Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dea724e-0889-413f-aa10-8e248f5796bb/2d15e0543ef63388db138f1e85c54c4c14e025c9.roa
File:                     2d15e0543ef63388db138f1e85c54c4c14e025c9.roa (raw, json)
Hash identifier:          bFMmoiMZBQgCaYvARvKqLq3sBN9ZMJa1u4qpixWx9Vk=
Subject key identifier:   3F:7F:57:F8:25:AF:34:E4:A0:E1:F4:AE:F9:6F:00:CF:E1:71:39:67
Certificate issuer:       /CN=cb825f37648a160212f8d49a084ea3a9799f3a79
Certificate serial:       022D69
Authority key identifier: D3:C2:99:FE:00:DA:0E:AA:46:E4:70:5D:03:6E:8A:55:FE:E7:EE:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb825f37648a160212f8d49a084ea3a9799f3a79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dea724e-0889-413f-aa10-8e248f5796bb/2d15e0543ef63388db138f1e85c54c4c14e025c9.roa
Signing time:             Mon 02 Oct 2023 17:00:53 +0000
ROA not before:           Sun 01 Oct 2023 17:00:53 +0000
ROA not after:            Thu 02 Oct 2025 18:00:53 +0000
asID:                     272957
IP address blocks:        200.150.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142697 (0x22d69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb825f37648a160212f8d49a084ea3a9799f3a79
        Validity
            Not Before: Oct  1 17:00:53 2023 GMT
            Not After : Oct  2 18:00:53 2025 GMT
        Subject: CN=2d15e0543ef63388db138f1e85c54c4c14e025c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:fc:42:8b:0e:fe:7b:6c:97:92:23:b8:a4:
                    b0:44:00:8c:da:29:19:eb:7d:0a:45:76:b4:a4:70:
                    b3:d4:ea:cc:6f:69:3d:10:45:fc:0e:ed:9f:cc:bb:
                    4d:6c:d2:c7:95:9b:e6:af:10:49:d1:e2:4b:26:a0:
                    25:b6:45:b8:e4:80:81:1f:a4:bf:5f:a6:e9:17:71:
                    cd:ba:5c:fb:3f:9e:29:4b:2e:12:1b:0b:e5:5c:d6:
                    4d:63:92:94:f1:c6:2a:fe:c6:06:e0:07:a5:8b:b8:
                    34:80:f6:4b:d6:e2:d6:cf:33:43:33:34:8b:9d:3d:
                    a0:06:15:58:30:bb:bc:7f:5a:8c:19:57:00:f2:f6:
                    9b:a5:aa:d9:71:ec:fb:6f:99:9c:10:e8:3c:a0:97:
                    a3:ef:a5:5b:95:e5:68:fe:14:d8:d6:d6:0a:f8:3f:
                    5c:da:e9:a7:8f:9e:92:fd:2f:a4:bf:b0:40:40:14:
                    90:e3:94:eb:8f:be:b7:b0:32:2d:fd:0a:e4:7c:a3:
                    43:28:48:a3:44:79:63:b7:91:55:5b:2e:ea:8b:31:
                    47:c6:91:69:8d:c9:a0:de:20:17:19:22:50:d6:0d:
                    01:4b:26:3c:9e:2e:d1:43:dd:30:a9:eb:72:8c:f4:
                    80:64:71:99:3c:46:be:c7:81:98:07:94:6e:d9:bd:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7F:57:F8:25:AF:34:E4:A0:E1:F4:AE:F9:6F:00:CF:E1:71:39:67
            X509v3 Authority Key Identifier:
                keyid:D3:C2:99:FE:00:DA:0E:AA:46:E4:70:5D:03:6E:8A:55:FE:E7:EE:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb825f37648a160212f8d49a084ea3a9799f3a79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dea724e-0889-413f-aa10-8e248f5796bb/2d15e0543ef63388db138f1e85c54c4c14e025c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dea724e-0889-413f-aa10-8e248f5796bb/cb825f37648a160212f8d49a084ea3a9799f3a79.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:25:18:cc:20:94:85:8e:88:2f:d2:20:ae:c0:82:0d:51:
         40:d7:01:bd:6e:85:1a:3e:cb:a1:28:38:ba:7c:df:0f:93:e4:
         4c:16:d1:42:17:51:43:da:11:69:e3:04:29:c7:2a:a3:cc:07:
         fc:ad:45:13:ac:ff:b4:0a:d8:a2:db:32:c6:79:ef:77:62:01:
         d3:bd:f8:53:da:a7:14:fb:a7:f3:21:06:00:92:fd:33:ec:d8:
         9b:b1:78:4a:08:2c:9f:0d:02:46:63:77:14:cd:34:52:db:24:
         1b:1c:47:47:26:09:8b:88:24:26:c4:b6:29:4c:05:55:f4:71:
         74:fa:31:82:ca:80:ee:e8:62:16:20:b3:93:bd:db:d8:ae:9c:
         eb:12:bc:59:6e:b6:a3:81:de:82:4a:77:41:5e:ce:d3:d7:03:
         5e:6b:68:bd:e7:38:4e:ef:b8:4d:19:e3:2e:14:f0:f6:cf:88:
         64:89:7e:96:56:ef:d7:83:db:6b:6a:17:d3:c7:2f:e8:7b:36:
         2d:57:e8:26:9b:ad:4e:97:04:1c:06:b2:22:90:4f:aa:61:4d:
         ee:f8:86:85:9a:a0:5c:94:d5:eb:18:06:18:42:a9:7d:02:28:
         b0:9a:c4:12:57:ed:29:9c:2e:a9:ec:fc:d7:ca:2a:3e:d7:dc:
         70:6b:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org