Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d26f1d6755563fd987456f06553aa694144eb9da.roa
File:                     d26f1d6755563fd987456f06553aa694144eb9da.roa (raw, json)
Hash identifier:          OepCCCwwIr3jqZDnSJr+6QUai0UcefDmxyMPwgiVJNY=
Subject key identifier:   DC:AD:CD:43:D7:DC:70:27:35:AB:47:0A:50:31:45:1F:81:99:03:88
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01C866
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d26f1d6755563fd987456f06553aa694144eb9da.roa
Signing time:             Wed 14 Sep 2022 16:29:39 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116838 (0x1c866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=d26f1d6755563fd987456f06553aa694144eb9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:dd:22:c4:18:e6:36:d5:5b:2c:21:b2:63:
                    aa:48:19:30:d6:10:61:4c:ab:ec:c0:cf:83:13:d3:
                    96:bd:a8:81:eb:60:33:74:11:7d:b7:72:cb:c0:11:
                    1e:68:84:46:78:ed:18:ad:37:12:03:3a:b7:15:26:
                    24:0c:ff:01:a9:68:d7:f5:c2:f4:b2:e0:30:5b:30:
                    88:b6:4b:75:89:cb:5a:e5:1b:72:4c:8e:39:fa:de:
                    cc:62:30:e7:b9:89:ba:48:47:79:5e:f1:38:49:f7:
                    cd:0e:83:f1:e9:b6:f7:67:b4:4f:6f:fc:ff:65:86:
                    4f:e5:71:aa:7b:b0:9c:cf:fe:84:2d:60:03:bd:81:
                    9c:21:50:c3:40:92:97:ac:78:be:47:f5:97:a6:8b:
                    50:b7:0f:0c:c3:ee:97:a1:bc:db:a5:07:f2:1c:4d:
                    42:b0:39:ec:b5:36:93:53:c2:ba:5e:5d:57:99:9b:
                    7c:d6:33:c7:05:63:da:1a:67:80:cd:32:49:8d:c2:
                    b5:4b:44:05:6a:98:7b:f8:02:b4:39:1d:5c:3e:78:
                    5f:3b:b9:f4:27:4e:7b:83:db:aa:16:06:64:a4:56:
                    8e:6b:66:9d:d1:7d:1b:c0:04:71:d2:4d:c2:07:5b:
                    0b:a6:a2:cc:78:f7:a5:a6:8a:49:33:7b:c4:f7:7a:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AD:CD:43:D7:DC:70:27:35:AB:47:0A:50:31:45:1F:81:99:03:88
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d26f1d6755563fd987456f06553aa694144eb9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:9b:86:ef:a1:2d:dd:d0:11:bf:e3:15:26:0f:66:49:15:52:
         98:41:26:17:47:12:60:d0:48:8c:a2:67:f5:98:25:ee:02:f3:
         63:1d:a1:f6:2d:61:cc:c1:f6:3a:52:88:9f:71:5f:cf:2b:b6:
         f3:45:ed:a2:6b:ac:90:bb:18:93:73:cf:8d:95:41:29:e5:dd:
         a8:9d:16:e6:e6:17:f7:ba:60:88:3e:8a:59:f3:7a:1d:08:f2:
         f5:de:8c:f0:d5:54:e3:ae:ba:b6:25:08:90:d8:de:38:e6:7b:
         57:c1:b3:19:e4:3c:4e:ee:ac:07:33:95:4c:8f:70:ca:6d:a2:
         e4:b5:0d:25:25:c3:b1:5e:8d:59:af:bf:ec:16:23:3d:2b:7f:
         48:71:5d:0b:f6:7d:23:9c:5c:16:85:ff:97:58:66:f4:6f:d4:
         32:c9:0c:29:a8:6e:3c:5b:62:b8:03:96:3b:7b:10:be:c1:49:
         93:0b:a6:e6:e3:78:56:e3:83:a2:8f:7a:6c:97:2d:86:20:50:
         5a:f1:50:d8:c6:fa:47:fc:72:9b:2e:37:1b:0d:24:5a:38:93:
         0b:5c:88:be:ab:59:a3:55:34:4b:28:a9:c8:47:42:d7:c0:f5:
         e0:ef:6d:b6:3d:e0:23:e9:dd:f9:58:c0:2c:7c:de:8b:b1:eb:
         fe:ba:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org