Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/31e76ecd3f9260715dc4877078b460e5fcf0fdcf.roa
File:                     31e76ecd3f9260715dc4877078b460e5fcf0fdcf.roa (raw, json)
Hash identifier:          6zcz21CHqIe468WDf2E/KO8N+g9MZch6FVD4x0SsnfA=
Subject key identifier:   47:9F:63:99:17:25:BE:21:E8:A2:A0:3B:BF:B0:3B:FD:02:6F:A6:1C
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01C5FD
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/31e76ecd3f9260715dc4877078b460e5fcf0fdcf.roa
Signing time:             Wed 14 Sep 2022 16:29:05 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116221 (0x1c5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=31e76ecd3f9260715dc4877078b460e5fcf0fdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:26:4f:f6:82:c0:27:a0:50:4f:01:f9:d0:
                    8d:ee:5c:4d:a0:e6:fa:a3:d1:ea:d0:3e:e4:c0:6a:
                    5b:9b:0c:ab:d5:c8:da:d6:16:22:75:16:16:76:0f:
                    d1:e2:14:ec:6f:05:59:e1:a8:22:fd:52:f6:ee:60:
                    bf:13:5d:cd:59:67:72:40:0e:7a:5e:90:f4:b3:00:
                    0e:59:9f:4a:9c:f9:a1:12:6f:74:95:d5:0b:be:b1:
                    e6:c9:ac:ad:82:12:ec:a7:13:d4:e6:08:23:2d:7e:
                    84:cb:4a:cd:2d:21:8e:e5:6c:bc:c7:63:eb:b4:a5:
                    e1:72:19:99:83:6e:c1:cd:cf:80:5e:fe:ab:46:3e:
                    ff:39:4e:51:eb:c3:18:f8:43:56:2d:c9:c6:db:d6:
                    e9:18:21:ee:7b:f8:2b:8c:b1:d8:96:a2:39:9d:b8:
                    e8:85:7f:32:5e:5b:8a:bd:8a:4e:1f:64:22:72:15:
                    25:91:e9:d3:00:8c:97:aa:9f:ca:f3:1e:02:a8:c3:
                    9c:b9:78:f7:61:49:30:6f:78:f9:54:ba:6f:49:28:
                    7f:42:90:42:f3:72:ec:56:f2:3a:6e:09:c7:70:fe:
                    77:2d:18:4c:31:da:e4:c5:a5:05:ef:19:c5:92:e3:
                    5c:ab:17:6f:1e:cd:dc:44:70:2f:35:40:63:ce:bd:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:63:99:17:25:BE:21:E8:A2:A0:3B:BF:B0:3B:FD:02:6F:A6:1C
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/31e76ecd3f9260715dc4877078b460e5fcf0fdcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:1e:cf:c0:70:39:c1:92:a0:88:c8:e7:49:7b:80:8b:bc:
         f5:be:de:44:c7:fc:53:d0:7e:2e:15:81:88:0a:c0:24:8d:9b:
         25:6b:9c:ad:c6:54:9a:41:24:fc:6e:9e:b2:22:2c:13:53:3b:
         e7:3f:08:89:b3:1c:65:f3:12:a3:c6:78:98:ea:1d:70:05:ca:
         0a:d2:2e:13:7b:40:07:59:b7:33:86:f4:c8:f2:f8:ad:6a:eb:
         17:ea:7d:93:78:d5:0a:80:ea:f4:89:3f:b1:54:3c:08:df:a7:
         ca:8d:12:20:3f:64:b1:da:59:f9:85:f3:93:2f:2b:c0:84:5b:
         38:8d:7d:4a:bd:c4:4c:11:97:63:9e:91:b0:18:91:c9:41:1a:
         26:ed:df:ab:4b:6d:86:7b:3b:7e:88:bb:98:6b:22:77:4b:0e:
         0b:27:d8:bc:1d:c3:ea:46:01:8e:e4:4a:f8:0c:f3:b3:f9:94:
         20:58:1d:71:f0:b2:94:14:5a:49:cf:32:9a:e6:9e:c3:8c:e5:
         7f:bc:38:d4:2e:d7:db:8c:79:6f:5a:68:f6:f2:87:1f:2c:13:
         84:df:81:42:8b:88:ec:59:71:74:df:d3:ed:b7:97:71:fb:41:
         86:53:ce:2d:10:e0:0c:37:43:3d:11:b6:ca:67:eb:09:04:ba:
         6a:f5:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org