Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/ef5dde72246cb60a944458da57ff4bf008b2b332.roa
File:                     ef5dde72246cb60a944458da57ff4bf008b2b332.roa (raw, json)
Hash identifier:          VVoLWyDYMtPi/sHoUlnMQ2iNy0kca2Yw26Lf+ospNcE=
Subject key identifier:   6B:FF:54:CB:77:46:39:FD:3E:DE:04:0E:63:0C:05:8B:6D:16:D4:00
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01D2EF
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/ef5dde72246cb60a944458da57ff4bf008b2b332.roa
Signing time:             Wed 14 Sep 2022 16:31:11 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119535 (0x1d2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=ef5dde72246cb60a944458da57ff4bf008b2b332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:56:79:ef:ed:6f:49:bf:21:37:b6:65:44:
                    34:10:95:26:4e:81:a4:95:98:07:ef:c3:87:d1:bf:
                    8a:a6:6f:49:d3:80:4e:ba:23:0f:f5:ce:4b:6a:75:
                    69:eb:f7:b7:62:fb:b4:15:63:c0:b8:ef:fc:ea:40:
                    21:82:81:42:3a:3c:18:c5:09:11:57:d9:85:0b:6e:
                    d0:6d:b8:79:af:71:dc:af:ea:03:06:d7:ef:e8:67:
                    3a:78:2d:31:72:6d:14:86:8b:c2:48:04:fa:f7:83:
                    58:ec:fe:bb:08:1f:31:49:4c:b1:0e:75:2b:78:ae:
                    40:6e:60:6c:db:63:e0:06:75:a5:ba:b0:45:4e:ae:
                    12:b8:1d:2a:f7:d3:b5:2e:d6:69:c4:fd:d0:c8:dc:
                    3d:22:20:03:b4:8c:de:8b:56:6a:55:3a:90:58:b3:
                    de:87:5f:80:6b:ed:74:0e:36:59:44:c5:bb:7b:bf:
                    66:34:93:e6:cc:ba:11:3c:13:c1:fd:de:67:26:56:
                    d8:f7:e6:a1:2b:38:c1:56:be:c4:90:a6:c7:41:ae:
                    a0:b1:05:82:a5:d1:e3:ab:32:70:ff:7f:c9:37:31:
                    58:b8:ad:44:03:84:63:56:fe:b8:c5:66:9b:7b:75:
                    0e:e6:ce:75:a2:f0:6d:41:98:12:3f:80:52:7e:87:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FF:54:CB:77:46:39:FD:3E:DE:04:0E:63:0C:05:8B:6D:16:D4:00
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/ef5dde72246cb60a944458da57ff4bf008b2b332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:e8:cf:d3:b5:d3:3f:31:ae:71:56:9e:ca:67:1f:1d:14:
         e7:97:69:0b:8a:e5:fb:16:5f:ef:69:b3:5b:ce:54:c3:13:17:
         bd:0f:d5:5f:d1:cf:04:49:1e:02:c1:40:d6:6a:b0:2d:23:7a:
         4f:2d:49:a2:d1:a4:dc:b9:ee:6c:09:6a:f2:d3:64:7e:fb:91:
         0f:96:d7:51:2d:37:58:21:8b:48:bd:74:ee:cb:79:4b:77:85:
         c6:7a:70:e9:b5:bc:92:ad:e9:59:d9:32:3c:cc:a0:2d:1c:a5:
         27:f3:6d:5f:e3:24:ca:c0:10:d2:09:a7:50:b5:c8:de:c3:78:
         1d:a3:2c:a9:1e:9c:44:c3:d3:8c:49:0b:e4:53:13:ac:52:9b:
         5f:65:b9:88:4d:22:2e:bd:af:94:b3:12:2f:8d:7e:4e:4a:9a:
         7a:13:ff:5b:9e:39:7f:f2:1b:c3:c0:ca:5e:00:5c:12:d6:b4:
         64:1d:6d:98:79:b0:9b:2f:a2:dc:f7:31:40:ec:71:ab:c8:da:
         5a:f7:b8:55:7c:3c:99:94:af:0f:d0:3e:14:c2:ff:15:9d:70:
         3a:d2:bb:71:0f:03:97:d1:a1:77:92:2b:12:9c:a7:90:c0:b4:
         5f:4d:0c:cb:37:d6:50:71:96:76:e8:c2:81:d0:0b:f7:02:90:
         62:77:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org