Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/cd0874002d0bb75e6cc3b937bdc25e97267a2a8a.roa
File:                     cd0874002d0bb75e6cc3b937bdc25e97267a2a8a.roa (raw, json)
Hash identifier:          abRLQYiqKxJIUS6q2iD2LkBRECKm81tr4Od8Ijrvb3w=
Subject key identifier:   E5:21:FB:64:92:E6:03:5B:74:49:FA:FA:CA:95:5A:1D:B3:72:9B:A0
Certificate issuer:       /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial:       084A60
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/cd0874002d0bb75e6cc3b937bdc25e97267a2a8a.roa
Signing time:             Tue 27 Feb 2024 00:41:04 +0000
ROA not before:           Tue 27 Feb 2024 00:40:50 +0000
ROA not after:            Tue 27 Feb 2029 00:40:50 +0000
asID:                     28545
IP address blocks:        200.33.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543328 (0x84a60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Validity
            Not Before: Feb 27 00:40:50 2024 GMT
            Not After : Feb 27 00:40:50 2029 GMT
        Subject: CN=cd0874002d0bb75e6cc3b937bdc25e97267a2a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:1f:79:a0:a9:eb:05:25:33:00:7c:41:96:
                    06:55:a5:34:6e:27:22:9e:58:3a:c4:79:25:e4:36:
                    28:db:9a:4b:65:19:e9:c8:43:08:db:d2:89:ad:02:
                    02:30:1b:43:1d:c3:43:43:0a:f9:f3:09:ff:87:a1:
                    67:1d:50:ab:df:3b:6d:2c:d1:f5:bf:52:b3:1c:b2:
                    fe:d3:8a:9d:bb:18:36:82:fd:31:76:8f:63:69:0c:
                    19:01:45:55:54:5e:59:2a:82:69:5a:e5:ad:d1:e4:
                    04:77:8f:9c:81:8b:b7:43:8c:79:91:e9:9b:7a:65:
                    0f:ee:43:bc:da:d7:7e:65:3e:9b:f3:43:79:7d:27:
                    b1:b8:7d:94:82:f0:5b:d8:b4:16:85:83:89:40:7d:
                    58:84:85:aa:04:b6:1e:fc:35:49:bc:a0:7b:08:ed:
                    b3:3b:8c:47:2f:2c:c0:0a:92:d9:a0:1c:8f:50:14:
                    5f:38:6f:27:f2:74:ff:5e:4d:46:3d:1f:3d:f0:6b:
                    3b:2b:06:86:a4:83:7e:5b:95:4e:49:73:0b:49:58:
                    35:7d:66:29:bf:fb:1c:b1:e8:08:2f:fd:0c:cb:43:
                    50:2a:10:bf:9f:e9:e1:51:e5:26:d9:14:10:0f:48:
                    27:71:15:44:07:56:af:55:b5:64:03:bf:b4:b4:91:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:21:FB:64:92:E6:03:5B:74:49:FA:FA:CA:95:5A:1D:B3:72:9B:A0
            X509v3 Authority Key Identifier:
                keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/cd0874002d0bb75e6cc3b937bdc25e97267a2a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:15:75:4d:72:af:63:33:f0:90:7c:1a:ad:13:6d:bb:8e:
         97:71:9f:ce:39:b0:0d:cc:58:bc:3a:0b:3e:b7:fa:aa:93:d9:
         f9:72:1c:ec:e8:d3:df:28:d4:c8:a5:93:e4:ec:24:66:bc:cc:
         6c:0b:d8:40:c9:dc:b9:f8:cf:3a:b2:e4:5d:d3:17:3d:cc:57:
         07:8f:66:2c:10:06:df:47:69:0c:7b:4f:4a:38:c8:d1:51:6f:
         3f:08:c5:40:ca:64:ea:54:95:52:66:dc:bf:80:87:dd:ce:b3:
         04:e2:88:5a:26:15:fe:43:42:9e:ce:d6:31:b4:9d:da:3a:01:
         ac:12:80:9e:20:6c:a4:a3:0f:dd:96:e7:24:2e:39:75:39:b4:
         8b:e1:94:c3:1b:f3:6f:af:67:22:ec:e1:99:b8:62:06:e8:63:
         cb:b4:7e:3a:79:c6:0b:7f:bd:93:ba:cc:ff:f3:20:93:6a:10:
         f8:c9:ec:0d:4a:ca:68:65:8a:c9:52:24:70:dd:bf:1d:c7:5d:
         8e:35:95:d0:27:0b:55:f7:5d:5b:33:b0:f9:9a:09:54:95:f1:
         5d:b5:83:fc:b4:e5:2a:46:34:2b:9f:31:4d:3d:11:1a:b3:46:
         2f:d5:75:4a:e7:63:1e:dd:57:33:51:3e:98:b5:e3:bb:0c:dc:
         17:49:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org