Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d2d2bce65f043421f6110e245c0eae0d07c6e44e.roa
File:                     d2d2bce65f043421f6110e245c0eae0d07c6e44e.roa (raw, json)
Hash identifier:          /cgsVMB8pFEQfoO/l8Pn2LJu4qs/QFiPOrxr+xA1nMg=
Subject key identifier:   56:CB:4A:37:A5:57:33:94:D7:6D:BC:E3:08:03:FE:9C:58:3E:D9:37
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E83B0
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d2d2bce65f043421f6110e245c0eae0d07c6e44e.roa
Signing time:             Thu 07 Dec 2023 13:01:40 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     27997
IP address blocks:        200.43.55.0/24 maxlen: 24
                          190.226.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3048368 (0x2e83b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=d2d2bce65f043421f6110e245c0eae0d07c6e44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:0a:b9:b9:6d:01:9f:28:d2:66:7d:aa:9d:
                    75:29:8a:1a:f5:73:35:c5:2b:95:05:68:67:70:d2:
                    f0:79:11:58:4b:37:f2:2b:c1:57:53:2d:29:c2:01:
                    a2:e8:c2:ba:5a:59:25:05:f7:63:7a:cc:80:d5:d3:
                    d6:93:03:16:3b:a8:14:42:fa:ef:49:ec:f1:22:20:
                    cf:77:8c:be:6b:08:0a:09:0c:52:c7:81:cd:d4:f7:
                    df:2d:ab:14:a5:53:d4:fd:c7:07:e2:e1:b4:23:63:
                    d6:90:6a:42:16:33:6f:6f:ac:92:23:0a:7f:69:b2:
                    15:1a:3c:7b:c4:58:c2:12:77:9c:87:dc:23:9c:a1:
                    21:4e:d9:aa:83:fc:b8:ae:05:1e:d3:ab:35:da:6d:
                    e0:d6:37:4c:03:21:ed:64:21:a8:a4:3b:93:72:f2:
                    df:13:35:74:a4:d9:b0:21:0b:0c:d2:26:eb:c4:bb:
                    a8:83:fe:6a:c9:3b:17:84:c1:bd:2d:4e:2f:7b:dc:
                    25:b8:f0:5d:62:c8:62:57:cb:82:b7:d1:d2:94:00:
                    4a:fc:11:3f:7e:20:b4:2f:a9:eb:b6:12:89:17:30:
                    24:d4:dd:c0:09:88:5f:16:f0:9c:af:da:14:12:3c:
                    3b:68:61:52:12:e1:33:c1:64:64:6d:62:08:6d:c5:
                    6c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:4A:37:A5:57:33:94:D7:6D:BC:E3:08:03:FE:9C:58:3E:D9:37
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d2d2bce65f043421f6110e245c0eae0d07c6e44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.241.0/24
                  200.43.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:13:b6:0c:84:ee:9c:6a:ff:0b:a5:4c:bb:f0:8d:b4:ce:96:
         3c:b4:00:2d:13:83:56:b6:51:c3:5c:62:8a:d3:d7:b2:36:f4:
         ff:cd:a1:4b:c7:f2:f4:c9:0b:f4:14:ec:5d:82:e8:f9:0c:c1:
         cc:2a:f7:97:2a:96:5d:a4:34:4a:cd:da:3e:d1:ff:00:7b:77:
         0b:28:2c:f4:74:b5:51:33:52:32:bc:df:bc:6a:b5:c0:c5:9c:
         37:8f:d3:5d:d4:08:7c:49:47:c8:32:ee:7c:ea:3e:a6:58:f4:
         55:a5:62:2b:8a:40:45:b4:57:30:6e:32:ac:50:f3:c8:00:a4:
         13:04:31:53:ad:b7:42:ce:5f:17:c8:5f:3a:d2:5b:b8:a0:84:
         ee:37:47:72:00:f0:82:45:21:3d:9e:13:c2:7d:53:78:34:b8:
         55:5e:fe:53:06:19:75:3f:ae:a6:c9:4a:7d:94:8d:88:5a:d6:
         f7:56:a0:a6:10:67:fd:af:a6:c0:79:bf:f7:26:2a:dc:9e:be:
         95:47:f7:5d:dc:a9:ba:09:cf:a4:2d:70:0c:3a:53:c7:b6:f3:
         9d:c5:8c:77:34:40:da:74:6e:dd:82:10:69:2c:5b:68:9f:64:
         8c:fd:0d:5c:a8:a4:85:dd:76:c9:75:83:22:a1:94:9c:f2:b5:
         0d:92:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org