Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/c1475297c6fe59969a406363d4e80cb185abfaba.roa
File:                     c1475297c6fe59969a406363d4e80cb185abfaba.roa (raw, json)
Hash identifier:          XS5WnYiJ8tDzD566IspBzwHzprDWMjvETV+phUpEIFo=
Subject key identifier:   40:F5:D4:F1:19:3C:F2:E4:8C:8B:30:67:D0:E9:1D:3F:43:DA:01:A3
Certificate issuer:       /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial:       29BE39
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/c1475297c6fe59969a406363d4e80cb185abfaba.roa
Signing time:             Sat 16 Mar 2024 22:03:33 +0000
ROA not before:           Sat 16 Mar 2024 22:03:19 +0000
ROA not after:            Fri 16 Mar 2029 22:03:19 +0000
asID:                     262206
IP address blocks:        200.30.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2735673 (0x29be39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
        Validity
            Not Before: Mar 16 22:03:19 2024 GMT
            Not After : Mar 16 22:03:19 2029 GMT
        Subject: CN=c1475297c6fe59969a406363d4e80cb185abfaba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:bd:b1:b0:3a:9c:db:65:26:21:e0:a8:92:
                    39:86:c2:45:01:07:33:00:a6:c5:62:b7:d1:f0:43:
                    60:68:fb:eb:d1:db:c0:80:cf:77:71:e9:90:ed:26:
                    c6:29:0c:a6:30:f0:95:cc:5e:34:40:8b:f4:41:4a:
                    79:7a:84:97:18:59:ab:d5:94:5a:dc:92:66:23:51:
                    1a:4c:9b:ae:1c:fd:93:e8:e1:59:f3:a3:6b:bc:c5:
                    f0:61:2e:57:67:d8:a7:b9:85:93:26:43:d4:0a:1b:
                    71:db:8c:21:e2:86:e8:a3:46:37:7a:b1:af:51:2d:
                    24:97:6c:39:9d:1a:8d:fa:54:05:d2:11:ca:3e:9d:
                    f4:b4:98:6d:26:9d:0d:d4:60:2a:8c:43:61:b3:46:
                    0b:af:0c:3c:4a:16:66:8b:bd:c6:f3:5c:dd:be:73:
                    2a:8e:5a:1a:9a:b8:ec:cb:04:88:3c:f6:b8:12:ce:
                    6c:82:34:f1:83:22:f7:24:08:8a:ae:0a:70:14:f1:
                    00:ff:2a:1f:4a:42:e6:cd:d5:54:f5:27:67:24:b4:
                    ef:b5:56:4c:f9:d3:13:4c:fc:7c:36:57:f0:0f:22:
                    aa:72:5f:7f:74:1c:4d:31:51:87:ec:ca:97:52:cc:
                    5c:9e:d6:f1:58:86:dd:97:4f:bf:f9:3a:2b:2a:c6:
                    90:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F5:D4:F1:19:3C:F2:E4:8C:8B:30:67:D0:E9:1D:3F:43:DA:01:A3
            X509v3 Authority Key Identifier:
                keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/c1475297c6fe59969a406363d4e80cb185abfaba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:49:4f:6a:54:cd:83:dc:94:8a:b1:18:e5:19:b3:39:11:
         b5:ae:23:24:44:8f:3f:76:e5:b6:26:a9:22:cd:a7:85:8b:3f:
         e8:cb:0f:bf:16:ff:e4:a4:23:bd:af:d6:ca:99:ae:19:91:cc:
         e0:d7:39:d2:34:11:ae:6e:5f:72:44:e1:6b:69:53:16:f5:c4:
         80:65:43:f5:1a:ee:4c:c8:d2:16:9b:4f:53:06:53:1c:96:b6:
         03:3f:bb:2b:60:26:7b:b6:c5:a1:cb:a2:c2:8a:f9:dc:db:d8:
         4f:bd:18:09:2f:38:55:11:35:28:46:a0:b3:cd:fb:8a:82:7c:
         11:3e:4d:f5:ea:56:f3:e6:8f:f0:ca:2c:ee:34:af:00:9b:22:
         ad:2c:79:15:e2:6f:08:1c:f8:30:0d:9c:10:11:b6:a4:a0:a5:
         9f:71:5b:79:58:f1:67:4b:2e:c3:e4:66:3b:b5:b6:db:f0:6d:
         df:6f:16:af:64:c2:e7:68:67:2f:ab:ba:44:bb:fd:f5:f8:cb:
         80:1e:2b:b8:78:3c:a4:42:24:f6:92:c6:86:96:1f:5f:98:ec:
         d2:2e:82:10:ff:91:13:fb:67:8e:55:bc:d4:3a:52:9c:64:fb:
         3d:63:52:be:19:58:78:cd:94:e6:af:dd:b1:e9:27:df:46:33:
         0c:8e:96:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org