Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/38d157f0cab6da179dc3da8c8e3d1b34d9ae66de.roa
File:                     38d157f0cab6da179dc3da8c8e3d1b34d9ae66de.roa (raw, json)
Hash identifier:          Q4F1yVF38N/LJXf6eBzfiE4n5jocIlBnAf5Iut/vQ/I=
Subject key identifier:   B3:7F:50:05:54:25:FA:EB:A5:0E:45:AB:48:84:03:AF:DD:69:81:C4
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E2DBD
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/38d157f0cab6da179dc3da8c8e3d1b34d9ae66de.roa
Signing time:             Thu 07 Dec 2023 13:00:53 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     28052
IP address blocks:        200.42.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026365 (0x2e2dbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=38d157f0cab6da179dc3da8c8e3d1b34d9ae66de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:0a:8e:77:dc:47:d9:12:d0:a5:87:0f:8a:
                    7c:df:45:75:2a:4a:d7:fa:b8:f8:b8:2b:f3:7a:e2:
                    a9:1e:f5:14:0f:1b:bc:e9:a3:02:fe:2e:46:5b:d0:
                    8c:40:d0:c0:51:09:43:80:a2:a2:49:84:6e:5a:41:
                    f9:02:14:ba:26:ae:49:6e:d9:fc:86:14:06:5a:fc:
                    23:5e:25:7f:4e:ce:98:6a:0d:d8:28:8a:7d:d3:32:
                    b5:bf:9d:e5:a9:ae:b2:6f:93:88:2b:18:a4:da:40:
                    8a:c7:f8:e8:28:ad:93:df:b9:44:a5:94:65:c8:c6:
                    fa:2d:f6:1e:41:6d:e5:df:09:f8:02:b1:9f:42:40:
                    2e:37:37:28:55:f9:d6:22:a7:b8:54:01:af:9e:91:
                    1b:95:c0:ce:3a:ec:f5:e3:bf:44:15:e7:1a:fd:76:
                    89:50:6e:f1:e1:0d:70:4d:98:6a:0f:34:1d:9f:41:
                    ef:11:f6:4b:5a:e5:96:42:67:8b:3e:6d:3e:e3:f0:
                    84:78:53:f5:e9:fd:f3:fe:b9:ec:ad:78:07:ac:09:
                    53:50:9d:27:4f:08:85:70:93:48:c6:e9:73:72:64:
                    a1:ca:28:6e:8b:b6:23:b5:20:94:f9:94:1a:63:60:
                    2d:5d:a1:ba:af:56:b0:c6:a1:a2:ba:aa:09:96:a2:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7F:50:05:54:25:FA:EB:A5:0E:45:AB:48:84:03:AF:DD:69:81:C4
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/38d157f0cab6da179dc3da8c8e3d1b34d9ae66de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c7:73:fd:5b:c1:f6:9f:77:4e:5a:7a:5e:59:af:68:ca:46:
         7b:fc:fd:0c:11:8b:12:61:e2:dd:5a:af:5e:4b:64:13:6e:b4:
         ea:ec:3e:dd:f3:01:d2:9b:49:4e:3d:ec:58:14:eb:8b:e4:c9:
         58:9c:78:f0:ea:f4:3b:35:75:85:9d:1c:4d:cd:ae:49:13:ba:
         d3:7d:e5:6f:0e:8b:4e:21:f2:b0:24:4b:64:9c:c6:41:99:f1:
         ab:b8:04:c0:ff:73:b8:31:fc:1c:ba:d3:6c:5f:d1:ae:c0:a7:
         a6:bc:db:21:f5:cc:c3:03:33:d1:f3:b8:b0:a8:a5:7b:2e:b0:
         9c:8c:a2:a0:ea:c8:cf:1e:92:dd:57:ab:9c:51:f3:fd:4f:2c:
         08:69:5f:88:43:54:df:df:aa:99:2d:fb:8a:5a:45:35:95:ca:
         21:1f:fd:2c:ba:56:2c:d6:49:e2:e4:e4:de:5c:4a:1e:74:0f:
         fd:16:0d:1c:07:76:dc:af:79:98:93:d2:1b:1b:df:ba:0f:0a:
         7f:4a:de:ff:e8:52:b8:5e:74:ca:dc:cc:8d:46:36:93:5b:15:
         b3:6a:1d:b0:5a:9b:48:93:a4:d0:40:74:67:82:e2:b7:2a:2f:
         28:f4:0a:28:3d:89:6f:03:5d:8a:ef:30:9e:e8:10:43:86:9c:
         fe:f4:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org