Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/175c4215d900c0c825f38970ac7edf519cddadb5.roa
File:                     175c4215d900c0c825f38970ac7edf519cddadb5.roa (raw, json)
Hash identifier:          73b9MhpM4yjhtGw55CVCY69CiPzzkMDA7Owot6f3YtI=
Subject key identifier:   47:6D:82:1B:B4:25:16:1D:6E:16:A5:8A:02:B9:8E:66:58:BB:7B:EA
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DBC37
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/175c4215d900c0c825f38970ac7edf519cddadb5.roa
Signing time:             Wed 24 Mar 2021 14:40:24 +0000
ROA not before:           Wed 24 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     263738
IP address blocks:        200.7.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900151 (0xdbc37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=175c4215d900c0c825f38970ac7edf519cddadb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:2a:8c:b0:48:74:2f:65:18:d2:82:a7:cd:
                    b0:a8:d2:56:9b:48:80:77:5a:fa:65:fb:af:28:ce:
                    3a:33:e7:d3:c6:cd:61:27:3f:3a:84:df:d1:50:f4:
                    ef:6d:9b:ad:37:cc:42:cf:87:90:a2:a0:86:21:58:
                    e8:4c:86:d1:d7:f3:02:ad:04:93:35:46:60:e5:31:
                    2a:2b:6e:5e:bc:bb:da:65:58:30:28:67:ad:6f:12:
                    d4:c5:51:5c:8a:7e:73:59:50:13:36:03:18:ff:02:
                    58:a1:27:4f:21:97:5f:a8:8b:d2:20:1a:ab:3b:d4:
                    7a:ab:30:6b:51:de:57:79:5d:53:de:31:70:a9:44:
                    d5:01:7e:64:e5:99:33:78:21:b1:ed:9e:7f:df:ae:
                    87:a0:bd:bc:12:3d:9c:52:e7:88:4b:3a:d1:3e:08:
                    5f:76:a6:bf:23:35:3b:7f:ee:34:05:21:e9:2f:2c:
                    ed:34:8a:1d:14:3e:98:2b:8b:87:68:ca:7e:f7:e4:
                    64:fd:d3:5e:9c:5d:d3:a1:5c:d6:8a:09:92:de:c6:
                    43:c8:7d:1d:52:b0:fd:a7:53:47:21:9f:b5:21:f4:
                    fa:f3:8a:75:7d:f7:b8:29:35:af:dc:13:53:2f:09:
                    63:ce:9c:17:5b:a4:c1:c8:ae:1b:1b:74:6b:26:60:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6D:82:1B:B4:25:16:1D:6E:16:A5:8A:02:B9:8E:66:58:BB:7B:EA
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/175c4215d900c0c825f38970ac7edf519cddadb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:1e:ac:24:ae:4b:be:19:d4:73:19:a8:a4:3a:42:2e:85:e5:
         b6:69:5d:2e:74:4f:89:0b:80:c4:3b:ad:8f:28:e9:cb:24:ac:
         9a:ac:3b:19:f7:8f:da:af:9b:45:ff:d9:d7:ae:30:83:7c:8f:
         4f:4a:a0:ca:49:6c:c9:91:2d:72:f3:75:27:b1:ea:5c:b4:6c:
         1f:de:c1:da:c0:b9:56:a1:09:77:3f:f8:b4:bb:ec:ef:14:d1:
         cf:c1:5b:27:34:ae:17:f1:bc:f8:d2:4d:20:24:79:f9:0f:eb:
         72:a1:73:11:1f:32:ef:4d:51:6b:93:d1:09:a0:3e:ca:63:cd:
         23:f1:cf:70:12:53:ea:6a:cc:41:b0:8e:f0:71:b8:55:a2:34:
         91:22:36:a2:05:33:03:a7:71:93:82:95:cc:4a:ba:a1:2c:f8:
         33:fa:38:27:07:64:ab:0e:a8:9d:e3:32:ba:6e:cc:53:e3:15:
         c2:38:c6:f6:2f:11:88:6f:7c:37:66:de:f8:5b:dd:87:74:84:
         80:6a:00:25:e8:e9:06:c2:89:8e:2d:86:7e:2c:3d:06:5e:62:
         51:15:4e:91:a2:6b:cb:ab:28:9e:47:f0:8d:cf:bd:fc:2b:1d:
         96:93:fe:f7:64:22:c5:5a:f0:dd:9c:7b:ef:5a:16:db:d8:ec:
         99:2c:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org