Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/056375e129122ec930095216ec8013ae37ba7c23.roa
File:                     056375e129122ec930095216ec8013ae37ba7c23.roa (raw, json)
Hash identifier:          zBQSH/T81KUN8LDQ/MvpVo3dOw2CYAQs8yze6Lajug0=
Subject key identifier:   92:F5:1B:EB:43:72:F0:05:92:D4:52:6E:81:66:30:15:BE:F6:F0:23
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1FCA14
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/056375e129122ec930095216ec8013ae37ba7c23.roa
Signing time:             Tue 14 Feb 2023 17:56:54 +0000
ROA not before:           Mon 13 Feb 2023 17:55:15 +0000
ROA not after:            Fri 14 Feb 2025 17:55:15 +0000
asID:                     19114
IP address blocks:        200.7.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083348 (0x1fca14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Feb 13 17:55:15 2023 GMT
            Not After : Feb 14 17:55:15 2025 GMT
        Subject: CN=056375e129122ec930095216ec8013ae37ba7c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:78:20:4c:11:9d:d3:70:a7:73:50:c3:99:88:
                    c4:2c:38:f9:7c:bb:82:75:ba:a6:c9:d6:d7:63:41:
                    a7:54:78:fb:8f:3e:50:29:91:7b:05:64:d6:f6:8d:
                    5e:2a:b8:7c:cb:c8:b7:69:4a:68:b6:a9:57:9a:c9:
                    c5:f8:4a:27:0f:18:2b:ae:49:95:4b:7a:da:f8:d1:
                    de:ef:ad:9c:77:da:24:92:0f:e4:6a:ef:7d:ba:d3:
                    10:3b:11:7d:62:83:ab:fa:3d:3a:c8:3b:44:d7:bc:
                    e5:97:d3:52:56:27:99:94:d1:80:b0:86:75:8b:d4:
                    b4:62:98:1b:a5:21:07:ab:25:eb:e4:9c:9f:84:c3:
                    c5:7c:a7:27:6e:88:cc:bd:e2:50:01:3a:44:9b:ba:
                    8e:b9:e3:ec:e6:a6:82:74:01:78:4e:f3:27:ae:53:
                    d6:75:dd:ed:c6:37:99:d4:60:06:e8:23:46:00:e6:
                    ab:77:29:80:83:34:e0:7e:6e:14:e4:7d:a4:b4:fd:
                    0a:f3:02:bc:26:4f:bf:d4:ab:9e:5b:b2:4c:11:ea:
                    89:a1:87:9e:70:d1:77:db:21:f1:bb:b9:73:54:28:
                    b6:11:90:a3:ab:7d:3d:f4:4d:77:f6:16:0d:97:8b:
                    23:2a:5a:2e:76:03:16:a8:71:17:ec:0f:95:3a:8b:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F5:1B:EB:43:72:F0:05:92:D4:52:6E:81:66:30:15:BE:F6:F0:23
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/056375e129122ec930095216ec8013ae37ba7c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:df:f0:6b:97:39:9f:bd:66:06:da:3c:a2:aa:c1:0a:16:ef:
         14:65:43:59:d0:6e:2a:9d:98:f5:cf:07:7a:40:71:a4:61:a5:
         0a:e2:c7:2d:a1:75:f6:b1:b1:30:9f:1b:19:be:18:3a:34:e3:
         ee:d0:90:67:88:51:c1:34:8c:2b:cf:46:f9:a3:b8:6c:bb:03:
         b6:2b:7d:a0:bb:22:2d:eb:47:ca:9a:65:7e:dd:0e:31:5a:56:
         b7:f9:d1:ab:39:de:38:90:7a:95:a8:ab:cd:2f:ab:f9:f1:04:
         84:21:d8:cb:57:76:81:c9:aa:ab:ed:53:39:f1:ae:ff:3b:41:
         0f:1a:a4:ea:1b:4f:79:e7:cd:44:01:08:66:7c:1f:c4:5b:0e:
         09:df:99:e8:49:a7:0c:e3:fe:bc:88:00:19:46:68:53:b8:4d:
         21:bb:c8:f5:ad:cb:cb:e3:35:40:82:0f:53:d8:61:48:b9:66:
         14:74:d4:84:a7:a0:03:2e:bf:10:78:2a:61:8c:e5:6e:cb:01:
         6d:d2:ac:0f:b0:a9:e4:5d:3a:3d:56:7e:bc:b0:cf:8a:eb:bd:
         f4:5a:8f:ee:b8:38:f1:33:3c:b9:13:b3:6d:a3:bf:e4:ec:43:
         c5:dd:d8:80:90:39:1e:38:0e:6e:6b:69:b8:30:dc:f8:c6:6c:
         20:70:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org