Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/1fa413145cf8db9a659fc0971968750b8d0fcd98.roa
File:                     1fa413145cf8db9a659fc0971968750b8d0fcd98.roa (raw, json)
Hash identifier:          2Z426+jZSoahf8fQI4qofc/MwbA/1avZDp9+Mz2J1kc=
Subject key identifier:   20:06:20:50:B8:BA:69:3B:4A:C7:5B:3A:35:10:85:42:19:37:B0:83
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29D680
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/1fa413145cf8db9a659fc0971968750b8d0fcd98.roa
Signing time:             Tue 06 Feb 2024 15:37:23 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.7.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2741888 (0x29d680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=1fa413145cf8db9a659fc0971968750b8d0fcd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:56:59:0a:44:70:aa:d2:09:56:fd:d1:0f:
                    2b:b1:35:c0:f7:b4:1b:ab:fb:2c:e8:9d:1f:29:bc:
                    8c:11:cf:03:18:9f:96:d1:25:9c:80:df:cf:54:bb:
                    73:67:6d:73:7c:c4:13:6e:0e:5d:16:f4:31:7d:73:
                    cd:0d:8f:aa:4b:6d:5d:48:a4:56:4a:cd:1b:5a:b8:
                    26:2b:f6:f6:2b:11:ff:ba:16:c6:bc:f3:0c:87:ed:
                    c7:5d:e2:c1:d9:58:6b:55:1a:01:eb:cf:c8:19:6b:
                    36:8b:3f:e0:62:04:15:5c:b0:2d:69:bc:15:06:e7:
                    13:4c:b7:ef:fe:37:f7:72:36:4c:89:b9:3b:61:7b:
                    78:2c:cd:4b:65:bc:f4:f2:09:be:21:6d:f8:08:81:
                    9a:f9:10:cc:89:a4:a8:0e:cb:f0:87:57:be:88:e4:
                    56:ea:5f:a4:e0:f9:06:26:bd:c0:a7:10:ea:57:6c:
                    d3:04:13:ca:14:19:da:d2:95:2a:d7:58:2d:e7:9f:
                    08:b1:25:74:1f:dd:be:23:46:64:d3:d7:47:f5:fc:
                    14:dc:1f:40:b2:d4:f6:3d:bb:c2:60:f1:79:2e:9a:
                    40:3c:35:6b:27:6f:05:44:bf:98:41:3e:d2:e3:ed:
                    13:99:6c:05:88:d8:bc:d8:2d:7b:77:d3:d4:dd:ed:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:20:50:B8:BA:69:3B:4A:C7:5B:3A:35:10:85:42:19:37:B0:83
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/1fa413145cf8db9a659fc0971968750b8d0fcd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:86:cf:dc:63:32:ac:9a:65:9b:72:54:70:77:6f:42:cb:6c:
         49:2f:fd:98:30:a0:f0:59:c4:8d:68:be:f0:89:05:8d:9a:86:
         56:8d:39:fc:89:a9:24:78:e6:53:6b:5b:65:0d:1a:57:62:bc:
         33:e7:30:23:5c:76:d8:a6:4c:e7:22:8f:96:2e:ff:1c:cc:2a:
         10:07:30:00:24:27:5b:5d:9b:0d:a6:9c:ca:76:cc:77:c0:aa:
         72:b7:b0:05:44:db:9b:26:3f:13:d2:cf:08:64:04:06:dc:d7:
         88:ea:73:5a:90:a7:ef:93:e5:82:01:a5:eb:f6:05:20:84:f5:
         a8:48:ce:a0:8c:35:d8:98:52:f2:9f:6b:f9:5b:a7:dd:b7:f4:
         1d:07:8a:72:21:ac:74:de:af:46:23:71:c9:26:3d:2f:87:e1:
         08:a4:f7:e6:6b:ff:e8:33:df:7c:2c:b4:a4:50:6e:3d:32:ae:
         23:75:c3:81:6a:36:b6:9f:1a:21:a3:ba:42:00:e3:3f:23:56:
         15:b4:a1:9b:91:94:6e:86:f4:08:f6:25:08:53:e8:f6:0a:d7:
         4f:05:7c:50:01:c6:5b:3f:ae:08:74:af:0f:52:d9:8d:36:fc:
         12:88:24:5c:cb:47:92:98:3e:ae:57:4f:7a:29:b6:11:bd:e6:
         c3:18:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org