Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/07f7129a05af87e536643e3de69c95d323863a39.roa
File:                     07f7129a05af87e536643e3de69c95d323863a39.roa (raw, json)
Hash identifier:          0Wg/wimZD0lMHGUWqdnzcuZaTcizKU2Oa/1o/4NVOLM=
Subject key identifier:   A4:18:32:9C:0B:08:15:64:C0:BE:DC:3C:26:D3:29:62:84:E7:D0:E7
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       2699C0
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/07f7129a05af87e536643e3de69c95d323863a39.roa
Signing time:             Fri 27 Oct 2023 16:38:07 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.7.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529728 (0x2699c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=07f7129a05af87e536643e3de69c95d323863a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:5f:c3:1d:c1:7e:84:c6:52:ae:ca:a4:1d:
                    b5:08:4b:d7:2e:e3:0e:69:6e:bd:f5:b2:af:e2:a5:
                    e4:35:37:5f:44:4a:af:c2:2e:87:ee:aa:90:e2:82:
                    a0:79:9d:50:15:93:ab:e4:63:bb:3f:b0:6e:de:29:
                    3a:66:60:d8:86:7c:ae:e4:d1:5a:85:c4:43:e4:1b:
                    d8:a2:10:4c:b0:f2:90:17:f5:3b:70:a0:28:b0:58:
                    f5:72:ee:a3:f8:07:95:29:69:72:9d:a2:62:3c:4b:
                    40:ee:f4:a2:a0:49:ea:55:ff:77:1d:9e:5b:9f:d1:
                    8b:5f:17:e2:2c:70:1c:03:8b:f0:27:c2:04:88:d6:
                    e7:a3:fa:49:2a:7c:91:a6:5f:86:5b:67:5f:de:85:
                    19:1f:b3:90:d6:c9:98:20:5e:b2:26:ba:73:fd:b2:
                    49:7b:30:37:60:bd:61:fb:83:7a:86:e0:ed:27:8b:
                    b6:d3:e9:94:1c:c1:65:2a:68:11:10:23:fc:ce:d8:
                    53:01:79:c9:b3:4d:35:80:35:6a:ce:ba:ed:9d:c8:
                    7c:7d:8f:f9:06:ff:f9:a6:a8:53:06:1e:ad:5c:97:
                    72:61:62:f0:78:b4:b1:72:de:eb:b9:80:16:7a:4e:
                    8c:d0:81:6c:a4:21:54:34:83:a2:13:eb:42:ef:ce:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:32:9C:0B:08:15:64:C0:BE:DC:3C:26:D3:29:62:84:E7:D0:E7
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/07f7129a05af87e536643e3de69c95d323863a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d2:74:7f:b1:3a:f0:59:d1:48:4d:82:0b:88:d4:58:ee:c8:
         ad:89:87:f0:fb:23:10:cd:f2:6e:25:f1:ad:ce:1e:29:c6:2b:
         d4:88:bb:58:67:e8:a2:06:a0:b9:f1:40:57:a1:27:3f:d9:f3:
         24:e8:12:63:47:d5:32:8d:d9:cb:0e:88:b4:37:c8:8c:0b:b4:
         fa:97:c6:f8:8f:fa:b9:49:a1:dc:a9:b0:b3:5c:5f:e3:e2:cf:
         00:55:cc:67:3c:fd:8b:41:df:94:26:ee:8b:d6:81:a6:1f:58:
         80:96:10:d5:05:eb:a6:ec:6b:51:3e:e6:c3:9d:bc:62:d5:e9:
         d4:26:9c:0e:39:c9:f5:21:71:9a:8b:c4:26:01:88:e3:1e:45:
         5b:aa:9b:32:3e:a7:08:53:ba:98:a4:98:63:2d:c4:d1:6f:94:
         1d:1b:6f:3f:f2:19:12:d4:96:75:45:1c:43:e5:67:66:5a:1c:
         2b:d3:06:8c:b5:82:b7:d1:cf:f0:52:5e:fd:08:ec:2b:53:19:
         1d:b9:c7:b2:f3:2e:1a:a8:f0:45:cb:b8:7f:ca:14:b7:ed:51:
         17:2d:16:4a:e2:47:75:8d:1b:bc:a0:c3:f3:71:e1:96:63:cd:
         2b:c4:d1:3c:c2:b1:0d:70:bd:3d:a8:6c:5b:f5:57:36:bf:b8:
         27:0c:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org