Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/faadec08a505240542b9b4c1c2ee74c468ac6792.roa
File:                     faadec08a505240542b9b4c1c2ee74c468ac6792.roa (raw, json)
Hash identifier:          AfWlOJKmnTp/Lu2iqVUUHDUAR/yYh4//+/ncU5ru73s=
Subject key identifier:   E9:D1:F0:0B:62:4A:63:29:CC:26:44:03:95:9A:BC:D0:F6:F9:8E:E1
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       017A80
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/faadec08a505240542b9b4c1c2ee74c468ac6792.roa
Signing time:             Wed 14 Sep 2022 14:41:42 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96896 (0x17a80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=faadec08a505240542b9b4c1c2ee74c468ac6792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:ad:09:3a:f5:c1:a4:ba:4a:a8:9f:22:61:
                    5a:14:3e:f4:68:ad:b1:ee:81:63:15:d7:0c:00:41:
                    3f:cc:41:74:f5:54:4f:53:6d:55:3e:b6:d9:df:67:
                    c5:f7:34:7d:85:c0:9b:4d:fa:69:c2:0e:59:55:a5:
                    d2:d4:70:db:06:f1:5c:8e:f8:05:0f:c2:3a:c5:54:
                    6d:83:57:87:cc:50:92:8e:af:05:a8:43:1d:d1:20:
                    8b:40:4e:1f:10:28:33:ab:01:fe:40:c3:ed:a1:2e:
                    55:d9:b9:f2:1a:40:93:33:ee:27:1e:2d:34:65:86:
                    37:37:3e:e3:7f:3e:75:09:48:f1:3f:ab:1a:b5:a8:
                    09:d7:51:56:01:99:fc:15:a5:03:3c:1c:11:39:53:
                    fc:3a:f3:5c:6a:e6:d9:a2:82:9a:23:c1:51:3d:e1:
                    d2:ae:88:5c:3f:61:d0:7f:1e:8d:f0:d8:8c:12:6c:
                    1b:ad:aa:6f:53:c0:4b:c4:80:a9:80:55:6c:2a:e1:
                    7e:19:58:cb:df:81:51:4e:7e:09:86:d7:fb:c8:6e:
                    c7:a4:1e:e7:96:5b:e5:bb:43:bb:3c:93:7c:da:f5:
                    23:86:35:50:8b:c8:cf:2e:da:5a:c5:67:35:59:fe:
                    27:ed:38:b8:c1:4c:8e:e2:e5:aa:d3:63:ce:0e:92:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D1:F0:0B:62:4A:63:29:CC:26:44:03:95:9A:BC:D0:F6:F9:8E:E1
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/faadec08a505240542b9b4c1c2ee74c468ac6792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:90:dc:cd:5b:46:11:80:6c:ad:54:c3:c1:6a:df:28:ef:84:
         41:3c:63:6d:8c:4a:d5:8b:fe:0b:02:13:f5:d6:e0:59:2b:1a:
         89:de:57:df:06:9d:e1:d0:44:aa:34:27:3f:ab:28:82:4c:ab:
         18:fc:b4:7d:ca:71:cd:26:b3:5a:f2:52:d4:8a:6d:2b:09:8d:
         bf:e9:08:43:e7:a5:43:01:be:6a:07:ea:1e:e7:8f:4a:31:13:
         14:72:61:da:7a:ae:1c:02:08:df:8f:97:a8:30:d4:51:3b:83:
         05:95:eb:5a:70:b8:ed:5e:e8:a1:1c:6b:38:16:bd:92:6e:0d:
         0f:a6:be:9b:08:44:2b:50:d9:01:18:19:90:c0:c1:8e:1f:ee:
         5f:68:78:6d:5b:d7:71:f8:d7:94:19:dd:1e:d5:d5:91:38:a0:
         d1:20:93:3f:48:92:48:bc:d1:33:2e:86:93:e8:00:49:2a:41:
         d7:c4:02:86:d0:05:d4:ea:26:70:9e:90:69:9a:e4:d8:78:7f:
         fa:09:31:47:6b:49:1f:19:1b:26:a6:91:c2:82:a7:6c:c3:3f:
         07:fd:3b:83:4a:ba:e1:cf:98:ef:05:5b:be:73:1c:06:cf:05:
         02:0d:df:6e:16:3e:89:38:98:ed:e5:0c:82:ae:46:fd:3b:83:
         ae:c6:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org