Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/4911e44b073b6471545db8f2adda57e4cd88e894.roa
File:                     4911e44b073b6471545db8f2adda57e4cd88e894.roa (raw, json)
Hash identifier:          yguORpqYoEEQU5sxTScDBGhdxJoXeGi+JXkHNs58Log=
Subject key identifier:   E7:47:3B:A0:7B:25:29:71:9A:06:CC:38:93:1E:51:4A:35:84:2B:21
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01ACEB
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/4911e44b073b6471545db8f2adda57e4cd88e894.roa
Signing time:             Wed 14 Sep 2022 16:20:40 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109803 (0x1aceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=4911e44b073b6471545db8f2adda57e4cd88e894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:50:6f:83:fd:d2:2f:67:b3:10:67:56:62:
                    c7:12:1a:49:37:e1:fa:55:02:8c:78:e9:52:97:79:
                    22:03:9f:e6:b4:1c:a2:95:2b:1c:70:59:4b:f6:3e:
                    c1:c4:27:b3:72:b4:06:27:02:f5:3c:f6:26:5e:ac:
                    ba:a8:30:9b:5a:65:38:fb:71:fb:43:a8:85:c2:76:
                    fb:88:11:52:f3:c3:29:97:a0:33:86:0d:66:fc:26:
                    91:df:24:04:e7:bc:a9:ff:13:47:7a:da:ba:33:4b:
                    c4:20:19:5f:ef:e1:d1:ce:9c:ed:bc:e5:01:3b:ff:
                    96:e2:f5:62:03:f9:0c:c9:9c:bf:66:85:72:e9:3b:
                    4d:2a:b8:fe:3a:b1:4d:89:ed:65:f9:a4:80:f4:eb:
                    fa:d6:b4:46:6e:3c:06:36:a4:15:d4:23:4e:c9:09:
                    6b:9f:c7:6b:98:8d:b7:94:6a:3f:df:87:b0:2c:69:
                    47:52:19:63:07:55:65:33:75:a1:a2:02:a9:b9:7d:
                    5c:4a:9c:35:50:eb:b3:6a:31:53:70:cc:9c:36:81:
                    d4:44:6f:68:ef:6c:3e:17:49:ba:9c:6a:ff:b1:60:
                    72:d5:0b:ef:92:d9:57:6b:5f:fc:3d:39:e8:c0:c4:
                    7c:f6:7b:77:1d:dc:6f:b3:a5:5c:40:6b:17:a9:09:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:47:3B:A0:7B:25:29:71:9A:06:CC:38:93:1E:51:4A:35:84:2B:21
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/4911e44b073b6471545db8f2adda57e4cd88e894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:fb:ad:d8:a3:b2:53:6e:c9:94:cc:bd:64:9a:df:c3:16:48:
         1d:b5:97:2a:19:57:86:e5:b0:f2:fe:1a:ca:61:a7:70:9b:c0:
         a9:7c:ca:91:1e:98:9e:38:27:e2:be:2b:35:5b:a0:9a:9b:1a:
         25:59:9f:65:9f:ee:05:8c:87:50:7c:cb:01:d5:33:52:1a:2b:
         4a:36:3d:fc:26:96:e2:4a:85:6b:07:e6:3f:f6:bd:3c:e9:1b:
         c5:83:0f:46:b5:98:14:5a:38:3a:9a:c8:5a:4a:34:39:3d:97:
         39:49:c3:03:f8:16:95:6f:5f:4c:14:40:cf:92:44:83:70:39:
         19:40:39:b1:f5:67:77:ac:5c:f0:95:8e:08:dd:e6:43:6f:51:
         58:55:7a:88:be:61:de:a6:74:7d:cd:1c:6a:26:a3:2e:c2:e2:
         a0:a4:f9:a1:e6:f4:0a:92:1d:15:6c:32:7d:19:92:aa:05:1f:
         4a:1c:4e:af:5d:3c:64:2f:1f:8e:da:80:17:73:76:ea:67:a9:
         2d:2c:20:69:57:4c:ef:a1:22:06:16:1d:1f:19:b3:4e:47:31:
         41:ba:6f:36:6d:db:19:37:f7:46:0a:29:80:b4:39:cc:38:84:
         7a:ba:52:d1:8c:c7:07:1c:95:fa:a5:02:4e:01:72:67:cc:d8:
         c2:27:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org