Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/e58979e279f018c58f81d52c2ee1cea4f61e1c8e.roa
File:                     e58979e279f018c58f81d52c2ee1cea4f61e1c8e.roa (raw, json)
Hash identifier:          IBS10Xwu35Zc5H5hPAVAx0TZ3K/pUFwQMjkH22qoTiE=
Subject key identifier:   9E:2A:16:32:A2:0B:C5:1B:11:5A:0A:1F:13:86:04:50:9B:F6:30:FF
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       208306
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/e58979e279f018c58f81d52c2ee1cea4f61e1c8e.roa
Signing time:             Fri 24 Mar 2023 08:30:40 +0000
ROA not before:           Thu 23 Mar 2023 08:30:40 +0000
ROA not after:            Sat 22 Mar 2025 08:30:40 +0000
asID:                     23383
IP address blocks:        200.30.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130694 (0x208306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 23 08:30:40 2023 GMT
            Not After : Mar 22 08:30:40 2025 GMT
        Subject: CN=e58979e279f018c58f81d52c2ee1cea4f61e1c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:f4:2d:47:42:1d:07:08:20:8f:df:35:71:
                    e6:e5:db:b1:d7:80:68:6e:d2:e9:06:21:3c:63:d3:
                    ee:17:0a:50:e4:15:07:83:3a:10:b2:c4:23:ea:0d:
                    1a:da:a8:13:a2:61:ad:d0:d3:f2:e6:5a:c6:02:7f:
                    e5:5c:f4:c5:e6:78:77:05:a0:cf:9a:a0:40:d0:8c:
                    04:39:0c:7a:a4:9c:62:72:3b:cd:65:ff:79:85:75:
                    da:ff:07:bf:2f:e2:76:98:42:41:31:67:26:c6:31:
                    70:12:d9:5b:ca:43:99:6a:06:78:f9:f9:a4:f8:3e:
                    39:34:ea:e2:23:0e:f8:62:58:53:9c:18:83:14:7a:
                    70:b0:65:1f:5b:22:e4:f0:6b:ba:cd:66:6d:ac:28:
                    5e:fe:35:fc:3a:81:0a:5d:b1:6b:a9:d8:ca:68:60:
                    af:ac:7e:7d:0f:2a:4e:56:7d:ea:0a:67:35:d6:17:
                    c2:f7:21:95:1b:3f:78:ef:a9:6e:66:e8:d7:f7:27:
                    28:a2:91:47:c7:dc:1e:d9:7d:4c:19:f0:1d:6e:ad:
                    74:d7:a6:79:b6:3f:cb:fd:74:7f:72:68:1b:ba:f3:
                    f4:f0:22:23:d0:a2:c1:78:be:60:35:26:5a:0b:90:
                    5c:49:38:a5:c9:81:9e:c5:eb:9a:f6:bd:08:59:5b:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:16:32:A2:0B:C5:1B:11:5A:0A:1F:13:86:04:50:9B:F6:30:FF
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/e58979e279f018c58f81d52c2ee1cea4f61e1c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:b6:c8:40:e0:19:33:07:38:28:57:75:ae:35:a1:a3:28:
         86:b5:a8:88:5e:a2:0f:28:f4:74:32:51:1f:ab:b3:d3:c5:02:
         2f:10:f0:c3:99:43:fc:52:1a:8b:50:6c:fd:df:ec:e9:02:ad:
         4b:4e:61:cb:42:d4:e9:c4:b2:fc:a5:57:4b:f8:17:24:d5:cd:
         ca:77:5c:88:45:81:5e:59:04:48:d6:01:5a:3c:f4:f6:ef:13:
         df:0d:ee:bc:e5:26:19:b7:9a:63:2d:59:13:8e:32:fc:3a:9a:
         4b:eb:8e:08:e4:79:df:28:33:36:4c:ca:94:bf:9d:1f:e2:e2:
         38:59:8f:07:fc:8e:44:ce:21:09:04:49:a5:d2:d4:16:7e:9e:
         53:d8:0c:72:fc:98:55:c2:2c:78:ce:46:5f:44:00:ca:1d:55:
         30:2c:84:79:fa:b9:14:fd:3d:76:bd:b9:70:cc:b4:30:a6:bb:
         e1:5f:9b:d1:f6:19:21:34:89:88:1e:2e:31:69:a1:cf:fc:e9:
         18:48:fb:ab:fa:c8:71:b7:7e:2b:ae:39:6f:65:b1:4c:43:3e:
         c2:df:57:18:03:02:c4:8e:72:a3:85:da:11:ca:74:ba:20:66:
         4f:2b:da:d1:7a:54:bb:09:7d:35:65:28:37:fa:51:5e:9a:38:
         66:0f:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 00:39:15 2024 by rpki-client on console-fra.rpki-client.org