Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9d69fa74f25137b20d669cce345f0624a4fb1e34.roa
File:                     9d69fa74f25137b20d669cce345f0624a4fb1e34.roa (raw, json)
Hash identifier:          QxZckDAWQ5hW1V9IjbCfvFzRP8fkjnwycwsae3grOyg=
Subject key identifier:   CE:4D:C0:1E:7C:D0:AF:BA:C6:DA:3A:FF:C7:D4:EC:2A:18:9A:EA:C7
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       019686
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9d69fa74f25137b20d669cce345f0624a4fb1e34.roa
Signing time:             Wed 14 Sep 2022 14:45:10 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104070 (0x19686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=9d69fa74f25137b20d669cce345f0624a4fb1e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:cc:02:63:e9:54:4a:cf:ea:e2:f3:f2:e5:
                    1c:a3:57:4f:4d:05:88:38:52:a2:7f:d2:fc:5c:35:
                    45:15:c4:82:e8:bd:30:23:2b:94:da:51:00:95:9f:
                    d2:b4:ef:1f:f3:1b:9c:8a:4d:81:38:07:62:32:56:
                    cf:cb:80:61:28:d7:3c:8a:af:9b:bb:b4:56:bc:a4:
                    3c:25:56:39:c3:96:ce:6e:b3:6b:43:c8:86:86:57:
                    c7:2f:88:5d:35:a0:5a:4d:22:59:f9:db:09:fd:ee:
                    81:70:73:b7:5d:72:a3:81:b8:6d:25:d2:02:e0:38:
                    b7:6a:06:aa:c4:f1:a7:6d:fb:ac:ef:4c:a9:37:35:
                    ee:85:6e:d0:ac:1c:2e:3a:2c:53:82:84:7b:fc:51:
                    ef:56:85:3d:27:56:d4:ca:52:e3:dc:c6:e6:e2:3d:
                    dd:02:81:7e:f4:13:74:cc:a9:a8:11:dc:e1:1e:46:
                    5b:80:ac:f6:2d:c5:c8:9d:aa:fb:66:bf:f5:d2:fe:
                    b3:52:3e:71:a5:53:4a:4b:50:d2:75:e9:2b:c9:7b:
                    f8:3a:f3:b6:b2:34:be:a3:8e:e9:de:1c:82:70:f4:
                    c2:09:89:9a:74:dd:b1:7e:18:f0:e1:68:08:96:3a:
                    3a:bd:cc:94:18:31:a0:b0:23:c6:48:36:8b:6a:a9:
                    42:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4D:C0:1E:7C:D0:AF:BA:C6:DA:3A:FF:C7:D4:EC:2A:18:9A:EA:C7
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9d69fa74f25137b20d669cce345f0624a4fb1e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:b6:98:11:2e:5a:83:50:c9:b3:43:57:4d:1b:ea:5d:b9:f7:
         df:4f:5b:b8:34:14:cd:30:d5:12:a3:de:c9:e0:54:53:13:6f:
         26:0c:bd:cc:b9:95:22:d4:9a:0c:2d:52:cd:f8:d6:85:f8:83:
         f2:5b:60:2d:d2:b0:83:41:80:2a:46:05:2a:84:81:60:01:b2:
         9b:74:c8:18:98:0e:7f:ff:92:7a:31:cb:fb:c3:ce:2b:fa:6e:
         53:14:11:b8:13:69:d2:1f:53:69:b7:b1:90:af:c6:cb:7b:a6:
         2a:c2:91:ba:10:ff:a6:52:5f:05:11:ce:44:ea:0a:b2:dc:c9:
         84:18:ce:59:0d:2c:d0:29:81:ef:d0:21:52:9f:23:d0:48:c6:
         22:35:a9:64:47:44:3d:f0:03:28:91:1b:18:a8:1d:68:c1:a8:
         f0:bc:15:e9:1b:fb:d3:32:5d:1d:e3:00:75:17:42:99:16:e1:
         03:9d:4c:b9:20:f2:1a:d2:c7:43:7e:64:cc:dd:4a:30:b7:0d:
         29:2a:8b:98:be:65:88:81:fe:0c:50:33:68:4a:e3:d1:92:a7:
         ea:34:2a:25:11:e3:90:4f:01:a5:b8:1e:a2:cd:77:88:61:68:
         68:1f:8d:d2:6b:29:8c:0b:09:f2:ec:c4:7d:6f:e3:55:9a:d5:
         47:a0:31:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org