Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56ec7707-afdb-40ba-8595-e4bdae32ac9e/fdc38a16805dbffe9a14861a8612ea528eef0684.roa
File:                     fdc38a16805dbffe9a14861a8612ea528eef0684.roa (raw, json)
Hash identifier:          caKYs1hROE5jVhaeuS7qTNvx4gpq/sNKz83A9iJlcZc=
Subject key identifier:   F1:A0:D4:35:5E:A6:59:54:FE:13:AE:AB:80:CF:04:1F:8D:3B:03:3E
Certificate issuer:       /CN=c3b2eb960eb97ca4410d60bb16df8e07bd0dba96
Certificate serial:       1181
Authority key identifier: 3E:46:B1:C7:E6:78:A8:42:48:E7:DE:DB:38:31:13:7C:42:54:77:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3b2eb960eb97ca4410d60bb16df8e07bd0dba96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56ec7707-afdb-40ba-8595-e4bdae32ac9e/fdc38a16805dbffe9a14861a8612ea528eef0684.roa
Signing time:             Wed 13 Dec 2023 20:57:54 +0000
ROA not before:           Wed 13 Dec 2023 20:57:54 +0000
ROA not after:            Sat 13 Dec 2025 20:57:54 +0000
asID:                     265586
IP address blocks:        200.58.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4481 (0x1181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b2eb960eb97ca4410d60bb16df8e07bd0dba96
        Validity
            Not Before: Dec 13 20:57:54 2023 GMT
            Not After : Dec 13 20:57:54 2025 GMT
        Subject: CN=fdc38a16805dbffe9a14861a8612ea528eef0684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:16:56:29:b1:eb:33:d8:ee:7f:cf:ec:1a:
                    8e:40:ed:c8:f1:99:80:5a:f2:cf:92:47:38:16:23:
                    05:11:3b:be:c9:ae:51:a0:37:db:c9:ac:ea:fe:8a:
                    d1:4e:f4:a3:50:c3:2a:a0:4c:33:ef:ab:8c:db:b3:
                    c8:c5:8e:e6:33:cf:34:b3:de:79:4d:2b:b5:3c:d8:
                    20:78:a1:91:ff:6e:4c:80:04:9a:7d:9d:5a:9a:52:
                    de:c7:d6:fd:7b:99:b3:26:da:60:0d:00:f9:a0:a3:
                    dd:bc:4a:72:f9:6e:d4:f1:10:eb:05:8d:2c:57:d6:
                    c9:f2:24:4d:e4:7b:42:3e:b3:13:3a:0d:31:10:9b:
                    65:91:f8:dd:45:41:e4:cc:38:e6:b3:5c:6b:ca:c3:
                    43:21:99:35:cd:e2:96:47:f8:c3:01:25:c4:f2:92:
                    da:da:b0:1e:32:43:5c:df:c9:80:d5:8b:1c:30:d6:
                    7b:89:fd:44:a1:f4:d9:20:e6:0f:b2:ba:54:9e:4c:
                    1d:44:02:08:9c:75:7f:c7:ca:f0:9e:5b:75:12:f7:
                    81:8d:96:30:be:ec:ac:c7:2d:ce:a7:3d:8e:e7:4d:
                    0f:83:1e:76:8c:78:7c:57:f9:33:d5:22:80:08:e0:
                    60:ec:74:37:05:51:01:ad:39:0c:c0:4b:ea:79:fd:
                    7d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:D4:35:5E:A6:59:54:FE:13:AE:AB:80:CF:04:1F:8D:3B:03:3E
            X509v3 Authority Key Identifier:
                keyid:3E:46:B1:C7:E6:78:A8:42:48:E7:DE:DB:38:31:13:7C:42:54:77:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3b2eb960eb97ca4410d60bb16df8e07bd0dba96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56ec7707-afdb-40ba-8595-e4bdae32ac9e/fdc38a16805dbffe9a14861a8612ea528eef0684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56ec7707-afdb-40ba-8595-e4bdae32ac9e/c3b2eb960eb97ca4410d60bb16df8e07bd0dba96.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:1d:54:24:15:15:16:08:32:5b:a4:6a:83:47:21:f4:20:bd:
         2b:f8:91:ca:cb:4d:59:42:1e:cb:3a:a7:6d:b4:cf:8c:e0:fc:
         a1:9f:77:35:66:7b:a2:1b:d5:f1:17:b4:b4:62:68:6b:7e:4e:
         11:7a:db:8f:40:a6:9c:54:c0:f8:e9:af:c5:7d:04:da:07:82:
         2a:b2:90:a5:c9:0e:91:a6:36:8f:7b:28:76:c3:ba:a3:1c:34:
         ac:e8:1c:ea:18:f0:df:68:27:0f:70:d2:db:3d:be:82:d0:67:
         21:1a:fe:ba:81:59:4b:b7:7e:a5:73:a8:07:3e:4d:e6:85:b5:
         44:e8:2b:8c:67:82:58:ff:40:2f:0f:0e:6b:94:e9:5a:3b:55:
         94:1a:98:76:e5:c6:cb:db:77:52:89:9f:98:4d:7d:26:4a:33:
         b2:b9:e0:df:87:4e:ea:75:61:bc:8c:19:fd:f6:f6:82:34:76:
         e1:fe:b3:ac:85:2d:11:f9:b4:0c:d1:8d:f1:b2:f2:5b:9b:88:
         50:7d:4a:c2:33:3f:f3:87:ae:76:8e:59:5e:d2:fb:e2:03:60:
         9b:74:d9:12:4d:4f:b4:9b:73:d2:42:80:4c:da:03:30:0b:dc:
         91:3a:ed:b2:7b:aa:f8:a9:cd:76:32:b2:24:29:3a:ea:d0:20:
         b7:18:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org