Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/153d1df2fe4465a5aac16b072d7b5633f05baa30.roa
File:                     153d1df2fe4465a5aac16b072d7b5633f05baa30.roa (raw, json)
Hash identifier:          fXKZr+eAQGSA83gWZYGTBM++VrI7UYzhG2mv2dZIL/M=
Subject key identifier:   B1:43:3F:29:61:A4:BC:43:61:06:F2:9C:D0:CE:09:2B:B6:CD:A9:6F
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29D004
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/153d1df2fe4465a5aac16b072d7b5633f05baa30.roa
Signing time:             Tue 06 Feb 2024 15:37:21 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.7.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2740228 (0x29d004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=153d1df2fe4465a5aac16b072d7b5633f05baa30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:a9:fb:34:33:f6:71:19:44:3d:9a:34:dd:
                    83:5e:4c:8e:86:bf:5c:66:20:fb:ef:e7:fb:ce:c8:
                    95:ac:5a:c1:06:f0:9c:80:ab:e3:01:de:33:11:84:
                    18:b1:8e:43:08:38:0c:5f:45:6b:3f:f1:cd:28:65:
                    ae:fc:c3:f8:99:f4:b1:c7:fa:17:6d:63:3f:eb:6e:
                    5e:cd:75:40:5e:06:44:dc:e9:7a:6e:42:4c:27:41:
                    fd:8f:18:56:69:78:d6:5d:ea:e5:55:81:5c:55:43:
                    a0:06:0a:c9:13:84:5b:49:52:39:f9:87:8c:1f:66:
                    7d:8f:93:9e:75:e0:44:e2:02:7f:6f:a1:19:38:ba:
                    d3:d3:a7:3f:9a:a6:3e:2d:f7:de:b4:23:d9:51:c4:
                    6f:20:a8:79:b2:07:ba:f4:e4:46:60:8c:19:87:9c:
                    2c:db:00:25:c7:5d:6c:41:ca:c0:c0:f2:b8:8a:c8:
                    50:7f:52:b0:71:e8:35:bf:94:62:44:8e:ec:72:dd:
                    73:30:d1:9c:fa:70:19:2a:4f:61:ba:5d:b3:aa:d1:
                    0f:f7:cf:18:15:d7:f8:7e:8b:dd:1d:18:b7:42:1d:
                    7e:62:c2:57:cf:bd:e4:fe:79:3b:1e:df:d5:d0:00:
                    c7:28:a9:75:92:42:f8:08:69:97:a1:63:1d:23:c8:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:43:3F:29:61:A4:BC:43:61:06:F2:9C:D0:CE:09:2B:B6:CD:A9:6F
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/153d1df2fe4465a5aac16b072d7b5633f05baa30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f4:70:07:30:83:65:01:81:01:70:44:ee:24:f7:08:81:c0:
         48:a0:a0:91:2b:3b:47:40:b5:f8:ff:5b:eb:14:e3:d9:ca:bc:
         87:16:27:82:1e:d5:ed:9b:bf:18:16:f3:e7:9f:b7:78:48:1b:
         ad:2b:8f:46:f9:a3:e4:42:b6:f9:b9:a0:48:29:34:ea:ab:81:
         04:0f:6d:39:08:a6:00:1d:e0:ee:a0:18:dd:ba:6d:3d:2b:59:
         7f:c8:1a:7a:a0:f6:46:c9:66:24:87:0b:b0:86:51:8b:76:dc:
         1e:87:89:08:2b:05:3e:c8:49:54:08:28:86:bf:8d:24:3c:2c:
         08:04:14:09:55:fa:35:0b:02:d0:91:80:73:ec:29:7b:0b:33:
         bf:75:1d:f7:04:96:bb:c6:33:5f:a1:ad:c3:5c:b2:1c:ce:a4:
         2d:a4:9a:0a:e4:1a:ee:8b:a9:53:59:cd:e9:7a:55:b2:64:0f:
         3a:1a:11:3b:ec:2c:bc:31:0b:bf:d5:66:05:a1:9a:73:25:b7:
         39:80:9e:e1:c7:23:ff:f5:6f:51:c1:40:d4:1c:19:51:72:41:
         ae:cd:7b:be:38:ff:85:15:71:75:ce:b2:36:74:ef:f3:07:73:
         b4:8d:66:4d:93:f9:ab:0c:96:a3:7a:51:81:50:2c:4e:8f:b8:
         76:42:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org