Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/cfdc40099a440af362a6d822f6c3eeb7f8c04426.roa
File:                     cfdc40099a440af362a6d822f6c3eeb7f8c04426.roa (raw, json)
Hash identifier:          jOWAEY5wDGHL0CDnDpO/ncm/sdYFTOO7IFPyjn2hfbo=
Subject key identifier:   11:36:68:61:06:F6:82:E9:20:5D:60:BD:31:B0:22:8C:75:6E:68:8F
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       019902
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/cfdc40099a440af362a6d822f6c3eeb7f8c04426.roa
Signing time:             Wed 14 Sep 2022 14:45:37 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104706 (0x19902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=cfdc40099a440af362a6d822f6c3eeb7f8c04426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:48:b7:35:96:57:91:50:bf:4a:dd:90:41:
                    d5:66:e5:4c:7b:65:c1:6e:dc:95:cc:67:26:59:d7:
                    21:b3:5f:23:da:9a:c6:33:05:06:46:d2:bf:81:4b:
                    fe:61:49:78:13:2a:1b:f2:e1:da:d5:12:e2:26:c1:
                    b2:99:20:3d:fa:f3:6b:b2:44:49:62:65:cf:53:b7:
                    4e:f1:d9:c1:f5:73:ef:fa:db:33:37:1c:55:37:2f:
                    1b:40:fd:1f:13:41:59:79:7f:7c:e6:5e:e8:b9:ea:
                    9d:54:6f:76:dc:76:3d:f8:e5:a2:94:5e:2c:9c:24:
                    3c:c8:33:1b:1b:1a:60:0b:8e:80:0d:78:13:c0:ff:
                    15:28:1f:cd:98:dc:94:5c:43:7f:31:17:67:ba:21:
                    fd:00:eb:12:1a:07:70:bd:c1:c6:5e:2d:0b:5e:d3:
                    c7:37:54:73:37:cb:6a:de:8b:64:40:3a:ce:57:0f:
                    40:2d:e7:7e:b6:40:f6:1b:02:ee:fd:8d:ac:78:22:
                    49:2a:31:23:1b:b7:62:9c:b1:0c:09:e5:a1:7b:d9:
                    47:6a:11:49:e1:0a:29:67:6f:d9:67:42:14:f9:51:
                    d3:4e:77:7a:3e:1b:a5:18:0f:c8:77:2d:54:65:35:
                    82:aa:6b:a5:d9:4f:9b:32:b3:53:99:15:16:f3:bd:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:68:61:06:F6:82:E9:20:5D:60:BD:31:B0:22:8C:75:6E:68:8F
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/cfdc40099a440af362a6d822f6c3eeb7f8c04426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:d8:c1:a2:4f:04:23:00:84:b0:5b:fe:b7:00:41:c5:89:
         17:36:4d:33:07:ed:42:bb:47:9c:c6:83:bf:c4:ed:99:4c:08:
         8c:6b:88:c8:ea:f6:c7:3d:8b:fb:36:12:f6:b4:07:b5:c7:3f:
         89:b1:bc:af:6f:53:42:71:d0:fc:9e:6c:78:2c:c1:7b:ac:57:
         16:b5:50:a3:49:10:aa:ec:00:d0:27:f1:38:94:0a:57:86:aa:
         0a:45:5d:c7:a4:64:ff:f1:9f:1b:5e:e3:e4:2e:f5:34:d1:e6:
         79:88:29:88:90:55:b2:3a:fb:d5:ad:f5:06:82:fc:a5:ad:ae:
         40:03:79:fc:83:72:74:e5:5a:24:3f:fe:83:89:7f:2b:ed:73:
         f3:2b:46:99:74:87:55:b9:87:51:d4:e7:18:a5:b7:4f:a3:25:
         51:2f:39:35:9e:0a:9d:0f:c7:03:39:8a:b2:ad:51:82:87:78:
         6a:5e:74:03:76:cc:6b:49:a2:00:d2:67:12:f5:25:b5:81:29:
         0f:07:3c:e4:02:2b:46:e1:07:35:2f:8f:76:4f:1f:6b:95:61:
         b3:ec:07:ee:6e:35:27:ca:0e:e8:78:8b:da:19:5b:cc:38:43:
         41:f9:f0:75:cf:82:ad:60:67:85:45:57:56:df:b9:48:cb:13:
         33:2a:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org