Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e7573504e9f2f3942d580b3ff3d144135b6151e3.roa
File:                     e7573504e9f2f3942d580b3ff3d144135b6151e3.roa (raw, json)
Hash identifier:          Dm2moxy+LREUR1jhZuv/9jCsabnFywcOTG/fzV3NqnA=
Subject key identifier:   FB:DD:5E:5B:53:D2:C3:D8:2A:0E:C9:C2:63:93:8B:B9:E7:47:A6:E4
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01AAC1
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e7573504e9f2f3942d580b3ff3d144135b6151e3.roa
Signing time:             Wed 14 Sep 2022 16:10:59 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109249 (0x1aac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=e7573504e9f2f3942d580b3ff3d144135b6151e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:d0:1f:bc:b2:91:d8:84:d0:e8:e6:d8:a8:
                    e2:dc:65:99:fc:aa:9f:68:0b:64:0a:08:71:de:0d:
                    a6:7e:4d:1e:1e:cd:ef:b7:90:62:6a:1c:d1:b8:7f:
                    68:6b:15:8d:9d:0b:ec:9c:b0:ea:e2:a7:97:d3:36:
                    a0:bc:d4:18:85:47:36:99:48:92:f0:1b:12:fa:10:
                    ba:da:96:f6:e0:be:75:db:6d:23:3f:1d:2d:a5:90:
                    69:d5:2d:6e:a3:90:c7:bc:e5:bc:89:aa:b7:d1:07:
                    77:d5:c7:4a:2f:27:c0:03:c0:d5:2e:78:d1:e1:f5:
                    20:09:a0:27:4f:63:b2:da:39:38:2b:61:35:ba:0f:
                    cd:5c:06:b8:4c:c5:95:c5:15:10:37:cb:69:57:b3:
                    5c:ff:76:94:dc:b0:3f:fc:e9:85:98:f7:43:03:f8:
                    ed:20:05:9c:d4:04:70:4b:ac:3d:78:57:e7:1e:6c:
                    a6:cd:1c:c5:ef:9c:e6:a6:8a:7d:b3:61:65:1c:04:
                    60:de:d0:39:b8:25:b1:6a:1d:25:2e:9f:14:b1:f2:
                    61:e4:4c:0e:ee:b4:cf:0f:3e:e7:2e:93:8d:bd:df:
                    0a:70:01:b1:45:92:ab:d2:56:c5:74:01:ee:68:9b:
                    49:fe:be:15:59:2d:ef:04:2d:7b:98:59:ba:a6:b7:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DD:5E:5B:53:D2:C3:D8:2A:0E:C9:C2:63:93:8B:B9:E7:47:A6:E4
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e7573504e9f2f3942d580b3ff3d144135b6151e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:43:ad:5f:55:a8:a8:8c:07:fb:78:44:32:a7:81:ca:55:29:
         18:53:9f:df:35:ac:f3:f8:54:4e:29:ce:9f:62:d8:bf:a4:30:
         b4:77:f8:bb:b5:fd:73:29:2c:4a:3b:2a:a1:52:91:dd:ec:08:
         99:06:26:ec:5f:2c:8d:ba:2f:70:a5:2c:b3:64:a1:2e:5a:c7:
         b8:9e:2c:73:66:22:b0:44:13:ba:13:3a:c7:2d:ae:26:41:8f:
         5c:37:3a:82:2e:af:49:9e:ad:5e:6b:ec:2c:aa:00:1c:f7:7e:
         fe:c3:08:46:8f:e0:1e:a0:a2:58:d9:b2:7b:1d:65:be:29:19:
         f9:b0:75:2a:09:6d:21:d5:c7:c6:1f:c2:ec:48:05:1f:95:cb:
         08:df:88:6d:1e:6a:d0:e3:e3:70:7e:c6:bf:c2:73:53:df:b3:
         ce:62:b2:8f:d6:be:48:af:64:4f:32:e3:d7:02:97:54:61:24:
         35:0e:ad:41:85:85:04:8d:eb:8f:d3:38:7b:fc:d1:3c:43:b3:
         11:c7:f6:d6:fa:f6:0f:75:56:d1:99:60:3b:be:6a:a6:1c:2e:
         ac:40:0e:65:08:23:1d:0d:6f:e6:1f:3c:5c:28:62:35:88:9e:
         31:bf:a8:a6:fc:1a:9c:b6:21:71:a1:f4:f9:7b:71:fd:89:f6:
         5d:78:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org