Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3f34dbceb6cb45ba0e285775263d26b085129c31.roa
File:                     3f34dbceb6cb45ba0e285775263d26b085129c31.roa (raw, json)
Hash identifier:          bVkkZT++Q+6Q2RAwOElBgqekCuawJp8qyll9EHsEf/I=
Subject key identifier:   DF:4E:D8:79:EF:F9:AF:70:DF:73:65:9C:2C:38:8A:FC:1B:63:8E:BF
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2AA60D
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3f34dbceb6cb45ba0e285775263d26b085129c31.roa
Signing time:             Thu 15 Feb 2024 20:41:40 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     265776
IP address blocks:        200.50.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795021 (0x2aa60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=3f34dbceb6cb45ba0e285775263d26b085129c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:6b:68:13:57:87:05:e6:9d:04:dd:a1:41:
                    c1:11:b9:f5:94:13:95:35:1e:c5:59:4a:72:37:6c:
                    ab:f3:fe:c1:07:5e:6e:0c:f0:e0:55:4e:f4:c9:48:
                    ab:8e:7b:66:7c:26:41:12:52:cf:2f:d8:59:16:9c:
                    aa:9d:25:ec:06:88:79:78:b1:50:d4:84:e6:54:50:
                    b9:c5:97:4c:b1:e2:a8:cb:4c:e5:4d:1e:72:c6:d0:
                    55:1c:59:e2:e9:96:2a:a3:68:b4:c0:6d:46:6e:38:
                    0e:f1:3c:28:a7:f2:27:9b:d8:a5:0d:f7:2f:da:94:
                    bd:57:b7:60:9a:cf:5a:99:4f:c3:d5:a9:36:a3:b7:
                    9b:f0:47:ef:1a:c4:fc:10:17:a9:84:ec:82:3f:3c:
                    b4:d4:70:2b:c3:cb:38:7d:c6:76:82:17:1a:85:cc:
                    19:76:ce:72:d3:13:9d:1f:99:bd:d3:3f:f3:90:0e:
                    15:64:bb:c9:61:7d:ff:b7:47:d9:5d:2b:08:8d:17:
                    87:63:ab:19:a5:eb:7d:3c:b7:ef:12:15:a8:06:cc:
                    d4:93:65:e5:44:89:89:f3:a3:c6:85:66:b4:80:f1:
                    43:54:fc:24:b4:01:69:24:35:1b:e4:1b:7a:78:5a:
                    e9:10:78:54:e4:7b:f7:94:fb:29:64:a0:59:b4:49:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:D8:79:EF:F9:AF:70:DF:73:65:9C:2C:38:8A:FC:1B:63:8E:BF
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/3f34dbceb6cb45ba0e285775263d26b085129c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:05:c7:e9:c1:27:ec:4a:1e:bf:fa:dd:b8:46:f7:d4:07:fc:
         34:1b:f8:af:dc:c8:00:28:9b:9a:ef:80:cd:ab:59:ab:59:bd:
         28:9e:0d:df:5d:ed:64:58:aa:1a:a5:5b:91:7f:23:8a:7e:b2:
         40:a8:33:b1:28:2f:1e:74:d1:1e:54:98:fc:ba:41:ec:8d:e2:
         bb:27:9b:83:61:64:19:d2:ed:8e:b9:64:6c:c1:25:df:bc:9b:
         25:ff:00:1d:45:18:12:b9:58:02:e8:4e:3c:25:93:e8:43:a4:
         7e:50:51:16:d7:27:6e:6e:6e:e5:29:c6:53:fb:29:28:49:9f:
         b1:70:11:dc:a4:63:70:2b:96:ed:13:4a:94:5b:71:9c:6a:f2:
         02:ae:a1:f4:e3:98:fb:3c:20:ec:96:65:ed:f1:6b:d2:c4:fd:
         53:a2:c2:17:74:6e:d6:71:ba:d5:91:23:ca:3f:b6:7f:4b:52:
         f1:d0:8d:7b:92:88:19:42:64:2c:f1:f8:b4:d7:fd:4d:22:fa:
         ff:d0:7d:f3:7d:63:a5:13:e7:5d:79:83:80:19:ce:76:3f:d2:
         58:5a:37:0c:51:a2:b9:10:57:80:c1:2a:50:d3:97:52:08:4d:
         8b:d6:52:4f:39:c9:4f:6a:79:3c:08:da:d0:5a:e5:c3:9e:5f:
         76:44:16:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org