Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/181585bb08b6746d866c0d1bd0851994d39a3a02.roa
File:                     181585bb08b6746d866c0d1bd0851994d39a3a02.roa (raw, json)
Hash identifier:          2r70ACJEKdw2JJiArB35Pxk/QFR0zJNfnNwRbkoSvds=
Subject key identifier:   EC:34:8F:97:0A:AC:15:25:96:59:6F:D0:17:90:DC:DD:62:0F:F3:03
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29E3C3
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/181585bb08b6746d866c0d1bd0851994d39a3a02.roa
Signing time:             Tue 06 Feb 2024 15:37:33 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.24.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2745283 (0x29e3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=181585bb08b6746d866c0d1bd0851994d39a3a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:5f:bf:d5:9b:68:8d:be:60:88:71:e5:67:
                    23:8a:9e:c7:1c:73:51:30:e0:79:b6:97:d6:72:65:
                    b3:47:fe:30:bf:3a:54:08:26:09:40:31:6f:d9:92:
                    81:82:d4:b3:ee:3f:00:14:2e:2e:16:aa:20:b2:6a:
                    2a:36:b7:46:08:19:53:1b:c0:86:67:46:55:50:ae:
                    cd:79:e7:40:be:66:1b:6a:04:cf:80:53:46:68:60:
                    24:29:dc:59:72:3b:d6:6b:39:a1:fa:4f:fc:0c:bc:
                    b8:45:ee:79:44:45:5f:31:4e:47:a3:d9:7c:09:ea:
                    01:83:9c:fb:48:f6:22:15:ef:ca:10:b4:3e:f8:87:
                    af:83:2b:54:43:7c:8d:9b:ec:7d:92:b1:e7:a5:d3:
                    43:60:3a:ed:eb:12:69:fb:b3:1c:88:d7:dd:27:5f:
                    34:b2:ed:56:06:da:1c:b7:a8:ad:8a:21:54:bd:10:
                    c5:45:61:21:9a:18:19:90:21:15:77:ab:66:16:56:
                    2c:fc:52:75:99:23:c9:4c:a2:bb:71:84:da:c2:fe:
                    77:66:ec:96:8b:a3:3d:6b:7b:71:ee:d8:b9:67:6b:
                    36:76:57:5c:08:d2:b4:a1:fe:ae:d6:3f:ce:c4:79:
                    86:0a:6c:d8:7d:b8:88:4d:f2:1a:88:53:72:5a:75:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:34:8F:97:0A:AC:15:25:96:59:6F:D0:17:90:DC:DD:62:0F:F3:03
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/181585bb08b6746d866c0d1bd0851994d39a3a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:c6:88:8f:c9:24:78:d0:2d:54:fb:35:50:d4:59:ce:42:
         e3:90:77:12:d1:8f:52:5d:4a:d9:29:57:4c:37:6c:7a:73:5d:
         b8:33:48:c2:45:a5:0e:8f:ee:11:c4:a1:3a:7c:5a:34:9f:2b:
         0a:6a:b4:8e:84:22:cf:43:52:8b:a0:44:1d:56:9a:5c:d0:95:
         34:8b:f4:a9:26:4f:d9:1f:ea:fc:99:f3:46:16:72:b2:a5:d7:
         27:0b:17:e6:29:96:69:71:d4:c5:b3:6d:fd:a3:02:ff:0c:4e:
         d7:f0:0c:41:72:18:9e:21:5f:ec:8d:3b:e6:86:3d:52:5f:e8:
         22:34:52:80:83:90:33:57:eb:ed:53:65:f0:75:28:6a:f2:84:
         09:fa:dc:c4:e8:cb:5b:5c:92:0e:c9:a9:01:37:5d:ea:74:cd:
         16:1f:fd:0e:01:59:03:70:71:a1:a9:3f:6c:59:48:88:e5:67:
         94:fa:3d:2a:46:c2:db:20:ea:86:e6:ac:1e:76:c4:3a:09:90:
         67:01:74:a8:89:15:02:17:14:3e:74:be:da:d2:2d:c9:ae:84:
         46:9f:23:7c:ab:6d:c5:3b:3e:6c:18:23:2a:60:f5:1b:de:8b:
         e5:da:6d:c8:e8:ae:33:ad:f5:78:b8:40:c6:bc:92:96:5f:d1:
         8e:4c:3c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org