Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/f40fc721e90744cdbab80842cbec859132a08591.roa
File:                     f40fc721e90744cdbab80842cbec859132a08591.roa (raw, json)
Hash identifier:          SDVBUBqz44xcEVKLQadFdNU+qIKizScrqN0OBxRwLxU=
Subject key identifier:   4C:9E:32:58:D0:AE:8F:50:D0:9D:FC:A7:1F:09:DF:99:9C:72:7C:39
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01A15A
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/f40fc721e90744cdbab80842cbec859132a08591.roa
Signing time:             Wed 14 Sep 2022 16:08:56 +0000
ROA not before:           Fri 19 Aug 2022 16:20:25 +0000
ROA not after:            Mon 19 Aug 2024 16:20:25 +0000
asID:                     27823
IP address blocks:        200.58.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106842 (0x1a15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:20:25 2022 GMT
            Not After : Aug 19 16:20:25 2024 GMT
        Subject: CN=f40fc721e90744cdbab80842cbec859132a08591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:22:9b:b1:68:c9:e6:9f:88:53:e1:c7:31:
                    27:5f:d5:30:dc:21:8d:25:98:8a:34:1f:84:1c:94:
                    e9:53:d2:0b:f2:a7:83:dd:18:f2:04:e5:d0:48:d5:
                    61:f2:bf:47:58:1d:68:8e:b3:e9:ae:66:56:64:a0:
                    9b:55:68:38:88:a7:4d:87:27:d5:e6:36:bf:d4:86:
                    3c:c1:3c:a1:9b:7c:66:aa:72:b9:1c:75:e2:b6:a6:
                    1a:10:7c:f8:87:b0:06:0a:41:d3:ab:c6:02:c0:df:
                    cf:50:ee:bb:df:b3:ef:99:67:87:24:fe:24:71:81:
                    18:dc:77:f5:ff:47:ac:c7:4b:64:da:ec:1e:39:ce:
                    e3:1f:53:9a:3c:eb:ea:96:58:7c:c1:53:56:18:40:
                    75:d3:aa:d2:25:4a:0f:1b:78:97:a7:40:e6:9d:fd:
                    43:38:45:bd:d2:bc:52:78:03:7f:78:31:0a:36:84:
                    fd:e0:02:d5:99:f5:3f:18:25:9f:20:8e:c2:09:53:
                    d7:be:3b:e0:a4:a0:20:b0:62:01:bc:f4:28:5c:92:
                    93:d3:1b:eb:48:e4:45:b9:a7:98:dd:36:1f:ef:c7:
                    eb:7b:a4:2a:40:e3:2f:ed:b2:8e:88:13:a7:13:ce:
                    88:83:11:af:22:3a:d5:f7:75:bf:8d:20:c5:2a:c0:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:32:58:D0:AE:8F:50:D0:9D:FC:A7:1F:09:DF:99:9C:72:7C:39
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/f40fc721e90744cdbab80842cbec859132a08591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:5e:d6:f1:ab:76:30:c6:fa:22:80:d5:c6:cd:df:fb:91:ab:
         0c:a7:e1:13:b7:22:3a:6e:f6:b4:84:45:d9:02:b4:dc:30:75:
         42:35:76:6f:83:a4:40:41:82:79:10:2f:40:3a:34:80:03:5e:
         dc:6d:88:6e:0b:3d:9c:4d:1d:7e:d5:10:d1:84:67:c0:65:b1:
         03:bc:fd:46:ba:36:d9:99:ac:61:dc:2a:b5:cf:00:34:c5:13:
         87:e1:7c:da:f7:80:4b:79:56:9b:8e:88:e3:51:6c:d2:79:ad:
         38:71:bc:27:6b:11:48:5c:70:25:0f:70:ec:55:84:e4:73:96:
         db:6a:c6:33:77:38:75:d1:b7:9d:ce:11:ff:68:54:df:5a:7e:
         ca:9d:21:b6:fb:5c:66:44:fd:f9:92:d8:d4:7c:c7:73:95:24:
         39:f7:b2:7c:0f:25:06:46:44:dd:ab:c5:87:85:14:67:2a:8c:
         1d:c6:ce:30:d4:51:48:97:3f:42:8b:92:29:c9:58:a6:f1:0c:
         b2:1b:bd:1b:4f:e3:59:0a:61:cd:2d:7a:8d:43:2f:a5:61:e4:
         5a:e7:5c:13:60:30:de:da:0d:59:a3:10:d8:74:93:7f:16:fd:
         28:1e:64:9e:1b:87:96:36:d0:06:51:b3:f9:7c:8c:c1:62:67:
         5c:56:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org