Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/0293dbfdca29f6042d4c839f1576b9c624494dff.roa
File:                     0293dbfdca29f6042d4c839f1576b9c624494dff.roa (raw, json)
Hash identifier:          K7DTEfLqWOQdhOcrx2sb5+ZNNDa5SiJTGXFg53kSgiM=
Subject key identifier:   A5:5F:AA:67:19:8B:96:C5:8C:81:CC:BA:27:CD:3B:0B:AB:22:A0:AA
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1D0AF1
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/0293dbfdca29f6042d4c839f1576b9c624494dff.roa
Signing time:             Thu 27 Oct 2022 01:30:24 +0000
ROA not before:           Wed 26 Oct 2022 01:25:20 +0000
ROA not after:            Sun 27 Oct 2024 01:25:20 +0000
asID:                     19114
IP address blocks:        200.7.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903345 (0x1d0af1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct 26 01:25:20 2022 GMT
            Not After : Oct 27 01:25:20 2024 GMT
        Subject: CN=0293dbfdca29f6042d4c839f1576b9c624494dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:2c:a6:ea:af:d3:d5:04:a4:32:78:74:61:
                    a7:bb:2b:c1:94:6a:c3:e7:96:04:49:13:57:0f:c1:
                    19:46:f9:da:48:6b:47:f1:80:78:18:67:49:aa:76:
                    57:9b:62:f5:78:1d:14:0f:60:3d:98:1a:6c:a7:b9:
                    68:4f:65:b3:4d:bc:ac:7d:a2:c6:08:61:f6:0c:0a:
                    e4:ef:22:15:88:d0:34:a5:f6:7c:c0:2a:02:c6:8d:
                    9f:51:e0:ec:a5:32:38:08:9d:7d:64:05:f5:50:01:
                    ed:d6:a1:55:7f:99:9a:ce:d4:01:b7:f2:fa:92:48:
                    d1:73:fb:1e:32:e1:0d:39:42:30:6a:cd:18:1a:8b:
                    54:53:b5:5b:33:7a:98:2b:db:94:b1:e2:b9:3a:05:
                    3c:ef:59:17:de:8f:9a:8b:bd:e3:1d:8d:e2:9e:ef:
                    85:8f:ca:1d:3c:ce:ad:80:a2:ea:89:78:9c:a9:6a:
                    b2:7b:df:cd:3d:4e:58:4e:48:81:a9:f6:22:da:4e:
                    24:dc:29:df:fa:ed:f2:8d:c7:f1:55:84:ca:4a:2f:
                    75:e1:ce:e2:bb:98:57:ae:9a:e1:48:bb:ac:aa:38:
                    18:03:ac:f5:0f:b2:31:64:7e:71:c2:b4:b6:0a:35:
                    d6:41:86:f9:fa:e7:06:d7:8c:dd:b0:0f:03:11:ac:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5F:AA:67:19:8B:96:C5:8C:81:CC:BA:27:CD:3B:0B:AB:22:A0:AA
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/0293dbfdca29f6042d4c839f1576b9c624494dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c1:95:89:a9:c2:f4:69:69:4f:f5:b8:32:33:74:56:e2:31:
         bc:26:80:52:2e:53:ce:5f:82:1f:0c:2e:d1:9e:d7:e1:8a:c3:
         3a:6c:46:9b:c5:f8:7f:9a:4f:78:1b:4a:39:60:c3:4a:63:0b:
         0c:87:9b:cb:93:9d:69:d0:e4:5b:4a:c0:1a:5d:f1:61:4f:2e:
         ba:61:38:c8:10:aa:83:03:1d:4b:59:3e:45:c2:3b:c9:ea:28:
         bb:3c:52:80:4c:7d:f5:f2:41:12:8a:19:58:5e:2e:55:c2:42:
         72:1c:56:c4:e9:74:dd:0e:89:af:1b:51:e5:c2:e0:78:f1:e2:
         87:5d:dd:39:3c:83:c8:1c:cb:67:e7:b8:22:10:71:aa:89:68:
         0f:b0:03:5b:9c:f3:41:ee:1b:49:df:22:9e:3d:ee:fe:f7:f8:
         ae:8c:8e:94:ee:fc:32:25:7e:fd:25:aa:89:78:bd:14:c2:86:
         10:bd:dd:ba:12:ed:28:a2:f4:4d:7a:90:bb:fd:ed:3f:13:cc:
         47:94:be:46:1e:ee:d3:eb:92:e7:93:b0:81:b0:cf:f7:d4:ad:
         7a:26:77:12:85:78:35:3a:13:14:c0:47:41:01:49:6e:b5:33:
         17:d3:c4:05:c7:59:8c:f5:90:80:58:d5:4b:a2:d5:89:36:be:
         70:91:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org