjl4j8cejBU28XWjKtIoPvzvymEtywaCrI5XnpNLh6ENh4CYwRuNun
TGtdENqW+eKTvjsUCQ022g944h+FRkS5qp9yYin46k/8TIOFCKcK4O8FQdp/0bCm
QJTInRYDn15dR/B5eA1zC1781S+UBAs7Vo+OHJ676Z87tEY4Fj8v5XXn9xkZwu2D
mvnKdjsZXRSZHPcf4hRkUFwtZVo9GumjDS7/5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOcy6E0+gt9Ilekb5rJVPUzucqOsMB8GA1UdIwQYMBaAFF9YxoPO1cgOD9/b
FLkd3K884qsrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FhYjNh
MWIxZDMwYjE0YjZkOWEzZmUzOWNlZmU4NjdkNjBmZjM1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWE2NDZhNWEtZTAzYi00OGVjLThlYzMtODA2NWNj
ZTEwZTllLzdkZDQyZjUyODFmYTJlMTg5Y2M5NmM5ZTk0OTBkZjM5YjA0ODc5ZmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYTY0NmE1YS1lMDNiLTQ4ZWMtOGVjMy04MDY1
Y2NlMTBlOWUvN2FhYjNhMWIxZDMwYjE0YjZkOWEzZmUzOWNlZmU4NjdkNjBmZjM1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgevTANBgkqhkiG9w0BAQsFAAOCAQEAUotu5QiHvCrh1xhm
KNMMD6zqV0UnkNLavGerUL6P7d8dVl/Yre2sxZCssprRj3BiOA9brzjm0XR7K2IX
zbLiWOxXlkIJPjhDW3v1x49G+pAm7O8vYjFgVq9E1BPDrzoJDmD22izb6qrvo0TU
tNVjqIaQxGZlTF2v1rq5WoCn8r8+D6UJqSsDjj2XBoworAJ9EC8X/u4giOzNWF05
eVId7ICcJ1R/d/9N68w9fAU9MwPi4rxZaxELK3lwsOnqsVsd96AW0TWlf8Nk/X74
St+cu5bS3Ke36TrfmnZXvzR+RODLLCYmP1geWdLQeTIM2qoTbXcLRoqlcm8PS3JT
O5cQ0Q==
-----END CERTIFICATE-----
Generated at Sun Mar 17 00:37:15 2024 by rpki-client on console-ams.rpki-client.org