Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/83f841b3f19702b129d7370ba30c4e644e562a92.roa
File:                     83f841b3f19702b129d7370ba30c4e644e562a92.roa (raw, json)
Hash identifier:          84uV7/bB967RCJtJme1zxPZ2wP+EFAbNVaXqKG0bxUs=
Subject key identifier:   C8:0E:AF:5E:9C:95:BE:54:8B:80:71:61:B0:C4:96:F3:38:29:26:B7
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01A891
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/83f841b3f19702b129d7370ba30c4e644e562a92.roa
Signing time:             Wed 14 Sep 2022 16:10:27 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108689 (0x1a891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=83f841b3f19702b129d7370ba30c4e644e562a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:73:16:17:4a:cb:dd:58:c7:31:5c:b8:85:
                    d1:67:be:e5:6c:91:b7:50:60:80:75:76:2a:97:49:
                    48:c2:8e:3b:a0:4c:0c:5f:49:89:1c:aa:74:1d:32:
                    2e:3e:b8:d9:9f:dc:9a:06:a6:f6:72:15:9e:d2:f3:
                    4c:6c:4e:5e:53:82:35:0a:a4:18:85:73:1a:c9:21:
                    60:66:f8:a9:04:a2:c8:64:e1:65:8c:89:c0:fb:56:
                    b5:54:60:e5:57:f8:9b:5d:0c:f4:8c:22:d5:1a:fc:
                    47:48:38:ac:3a:f4:87:af:9a:35:ce:cc:f5:99:36:
                    5f:71:e7:c5:ac:6d:0d:96:63:57:21:e8:c3:44:60:
                    f8:e6:c0:16:19:6f:b8:b9:49:cf:c3:ff:e4:3a:86:
                    24:f7:05:20:1e:ef:e4:b2:a3:05:1e:35:22:d1:65:
                    79:90:75:d0:b3:95:60:ae:97:7c:9b:9e:77:61:10:
                    57:62:f7:8d:c8:81:c5:37:77:e9:89:20:08:81:05:
                    f0:8c:28:14:eb:5c:53:81:98:ca:be:56:48:b2:ae:
                    87:9d:45:37:c5:d7:f6:31:ac:1f:05:60:97:4f:df:
                    df:26:d5:4a:b0:c5:80:79:86:5f:00:72:99:57:fe:
                    b9:38:fa:9d:ee:f5:f8:fb:37:6b:82:cc:d2:f4:16:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0E:AF:5E:9C:95:BE:54:8B:80:71:61:B0:C4:96:F3:38:29:26:B7
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/83f841b3f19702b129d7370ba30c4e644e562a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a8:b4:2c:ee:41:13:be:87:e6:7b:ff:3e:75:8f:ff:fc:4a:
         64:09:3e:b9:61:38:a6:46:48:af:18:82:6d:b1:5e:32:33:e7:
         57:cf:a8:a3:d2:b8:d1:b4:70:ba:78:8d:1a:c7:53:94:f9:3f:
         29:37:72:a7:32:cc:8e:5a:80:52:37:95:4d:5c:41:7b:08:dd:
         42:e9:ee:2e:dc:ad:00:73:22:f1:ef:70:e2:0c:58:7c:8b:4a:
         4c:77:00:f5:ef:69:38:fe:63:04:0c:58:21:85:d7:76:10:30:
         7b:b7:93:30:9c:8e:92:1b:cb:c3:56:74:a1:b8:1b:11:3e:08:
         46:24:1a:f1:ce:4c:86:ac:d1:ac:64:79:ad:e3:c2:44:3d:24:
         9a:b3:91:9a:cd:04:fc:6d:48:79:91:93:b7:c3:68:8d:9d:09:
         fb:95:c7:1e:be:35:56:1b:2a:c3:e7:5b:6f:1e:71:e0:d4:c5:
         df:bc:f8:c2:25:87:68:31:8e:bf:b0:db:5e:92:55:86:79:92:
         93:10:15:6e:6c:b5:8d:9a:1b:86:ff:4e:f7:9d:8c:92:80:28:
         97:33:55:ed:6c:0c:f0:b9:7e:df:d5:7b:b0:d1:b7:ca:ce:39:
         83:a6:11:34:d8:55:43:05:3f:89:ee:bb:dd:12:55:d1:df:88:
         dc:c2:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org