Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/2684de6aa104c7b58a726979e3a2035fdcdafdb2.roa
File:                     2684de6aa104c7b58a726979e3a2035fdcdafdb2.roa (raw, json)
Hash identifier:          xAkCxu/gojoHdeJscm7QCFNqX4CMBo6It+6oqSuXCyU=
Subject key identifier:   A9:3A:30:78:01:30:35:AD:ED:B8:1E:35:D7:08:34:23:A6:04:E0:E5
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       019398
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/2684de6aa104c7b58a726979e3a2035fdcdafdb2.roa
Signing time:             Wed 14 Sep 2022 14:44:37 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103320 (0x19398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=2684de6aa104c7b58a726979e3a2035fdcdafdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:eb:65:f1:a3:a0:73:4d:61:09:e8:e6:53:
                    fa:3d:f8:9f:54:59:af:ad:a3:27:13:20:4f:43:53:
                    96:b0:78:e8:6e:40:5c:6a:56:0c:e9:eb:f7:d0:1f:
                    81:82:a9:1f:27:71:4d:e6:c1:a9:28:b6:a4:a2:ea:
                    f2:83:5b:00:dc:6e:df:b9:1c:a9:e9:a3:df:f7:85:
                    df:94:03:ea:fe:5a:7e:fe:33:a9:e9:9f:7c:24:58:
                    79:78:15:5c:52:5b:17:e7:58:59:42:e1:cd:57:ef:
                    3b:f1:7e:61:14:ad:bc:52:4a:1f:ea:bd:64:33:68:
                    0f:49:e9:ed:7b:b5:db:92:1a:83:4e:6a:e0:4b:fe:
                    89:29:41:5e:d2:b0:97:21:d5:13:76:7a:ff:9d:fd:
                    c2:68:4d:03:6c:7a:1e:0c:de:48:a3:be:ea:0e:0c:
                    9c:cf:b8:b2:e0:fa:f9:a1:ca:c3:41:d5:21:d1:9b:
                    86:02:9a:26:53:ea:dc:c9:20:02:11:82:b5:55:82:
                    f8:99:3f:68:77:6c:ca:04:66:a8:89:e8:a7:24:94:
                    e4:1c:ab:85:7f:04:c6:37:c6:ce:97:72:a7:41:fc:
                    7b:a1:0c:45:d8:56:f5:04:b0:d6:37:fb:6a:87:1b:
                    22:c1:14:11:e4:27:e1:88:a7:fd:bd:95:fb:48:48:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3A:30:78:01:30:35:AD:ED:B8:1E:35:D7:08:34:23:A6:04:E0:E5
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/2684de6aa104c7b58a726979e3a2035fdcdafdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:62:bb:70:2b:7b:18:c5:9c:cf:20:5e:ae:b5:fc:45:12:c7:
         0a:ee:40:c9:b1:c7:90:1f:23:7c:08:7d:9f:48:33:c2:36:ab:
         e4:7e:f6:e8:79:4b:66:c7:d2:e5:fe:72:a2:83:95:86:e8:3c:
         a2:42:8c:73:55:06:5b:2c:66:19:74:94:f1:0b:b1:ac:a4:97:
         6f:9a:2d:ae:e1:ac:59:65:5e:e9:42:4c:8e:ff:e3:dd:cc:3a:
         0d:f6:3b:32:18:a9:2c:bc:17:81:64:36:a3:1f:a7:37:a0:20:
         b4:ca:4c:5c:cb:1e:a8:8a:6b:08:5d:7c:65:05:ea:a5:70:9c:
         bd:6c:e1:52:9c:c8:5f:4b:cc:23:be:48:fd:3d:b6:ed:73:cd:
         e0:5a:8b:04:23:92:9b:03:73:2d:d5:91:e1:a5:c2:d6:8e:5c:
         b3:96:94:9a:de:23:17:0c:72:87:5f:68:5d:55:c9:93:b4:ca:
         32:7a:2a:28:a4:0f:03:0d:5b:f8:02:46:13:21:38:be:66:d2:
         8a:e7:a7:4c:66:57:96:89:48:1a:5b:81:f3:6b:54:a0:79:c6:
         6c:82:9d:e4:c4:1d:9a:e7:a5:0b:1a:51:b0:a2:19:4a:a0:81:
         8f:87:85:47:61:af:8e:42:45:8b:59:3a:ed:36:e4:f8:d3:87:
         c5:1e:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org