Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/fc17f36949a46f3cee7a82d394a211ecbf79f6f5.roa
File:                     fc17f36949a46f3cee7a82d394a211ecbf79f6f5.roa (raw, json)
Hash identifier:          DmhzrDXRlIe2MwP+dJp7KnJfh/CHGdde1Hyi2oj2ZC4=
Subject key identifier:   1F:85:29:DC:54:B0:68:C2:A2:43:CD:FC:9A:48:7A:41:38:2A:30:9D
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0171C6
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/fc17f36949a46f3cee7a82d394a211ecbf79f6f5.roa
Signing time:             Wed 14 Sep 2022 14:39:47 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94662 (0x171c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=fc17f36949a46f3cee7a82d394a211ecbf79f6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:0e:96:83:a8:ef:4f:e1:81:59:dd:4d:0b:
                    fc:07:0e:3a:4a:4a:1d:5f:94:b1:8e:95:05:c1:99:
                    03:97:49:94:9a:15:f0:d4:aa:bb:f9:4c:3c:32:f3:
                    66:7f:36:5b:86:da:4b:02:a1:9b:01:da:e1:b2:a3:
                    70:60:78:67:26:a8:a6:dd:0a:8f:b7:d8:c1:fd:1d:
                    c1:fa:1e:bb:76:c7:6a:45:76:8d:7f:a2:13:81:b3:
                    59:8a:65:cc:3c:a8:ad:ea:6c:88:86:2d:e9:8a:c3:
                    ea:c8:60:2f:5c:95:91:ee:d5:5b:1f:03:db:07:f3:
                    12:32:1d:ae:7b:12:35:94:8a:58:3d:bf:63:4a:e1:
                    4c:8e:67:7f:fc:9b:40:26:ea:e2:27:f4:7c:83:02:
                    5e:da:2b:ce:be:5e:83:50:08:3d:88:b9:e0:aa:82:
                    a6:bc:fb:30:95:ab:09:18:95:80:64:78:f2:9c:c6:
                    47:b3:77:ae:a9:c9:8f:f4:c7:48:1f:38:17:fd:8b:
                    8d:98:60:2b:55:e5:84:eb:24:cd:da:ee:55:6e:5f:
                    4d:10:87:e5:20:e5:bf:0c:4f:73:de:db:f3:10:ec:
                    07:85:0f:66:12:80:0e:99:7f:c4:1b:e5:03:bc:5d:
                    0b:fe:cd:6d:6d:df:02:83:a0:0e:ad:69:34:e0:59:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:85:29:DC:54:B0:68:C2:A2:43:CD:FC:9A:48:7A:41:38:2A:30:9D
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/fc17f36949a46f3cee7a82d394a211ecbf79f6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:71:30:c1:ef:05:9f:16:d3:60:56:15:b4:db:ec:bc:97:8b:
         f9:26:b9:09:35:27:4b:00:e6:46:af:b9:ff:08:ce:f5:07:60:
         ca:02:81:23:68:53:75:77:ed:ca:7b:4d:7e:f7:7f:2b:88:63:
         63:a6:9b:bf:8e:24:8e:ec:1c:fa:ae:47:6f:7f:e2:8a:b7:9e:
         4b:40:3d:9d:af:76:e3:b5:3c:f3:9a:4d:df:72:c6:64:eb:29:
         7a:c1:a0:29:4c:b6:9b:de:ad:6c:ad:e2:03:fa:17:d0:9e:57:
         66:19:d8:1e:f5:0a:ec:e0:30:ea:c7:4f:dc:65:c2:46:66:9f:
         80:91:de:37:32:70:1a:38:73:b7:49:d6:2a:5f:ee:4a:84:20:
         c6:70:1b:69:17:eb:5c:99:ec:05:c7:4f:08:4c:13:46:6b:f1:
         1e:4b:61:5c:0d:06:ab:66:4c:92:4d:1b:19:7b:a8:fd:6a:70:
         c6:7c:65:24:86:03:d9:0e:86:f2:ae:20:8b:69:26:4e:26:38:
         ad:b5:10:4a:94:2f:0b:a7:82:c8:04:24:43:a3:42:e8:3b:90:
         bd:2b:25:94:7b:ed:6d:10:de:12:55:10:96:e1:a6:bf:4e:50:
         44:0c:99:1b:e2:e3:d7:6b:fc:e1:2d:43:46:b7:a9:c1:d9:d4:
         eb:b0:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org