Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6400fddf4d34873c4e1b10f0439fab3a8965269c.roa
File:                     6400fddf4d34873c4e1b10f0439fab3a8965269c.roa (raw, json)
Hash identifier:          IjP1Sa8RUqV/zO3ob29dsfzWL5LsyIo3LBm1CiTgzog=
Subject key identifier:   AD:EA:28:05:C5:4F:2A:10:C3:DE:4D:A0:82:B2:40:37:F5:9B:73:42
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DC2E6
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6400fddf4d34873c4e1b10f0439fab3a8965269c.roa
Signing time:             Thu 07 Dec 2023 12:42:28 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     264691
IP address blocks:        200.43.55.0/24 maxlen: 24
                          190.226.240.0/21 maxlen: 24
                          190.226.248.0/24 maxlen: 24
                          200.43.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999014 (0x2dc2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=6400fddf4d34873c4e1b10f0439fab3a8965269c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:b0:a6:f9:e0:97:50:fa:63:15:aa:19:1e:
                    f9:32:71:99:f9:61:15:2d:df:ed:4c:ba:99:61:18:
                    41:56:da:d4:13:a8:7f:e2:0b:ab:84:cb:c5:d7:03:
                    e6:47:15:cb:62:31:da:3d:93:be:75:62:ec:6c:70:
                    f2:24:c9:4e:0d:6a:48:10:17:d4:21:16:06:67:f1:
                    bb:9c:e0:82:b1:23:75:e9:21:40:95:ce:c8:87:ff:
                    df:34:18:1d:09:f6:de:2b:93:97:bf:d8:39:9d:b4:
                    dd:ab:f4:ec:b7:c4:ae:34:b6:ef:73:7e:24:ab:9f:
                    6f:f5:d8:3b:17:a9:ee:80:e5:d7:b7:36:9b:0f:2f:
                    ba:07:55:cc:45:1c:e9:b7:b2:a3:92:27:32:aa:1b:
                    1b:12:7d:0b:f8:33:64:59:c4:e5:f0:49:77:e0:63:
                    b9:75:79:a1:b6:26:c5:63:c8:f3:8b:f8:ee:5c:04:
                    eb:d9:8f:41:9d:83:36:9b:a5:70:df:86:9e:d5:51:
                    cc:6c:d2:a9:61:51:b5:32:6c:c4:64:3a:14:f2:d0:
                    1a:92:d2:a3:df:55:4a:c6:8b:6d:cd:68:0e:be:c2:
                    e6:ae:fc:8e:6f:7a:7c:31:46:ec:a9:58:2a:fb:ec:
                    f3:78:5e:de:35:0b:8e:c8:23:30:97:a6:ee:af:07:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EA:28:05:C5:4F:2A:10:C3:DE:4D:A0:82:B2:40:37:F5:9B:73:42
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6400fddf4d34873c4e1b10f0439fab3a8965269c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.240.0-190.226.248.255
                  200.43.55.0/24
                  200.43.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:da:2d:3f:e7:38:18:e3:17:81:99:e4:c3:fe:b9:f6:b5:50:
         08:95:5b:e3:5d:33:b2:46:0b:ad:1e:95:a7:a9:6e:b8:de:39:
         c2:c4:de:4c:c4:10:73:62:f8:ff:91:c8:ff:a6:1e:79:4c:e6:
         17:38:43:2d:0d:cb:eb:35:f3:90:b8:66:9b:c3:64:71:1a:fc:
         58:57:94:fa:7c:2d:07:e6:a4:d2:f2:35:79:93:43:bc:37:8a:
         53:b3:2b:26:a6:84:f1:dd:26:23:a5:54:97:f7:c3:86:86:f7:
         b6:9e:3a:ed:62:18:e5:e2:ef:60:9d:43:db:2c:dd:df:76:30:
         a5:17:79:b1:ef:d9:80:e0:9c:86:d2:ec:16:0f:c7:b0:20:3e:
         ad:6c:ab:1d:a3:c4:da:bd:32:14:29:b1:5a:53:3d:5a:b3:7c:
         53:2e:4a:22:4b:c2:a5:19:a6:ac:9f:59:af:1f:8a:fc:1e:8e:
         f9:ea:c8:77:d8:86:63:2c:a5:da:1a:32:68:be:22:ed:3a:df:
         0a:24:74:ae:84:78:af:40:6a:ca:82:ae:a1:10:27:40:a1:c9:
         98:70:29:b2:7e:dc:47:0a:cb:e6:63:97:b0:3d:94:59:44:14:
         81:82:67:71:17:14:1f:d9:a1:7a:00:9e:3f:26:f3:bb:e7:77:
         b8:fa:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org