Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3972724f68a1cf3f3337eab6e1e0d9e72332c0eb.roa
File:                     3972724f68a1cf3f3337eab6e1e0d9e72332c0eb.roa (raw, json)
Hash identifier:          TxJnhieFR9DSoqpSB/3KSXfaTazFotd+YZp0EKK7AL8=
Subject key identifier:   7F:D8:A0:26:AC:9F:02:29:5E:32:C1:CE:8B:D3:7B:40:EA:83:A0:BD
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DD525
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3972724f68a1cf3f3337eab6e1e0d9e72332c0eb.roa
Signing time:             Thu 07 Dec 2023 12:42:39 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     27827
IP address blocks:        200.43.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3003685 (0x2dd525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=3972724f68a1cf3f3337eab6e1e0d9e72332c0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:f4:b1:76:a6:59:f0:4f:78:55:4e:e9:e9:
                    87:1a:81:9b:14:1b:43:c2:78:32:c2:49:50:d5:95:
                    a2:9e:48:c1:d8:ba:ef:16:8c:fc:30:0f:5b:31:18:
                    80:42:83:96:25:24:22:16:87:39:35:d5:e8:4b:c8:
                    82:80:be:58:fe:8c:7b:d3:33:58:61:b4:11:6b:25:
                    e9:89:b6:b6:36:bb:a3:0a:b3:6c:fa:b8:22:fa:03:
                    8e:6a:1a:3f:6d:58:e6:5b:b1:4d:10:5d:b1:60:a1:
                    e3:4c:05:e7:b2:9c:f7:64:08:48:a7:c4:47:66:e3:
                    5b:5b:97:74:f7:1a:f1:84:13:b2:9a:af:c2:e8:04:
                    33:95:b1:6c:94:98:93:a7:31:0e:7e:03:c2:c1:a4:
                    87:c0:82:af:39:ab:d4:ad:b0:4c:1e:b5:41:7f:08:
                    08:ea:6a:94:74:ab:92:a3:f0:da:f6:40:57:4e:38:
                    bd:a5:17:f4:c1:f6:ae:30:99:d8:3d:b2:3a:7a:d4:
                    80:6c:73:f4:f7:a3:c4:82:57:41:31:6b:b9:42:e2:
                    6e:6e:b7:ae:97:fb:54:f1:34:da:b0:34:fd:26:0b:
                    78:9c:a1:fb:3f:30:3d:dc:88:98:25:29:63:f0:e3:
                    89:9a:8b:09:da:5d:45:c9:65:45:0b:de:64:e2:b3:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D8:A0:26:AC:9F:02:29:5E:32:C1:CE:8B:D3:7B:40:EA:83:A0:BD
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3972724f68a1cf3f3337eab6e1e0d9e72332c0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:8a:d7:47:91:67:6e:63:48:36:db:1e:e0:80:9b:03:9b:
         a4:d0:e9:c6:e9:1a:7c:fd:fe:7f:e2:15:0a:6e:c2:2e:a7:f5:
         1a:d0:8c:c2:f7:8c:7c:d3:30:15:a2:bf:a3:57:a1:fc:81:37:
         e1:61:66:b1:8a:75:c1:7b:f8:37:e5:4b:1d:0a:8b:f0:74:0b:
         1d:0d:ab:bb:0c:0f:d0:0f:6d:48:96:24:0e:50:ec:99:38:9d:
         05:18:36:f7:9b:40:8b:4a:3c:91:77:54:8d:98:3c:72:c2:ca:
         74:d6:62:32:ea:2f:d6:6d:25:da:ed:92:ae:94:93:4c:41:ed:
         c9:e0:35:4a:05:6b:73:1c:31:ec:46:68:38:12:a0:b6:1d:18:
         a8:b4:f5:32:31:1c:95:0d:bf:5a:7d:11:88:00:88:3f:19:45:
         c9:4b:43:df:7e:58:a3:e5:12:a0:2e:09:f6:c6:ca:8e:67:96:
         a0:73:64:82:b7:d1:a8:da:66:49:02:63:b4:73:2f:26:4a:eb:
         51:bc:02:e5:e9:1a:70:b8:7a:f6:cf:4f:a9:5c:6a:ae:03:d6:
         5b:b6:89:f3:25:a8:cd:24:81:49:52:78:06:7d:31:53:19:10:
         6a:07:48:31:a7:89:e5:21:64:70:9c:df:19:91:a1:2d:c0:fd:
         b9:34:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org