Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/21ebc5aea8a04acf004348c97500976615029847.roa
File:                     21ebc5aea8a04acf004348c97500976615029847.roa (raw, json)
Hash identifier:          D/+6sqxYa24Moazxl6KFcm/70W2WpafGy7Pqf39T/Eo=
Subject key identifier:   F9:87:C7:15:7F:B9:A8:B7:37:8D:0B:9D:32:00:E6:3D:14:98:31:6C
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       019CA5
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/21ebc5aea8a04acf004348c97500976615029847.roa
Signing time:             Wed 14 Sep 2022 16:08:27 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105637 (0x19ca5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=21ebc5aea8a04acf004348c97500976615029847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:ce:61:c6:0d:8a:41:d1:20:87:25:31:37:
                    ce:70:a2:67:5f:04:ac:df:1c:be:33:c9:d8:02:ec:
                    a1:11:b3:2b:4d:2c:37:d1:58:b9:4a:88:17:b6:4b:
                    4f:35:7a:3f:c7:e7:f3:71:d8:fe:07:2c:9c:11:d3:
                    28:e0:9d:b0:37:7a:b0:e9:37:04:27:b5:b6:fb:4e:
                    01:6a:1b:83:16:94:9a:12:35:5b:7c:6d:5d:a1:91:
                    55:ab:a7:50:1d:83:9b:6b:e1:15:67:4e:28:96:a7:
                    00:7a:68:f6:e2:96:95:73:2e:bd:79:50:43:20:93:
                    15:7a:07:6f:68:d9:0b:78:2d:94:ac:76:42:8b:00:
                    1f:b7:3b:82:c7:54:b6:dd:a8:2e:b3:c3:a0:90:88:
                    70:db:a6:bb:01:5f:9e:a2:35:be:f9:ad:08:27:f1:
                    16:bb:86:2c:68:65:94:98:c4:0e:ba:37:83:f7:1c:
                    a6:de:a3:48:f8:26:5c:8b:8d:3b:4a:1f:3d:f2:e4:
                    42:a0:e6:21:43:4f:5a:0b:5d:78:ab:2a:3d:96:41:
                    49:f0:27:58:ee:4f:38:11:3a:4c:6d:76:35:5c:fc:
                    d2:6f:fc:ec:7b:1a:b1:08:2e:8c:a9:97:bc:f1:ae:
                    e5:69:62:f2:20:12:5e:4e:1a:94:11:cf:18:d3:9b:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:87:C7:15:7F:B9:A8:B7:37:8D:0B:9D:32:00:E6:3D:14:98:31:6C
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/21ebc5aea8a04acf004348c97500976615029847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:cf:55:6b:20:24:95:3d:32:e6:d1:00:f6:57:c2:85:ad:
         6a:12:b7:55:e3:75:9c:d0:49:cc:57:e6:15:2c:b2:71:6a:18:
         4f:22:42:c3:d5:fe:06:66:84:0f:cb:be:9f:e9:f2:31:58:fe:
         b4:83:26:19:52:ea:99:7d:55:e5:7c:a9:99:85:bf:dc:98:8a:
         14:2b:e8:cd:df:2d:9b:66:ba:df:6e:f0:6c:78:5c:c6:6b:72:
         5c:ea:97:f1:ae:7d:96:16:5f:5b:d3:00:38:f1:5a:ad:73:5a:
         6a:55:5d:3f:9c:fb:cf:ce:18:03:52:18:0f:51:ba:27:57:81:
         73:a3:30:8b:ab:02:f3:a1:85:05:a9:ce:81:2d:2b:ce:c4:e8:
         2e:f6:2f:b1:cc:d6:14:dd:57:40:07:e4:c0:e8:28:bf:f6:c3:
         d8:69:c6:14:0c:0a:22:9e:8d:87:3b:8e:a4:75:d1:99:67:65:
         de:6c:5d:f0:c1:33:31:cf:c4:94:7f:d4:38:07:7a:c1:62:eb:
         11:70:0e:8a:59:cb:72:06:e0:53:c1:2d:5d:d2:d8:8b:18:7c:
         5d:ca:b7:43:fb:4c:c1:ba:a9:01:d8:72:03:11:31:f6:06:7d:
         0a:92:46:5c:45:1b:2a:92:f0:6a:12:71:3b:6f:ed:b9:ac:cb:
         e0:3d:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org