Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/6cd93a5c518973fa05f2923d34dbd95c4a3d0077.roa
File:                     6cd93a5c518973fa05f2923d34dbd95c4a3d0077.roa (raw, json)
Hash identifier:          2jgJOzOvJ3khHKq+D2JjzlTykaz5tPpyzgr1Wk8UU9o=
Subject key identifier:   DF:EB:B2:8D:AD:A1:9A:98:79:1C:1F:9B:C6:AD:33:8A:01:12:17:A0
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0181F9
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/6cd93a5c518973fa05f2923d34dbd95c4a3d0077.roa
Signing time:             Wed 14 Sep 2022 14:42:22 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98809 (0x181f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=6cd93a5c518973fa05f2923d34dbd95c4a3d0077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:fd:c4:5d:6b:f0:7e:f6:ca:5e:f9:5a:bf:
                    3d:c0:6c:da:97:77:ac:b4:04:86:43:9e:28:8f:24:
                    4e:a3:d8:e4:5b:29:c3:43:14:67:83:b2:16:58:b1:
                    b5:30:5f:bf:78:85:b9:ce:aa:9b:cc:2b:41:f7:9b:
                    10:be:94:4a:b7:77:60:b0:01:43:fe:05:7a:1e:3d:
                    91:c8:63:18:6b:65:b4:09:79:81:9e:4f:19:59:75:
                    1f:c5:01:c7:31:f2:51:13:7c:9b:94:76:dd:cc:24:
                    f9:b2:68:3c:dc:7f:98:47:9a:d4:6f:49:64:4f:31:
                    54:52:3a:fa:08:bc:d7:97:40:6d:ae:a6:ad:af:67:
                    40:6d:fe:88:4b:1c:e5:b3:c7:91:2d:ee:af:7e:e1:
                    6d:e8:fe:f1:03:93:a8:d6:59:bb:55:bc:17:3a:01:
                    96:94:83:34:06:33:6f:ef:eb:61:2a:cb:24:88:41:
                    54:8a:28:6a:38:08:53:79:9c:fe:49:4a:9a:6f:f8:
                    2b:bf:de:a8:a3:fb:d0:df:56:52:f7:69:57:77:0a:
                    47:f0:9e:2d:c8:58:57:cb:54:f6:43:ef:67:35:89:
                    52:ae:99:f7:b0:8c:83:32:c3:8c:51:a9:bb:3c:43:
                    b3:f8:85:4d:dd:c4:ae:89:2a:15:a7:a3:15:c8:6e:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EB:B2:8D:AD:A1:9A:98:79:1C:1F:9B:C6:AD:33:8A:01:12:17:A0
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/6cd93a5c518973fa05f2923d34dbd95c4a3d0077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:d6:94:b9:05:f7:0e:9e:28:be:55:10:a7:b9:fc:5b:47:
         cc:73:4e:13:19:35:af:1f:4a:e8:63:bb:b0:81:ed:fb:1c:9b:
         71:4d:13:0f:21:93:cc:17:e2:92:e7:84:ac:b8:95:6b:1e:61:
         7c:13:9a:a1:83:47:11:c9:e7:c8:53:44:0f:26:d3:07:cf:d3:
         dc:7a:02:9f:31:fd:e8:37:7a:3b:74:d6:14:fd:6b:90:24:ca:
         1b:f6:25:88:5d:8b:c2:16:55:aa:8d:77:2f:b7:b0:8e:1a:5e:
         ae:3b:16:9f:dc:78:f3:75:9d:c3:ff:0d:f4:32:93:fe:48:62:
         41:54:f2:62:a4:73:f1:20:f7:3e:bf:c6:ca:5a:f0:8a:cf:d9:
         37:33:43:73:bc:d8:90:65:77:2f:39:cc:aa:4c:d5:6f:7e:0f:
         51:68:26:88:a4:fe:7f:ae:f9:39:dc:92:82:fd:dd:2a:cd:84:
         e1:ba:00:f4:dc:2d:0b:30:e5:9b:75:c0:ab:cc:ac:7d:3b:ac:
         c1:12:4f:22:7d:b4:36:52:79:62:1c:16:eb:2b:b7:ad:a7:62:
         3a:03:72:5f:8d:56:d3:e5:2a:8b:a6:6a:74:74:ee:fd:8e:ce:
         89:97:c7:0b:c5:e8:5a:a7:5e:e7:21:ea:d3:bf:ae:8d:df:ef:
         ff:93:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org