Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/4d25c23cdf25af5e7cf4c45414057fa2bf8a095c.roa
File:                     4d25c23cdf25af5e7cf4c45414057fa2bf8a095c.roa (raw, json)
Hash identifier:          uDwJNrIxWi0rMU2U+HlRh/5TlRFCJNUMBO70msYncsk=
Subject key identifier:   5E:6B:32:21:36:60:E6:98:58:E6:52:7C:FA:6D:01:C5:E7:4C:16:F1
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0160AD
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/4d25c23cdf25af5e7cf4c45414057fa2bf8a095c.roa
Signing time:             Wed 14 Sep 2022 14:36:36 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90285 (0x160ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=4d25c23cdf25af5e7cf4c45414057fa2bf8a095c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:76:8c:27:35:d7:6d:7f:b7:ac:d9:0c:de:
                    e3:cc:a5:85:97:a5:33:c7:48:12:d0:86:7a:8d:fa:
                    4e:dc:2f:2a:c2:b9:b5:fe:56:f0:32:9d:04:19:84:
                    ce:3e:aa:f1:9d:fd:a3:c9:34:dd:90:3a:33:42:fb:
                    86:4a:40:b0:5f:ae:bf:cd:9d:ad:9b:0a:58:d9:18:
                    fc:f8:78:30:1a:98:af:53:80:21:5a:30:3c:bf:67:
                    2a:21:b0:00:76:eb:f4:23:21:0a:a9:05:db:89:f4:
                    c7:8d:57:be:be:2f:a8:f5:05:73:87:19:49:19:da:
                    6e:2f:30:d3:de:54:ca:02:f9:87:82:59:1d:b0:8e:
                    54:44:3d:cf:70:ba:e5:05:2c:c4:a5:fc:ed:cd:12:
                    94:7f:54:b6:9f:9f:1f:07:77:dc:41:7e:dc:d9:12:
                    f1:2f:3d:06:25:94:15:d9:54:e6:a4:85:4f:9e:82:
                    85:6f:cd:22:37:11:fc:c4:0f:76:f5:c7:6b:24:cf:
                    9f:97:43:29:f6:44:29:a3:c3:76:50:b1:01:f9:58:
                    01:55:71:b5:b2:65:be:dd:e4:ef:4d:a8:bb:aa:37:
                    00:c3:9b:aa:0d:ff:70:ff:10:73:d8:95:49:5f:8d:
                    df:78:27:38:45:d2:50:e5:a1:61:04:cc:a5:e3:bd:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6B:32:21:36:60:E6:98:58:E6:52:7C:FA:6D:01:C5:E7:4C:16:F1
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/4d25c23cdf25af5e7cf4c45414057fa2bf8a095c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:37:fa:b4:cd:25:7e:59:50:5e:6e:de:fb:26:85:71:94:de:
         70:9b:c0:6e:19:9e:de:c1:17:07:6b:28:00:10:7b:00:2e:e9:
         e7:00:77:14:e3:72:be:82:12:91:f5:3f:4a:98:b1:5a:9b:80:
         3d:3d:99:07:72:1b:e2:ca:4c:35:fb:bf:a1:d8:83:11:57:18:
         0d:de:f1:d5:e3:e8:3d:79:06:35:58:3e:29:61:d0:af:31:ff:
         38:10:63:57:15:dd:18:58:01:33:51:12:f0:d7:43:59:45:28:
         e8:8a:4b:ea:fe:89:3a:ef:cb:d5:f4:ec:6b:fa:32:a3:e1:7d:
         ca:23:67:e8:a3:e9:87:7b:89:56:a8:59:95:a7:2c:a6:19:69:
         fd:37:53:f8:ae:21:a4:b6:a0:9e:9e:4f:b0:c7:70:22:ff:e5:
         d5:30:57:1b:6a:6a:85:38:1a:c3:94:ae:42:c4:bd:15:65:0a:
         22:72:c3:32:0c:a5:3c:39:0b:31:f8:b9:ec:7e:b0:c1:79:e4:
         97:6d:7a:0b:56:fc:b1:82:55:04:1b:dc:ea:10:6f:80:70:5a:
         10:12:30:36:6f:f4:5c:5e:20:88:c8:cd:c8:98:e5:29:ff:c4:
         57:0f:90:f2:e1:84:5e:99:62:0f:0d:40:61:fb:f2:91:a1:6d:
         8e:1a:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org