Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/008687d361edbef3fd8a8fabf45fda32dd193668.roa
File:                     008687d361edbef3fd8a8fabf45fda32dd193668.roa (raw, json)
Hash identifier:          TmoP61eEfIowmBiME/WLuSqnipg59N8B6t6BxKl7xCI=
Subject key identifier:   AC:34:58:C7:4A:95:12:DF:94:9C:13:3B:33:D3:04:BF:9D:74:14:E2
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26AEAB
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/008687d361edbef3fd8a8fabf45fda32dd193668.roa
Signing time:             Fri 27 Oct 2023 16:38:18 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.7.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2535083 (0x26aeab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=008687d361edbef3fd8a8fabf45fda32dd193668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:2c:3d:75:87:c8:58:af:df:61:03:e6:c8:
                    27:85:5c:95:5c:f0:ea:90:65:69:05:1e:25:68:76:
                    cf:1d:1c:2b:b4:05:a7:c0:d9:e7:2a:44:a0:8f:20:
                    ce:46:7d:9f:21:63:0a:b4:26:38:d2:ec:de:ae:12:
                    8f:e6:85:f7:d8:7c:09:1f:ec:a9:5c:23:e9:09:ac:
                    6e:9a:0c:bb:ac:51:60:56:c8:36:00:08:62:2e:1a:
                    bb:47:4f:8e:44:91:47:8f:26:e2:63:75:95:da:74:
                    6c:0c:d0:96:20:6c:18:37:f5:7d:19:fe:82:b3:2f:
                    0b:1b:d9:95:7e:4e:28:eb:e8:12:18:5a:02:16:90:
                    a9:17:15:df:0e:82:a3:2c:02:e7:71:85:f8:b2:76:
                    fd:1b:2d:5f:07:57:15:67:cd:7e:ba:d8:e7:46:24:
                    2b:4c:3e:f7:e6:ad:f0:00:20:50:54:84:74:fd:c8:
                    03:57:30:31:1d:03:13:3c:bd:3f:ff:9b:9a:63:a0:
                    1a:d0:49:ed:97:90:60:fc:90:8f:5e:6a:07:ff:4a:
                    2e:c1:55:86:e8:96:b7:6b:65:7a:32:a5:16:24:0b:
                    2b:df:d4:24:f3:79:af:2a:f1:a6:38:68:7b:e7:74:
                    82:2c:c3:d4:8b:66:1a:1c:1b:4c:b0:aa:fa:12:e9:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:34:58:C7:4A:95:12:DF:94:9C:13:3B:33:D3:04:BF:9D:74:14:E2
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/008687d361edbef3fd8a8fabf45fda32dd193668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:90:8a:cd:da:ee:4f:c2:32:c1:ee:db:c4:23:3b:b5:ce:f7:
         82:69:19:42:a7:13:c4:0d:a7:16:b2:79:66:ce:6a:77:63:1d:
         59:f2:5e:36:50:2a:2a:6f:3c:37:cd:8a:53:88:bc:86:21:cf:
         2e:37:dd:7f:70:ec:85:ed:0a:ad:47:ec:d5:1e:ae:08:47:3c:
         8f:39:0f:cb:3d:cd:f1:0a:45:9e:b6:c6:ed:e7:0c:08:a5:72:
         28:16:d0:09:b3:bf:bc:e6:65:da:d5:bd:a9:f0:80:1e:2b:f4:
         7b:fd:bb:a2:be:07:4e:21:35:d2:f4:14:be:da:34:c7:3a:1d:
         35:f7:34:fb:57:a3:ea:b5:37:e9:c0:ea:81:3c:f5:69:26:40:
         8c:6a:2b:a8:97:d2:a0:56:d1:a1:28:2f:24:e9:66:13:07:ab:
         cf:9b:0e:29:64:37:a5:3b:0a:a6:b2:65:e4:98:04:e8:53:cf:
         31:9d:6e:e6:42:47:55:df:44:ec:81:fe:b9:bf:6d:6e:d7:29:
         dd:89:7d:e4:06:d0:f6:5e:6c:72:08:04:18:70:b1:06:87:bf:
         fa:a4:7f:57:25:c7:11:99:db:54:8c:bd:1e:0e:8d:d4:e5:30:
         0e:49:71:6e:3e:ab:57:3d:93:d1:8a:c0:ae:46:42:f4:6c:48:
         84:06:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org