Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/19c1f8fa4741dc7bb64aa9aa5da2cb8d4bf207b2.roa
File:                     19c1f8fa4741dc7bb64aa9aa5da2cb8d4bf207b2.roa (raw, json)
Hash identifier:          Fr+38ohwXAi3XIicMbWvUlIT98Lqs6h7yqnKmYNsrsw=
Subject key identifier:   C9:31:D7:7B:99:28:17:95:7D:93:19:F7:16:2A:93:30:2C:7D:B0:25
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01BE94
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/19c1f8fa4741dc7bb64aa9aa5da2cb8d4bf207b2.roa
Signing time:             Wed 14 Sep 2022 16:23:28 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114324 (0x1be94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=19c1f8fa4741dc7bb64aa9aa5da2cb8d4bf207b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:76:e3:3c:55:f3:5e:cb:fb:ba:7c:20:3c:
                    96:a0:da:d3:13:81:52:07:6f:10:04:e8:e9:e6:7e:
                    65:7e:e6:9b:91:ce:71:5c:8d:f8:22:e0:56:02:17:
                    30:a1:81:3b:6c:1f:b6:90:11:b5:2f:a4:f8:38:89:
                    50:64:2b:d1:91:67:bb:3d:ea:1f:44:39:65:b3:31:
                    eb:50:88:29:8c:bc:82:b5:3e:44:f6:72:52:4a:80:
                    03:96:30:f1:f1:74:d6:37:c7:d3:1a:0d:99:a0:6f:
                    33:d0:57:8a:6c:14:80:d5:5b:64:4b:7a:4f:e1:d4:
                    09:39:10:7d:77:00:0e:94:97:58:dd:a4:f3:cc:ad:
                    0c:e4:12:32:4e:34:80:39:c8:73:df:5f:c1:d5:c7:
                    55:62:75:3b:7a:59:d9:1c:ba:2a:fe:70:08:bd:01:
                    ca:8d:0c:d5:c5:de:9b:25:29:a4:26:0a:90:1b:86:
                    1a:a0:3d:4a:74:83:2d:53:d8:79:6a:72:94:b2:d8:
                    6e:7b:e8:f6:5a:56:7f:2c:4c:28:e5:2f:3c:d2:f1:
                    3c:ce:8a:79:1c:b9:79:b6:39:ca:6d:ff:fc:43:34:
                    7a:30:97:72:97:7e:84:70:36:0e:c2:78:80:81:6e:
                    7b:a2:d8:99:b7:ea:fc:8d:e7:8e:e0:11:bc:d0:e3:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:31:D7:7B:99:28:17:95:7D:93:19:F7:16:2A:93:30:2C:7D:B0:25
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/19c1f8fa4741dc7bb64aa9aa5da2cb8d4bf207b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:d9:ee:9e:29:d1:3b:7f:40:09:41:6e:bd:71:b7:e0:80:
         24:30:63:b2:68:23:c8:3d:e1:3f:e5:56:41:32:b0:9e:c3:fd:
         1f:cd:83:23:c5:4c:b9:b8:47:1a:02:df:50:44:de:b6:23:64:
         35:54:b2:f8:2b:33:d4:b2:0a:1e:f2:21:f8:46:15:a0:ec:7d:
         cc:11:57:5a:fc:ca:86:79:91:39:18:f9:61:83:73:c8:55:75:
         b6:94:07:19:de:29:22:77:c8:1a:c4:6b:1a:12:3e:37:4e:dc:
         78:fa:55:ba:c1:bd:4e:66:99:6f:71:9b:ae:02:59:82:4d:83:
         ec:9b:76:31:8c:11:e3:e9:4d:53:b5:39:92:d6:a9:5a:f3:b2:
         56:f6:a9:62:0c:08:03:5d:90:0f:53:50:60:ff:60:a1:ff:da:
         e4:a2:a3:02:49:ac:76:4c:a7:a2:46:e4:d0:8c:16:ff:9b:5b:
         14:2a:4f:5d:80:40:20:9e:c4:9e:7c:9a:f6:cb:d3:c6:08:39:
         36:02:b4:8a:8c:46:03:ac:59:a1:3d:79:28:3b:6c:10:0e:a1:
         d2:55:5e:28:30:82:df:cf:3a:d1:cb:38:19:0c:1b:e0:c7:f3:
         d5:a3:17:0f:d3:e7:19:60:6d:89:fd:57:e0:06:69:b2:f2:be:
         05:21:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org