Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d24030f5d11a467017c346f7c8fd6c33a6052bf7.roa
File:                     d24030f5d11a467017c346f7c8fd6c33a6052bf7.roa (raw, json)
Hash identifier:          jQbWzOSND/R8nlmOfjqGD8ZR91TQozMFdUaUfizK+xI=
Subject key identifier:   80:EE:88:92:CF:A9:F9:A5:2E:69:6D:E8:87:93:AE:7B:84:4F:75:50
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01A356
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d24030f5d11a467017c346f7c8fd6c33a6052bf7.roa
Signing time:             Wed 14 Sep 2022 16:09:28 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107350 (0x1a356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=d24030f5d11a467017c346f7c8fd6c33a6052bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:d2:ee:4f:f5:19:56:0a:3a:23:1c:98:68:
                    d2:23:b0:4d:87:44:6e:65:79:d3:7f:db:61:ba:4d:
                    82:76:f2:83:b1:7f:8f:08:24:15:7a:7d:75:d4:a7:
                    98:b7:71:fc:d0:05:81:e6:52:b5:43:3b:aa:41:d1:
                    05:bd:e1:4a:78:72:1e:d0:ad:82:a0:a7:99:98:36:
                    64:31:ea:9c:01:bd:23:71:7b:ad:0a:d7:24:c2:10:
                    dd:11:bc:6e:80:09:78:08:2b:08:50:87:50:0f:4a:
                    49:0e:99:08:85:11:c8:b5:b8:21:6d:2a:e9:5a:61:
                    f0:51:fc:1f:83:b1:ba:3e:43:6f:b4:fb:71:d2:06:
                    27:25:ec:07:7b:7b:c1:6f:93:cf:d0:f6:ad:c7:c6:
                    6d:af:65:38:d8:eb:e5:a8:29:09:84:97:60:73:86:
                    7e:f1:f2:dc:c2:60:6a:1a:cc:21:91:f8:eb:88:f5:
                    81:01:91:5a:92:07:fc:0c:4b:a5:99:d8:f5:2a:28:
                    09:b9:b1:86:5e:aa:78:7a:8d:90:5b:13:b8:41:f4:
                    4a:9c:37:6f:09:c1:7f:4b:7e:fb:3b:3b:09:b7:c9:
                    b9:9f:ef:13:ce:0b:55:e6:12:09:bb:6e:96:5b:78:
                    2d:4b:40:2f:63:fd:e1:a0:84:63:26:f4:80:2d:b4:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EE:88:92:CF:A9:F9:A5:2E:69:6D:E8:87:93:AE:7B:84:4F:75:50
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d24030f5d11a467017c346f7c8fd6c33a6052bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:14:1f:d3:39:f8:8c:41:27:55:91:77:3c:a6:57:c5:52:
         7f:9e:51:bb:65:85:83:54:6f:b1:9a:4d:08:01:cf:42:e9:4d:
         32:3a:2f:1f:da:d9:fa:53:72:9a:56:d4:cb:78:ae:b3:16:c8:
         31:bc:cc:70:44:ce:35:50:fa:f1:d9:f8:56:07:28:f0:90:8e:
         1c:f9:68:66:27:87:92:b5:e0:67:1f:b2:9a:c1:22:37:9d:24:
         3e:31:1c:7b:6e:ba:9b:4c:75:79:53:57:f7:1e:f4:c4:7d:6b:
         5b:b0:32:f4:9f:78:9f:24:57:fa:58:37:f7:20:9d:14:4e:df:
         26:46:2a:b2:81:14:e5:ae:91:be:28:e8:11:09:ec:ef:98:5f:
         26:43:2d:c7:1a:e3:d8:57:32:64:64:68:cc:eb:81:0e:c5:ad:
         84:f4:f7:d1:c0:ed:83:d6:9e:6c:71:7b:4e:7f:62:5b:cb:07:
         7e:30:bd:55:b6:c3:ae:b2:fb:69:1c:65:48:85:3e:c9:8b:74:
         ae:3f:ee:fe:2f:2f:48:46:9b:7d:f8:b9:83:b1:40:6c:1f:50:
         34:e1:96:53:f3:d0:7b:2d:c4:72:91:f3:c5:29:d2:7e:51:aa:
         64:98:a2:de:14:ad:e0:00:3a:61:a5:29:79:a5:59:3d:e2:ba:
         0f:83:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org