Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/229dd3c7aa342d79f3d56fd5c8bab5d07687655f.roa
File:                     229dd3c7aa342d79f3d56fd5c8bab5d07687655f.roa (raw, json)
Hash identifier:          EvAk4ITTxemAtsuOkZjltGNw6sXQFQc6O06YnPj1Dgs=
Subject key identifier:   1A:19:62:1A:38:A5:EB:DA:E1:5E:3B:5C:A8:BF:36:AB:0A:A5:3D:EC
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26B482
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/229dd3c7aa342d79f3d56fd5c8bab5d07687655f.roa
Signing time:             Fri 27 Oct 2023 16:38:21 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.24.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2536578 (0x26b482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=229dd3c7aa342d79f3d56fd5c8bab5d07687655f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:80:85:2b:41:a4:46:38:97:76:63:0a:56:
                    32:c0:36:4b:93:c5:4e:45:89:e5:39:0e:f6:65:9f:
                    18:15:89:e3:76:8e:9c:28:b0:5f:dc:03:48:dc:e7:
                    5b:d8:f5:3c:22:73:f7:f0:68:a2:0e:fd:9e:8e:a6:
                    67:af:d1:00:d1:9f:5f:45:ab:46:30:ae:8f:0c:6d:
                    94:9f:53:25:6d:bf:42:81:26:05:5d:69:9a:93:b1:
                    71:de:53:d8:63:50:e8:e1:3c:6d:b9:cf:ef:8e:c0:
                    66:90:d1:d1:87:a1:45:20:28:1b:d1:b9:8d:db:86:
                    51:bc:aa:82:12:f7:c8:a2:69:8d:ae:cb:e3:f0:b4:
                    df:52:43:6a:d4:be:d2:ee:78:91:e2:47:ff:ba:b9:
                    1b:d8:12:85:d1:2a:46:bc:31:dc:c9:be:84:b4:1e:
                    57:34:35:57:c8:5c:41:4a:c6:ba:a8:dc:3d:60:7c:
                    81:f5:0b:9d:29:a7:e4:1a:f6:8d:8e:d4:68:64:13:
                    84:e5:16:36:bc:22:98:d0:bc:d4:a8:39:f2:dd:b4:
                    a2:4a:cc:07:55:f1:96:4b:78:f0:46:ff:6c:6d:6a:
                    4b:75:87:f1:85:cf:fc:21:91:9d:49:2f:35:51:11:
                    6d:59:a7:5f:dc:87:30:6b:14:6b:f1:e8:34:73:ac:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:19:62:1A:38:A5:EB:DA:E1:5E:3B:5C:A8:BF:36:AB:0A:A5:3D:EC
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/229dd3c7aa342d79f3d56fd5c8bab5d07687655f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:88:b3:c4:1c:01:28:c0:eb:88:48:4a:90:e2:58:75:3c:d8:
         48:0e:85:66:52:d6:aa:74:05:1d:9c:ea:15:12:22:21:3c:91:
         fa:ab:69:1c:73:88:cf:97:73:e5:e0:87:64:f3:ba:6e:4a:30:
         21:1b:32:02:c9:09:9e:57:ac:36:13:d2:3c:37:b0:45:b0:d0:
         e2:c2:b7:da:74:af:47:22:f8:30:a9:20:df:d8:eb:a4:48:1b:
         5a:00:bb:0e:f6:33:1e:20:d5:57:51:b8:05:4b:bd:ad:81:19:
         b2:8f:45:fd:d2:f2:df:6f:4e:23:29:63:5d:e4:03:9f:5a:d1:
         b8:f2:51:e9:f0:cb:c3:84:b6:67:f8:1d:a6:c6:34:e1:f0:e6:
         74:4f:c5:90:c9:1a:81:fc:3f:57:5c:46:54:f0:ce:d1:64:91:
         ed:78:12:73:79:d4:66:9b:92:cf:19:1b:8b:d7:e2:3b:56:f1:
         1a:d2:83:ea:b0:2a:ea:13:50:28:78:d4:2b:0f:a0:0e:f1:ef:
         92:b1:01:49:12:f1:a7:d2:63:fb:29:0a:82:eb:a5:b0:67:50:
         87:82:97:15:f4:fa:7a:25:27:58:8e:aa:e1:db:ad:b7:59:62:
         ec:20:27:47:64:6f:60:2c:d8:b8:95:f7:54:83:7b:ff:16:be:
         9e:38:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org