Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/24f60247dca003677a9487f698035042a7755c9b.roa
File:                     24f60247dca003677a9487f698035042a7755c9b.roa (raw, json)
Hash identifier:          avBHita3ouJXFWd7URmE9zYcbTX7RKmsyAnp0s/MBcI=
Subject key identifier:   E1:1A:A8:D9:71:39:11:FB:48:5D:C1:21:7C:F0:C5:05:9F:E1:89:8A
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       266693
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/24f60247dca003677a9487f698035042a7755c9b.roa
Signing time:             Fri 27 Oct 2023 16:37:44 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.24.192.0/20 maxlen: 20
                          200.24.192.0/19 maxlen: 19
                          200.24.208.0/20 maxlen: 20
                          200.24.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516627 (0x266693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=24f60247dca003677a9487f698035042a7755c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:42:40:ae:37:41:e5:dc:94:57:1b:03:f4:
                    7e:70:a8:b1:d3:a1:1f:49:db:09:87:9b:60:6b:8f:
                    71:09:67:47:d9:5c:34:e3:05:f8:9b:c9:e8:60:d2:
                    2e:e7:d4:21:a9:0a:86:9f:a9:0f:ec:1a:88:b7:50:
                    d6:e7:2e:67:06:52:c5:64:8e:09:d5:4b:43:96:e4:
                    9f:9c:f8:ab:75:84:8d:f5:b6:4b:b2:62:d9:ec:60:
                    25:e2:8a:24:09:d0:24:1a:3d:61:62:bc:80:7f:49:
                    f9:5a:e7:47:c4:ca:ad:e8:d8:5b:56:94:54:a7:6b:
                    90:78:5f:f8:59:6b:bc:a8:db:2f:18:14:38:31:19:
                    03:0f:a2:5f:70:6e:11:55:63:34:a8:c7:a8:c2:00:
                    1a:0e:9f:2e:b0:83:04:f8:16:63:54:36:bd:3f:a2:
                    3c:55:0d:30:82:fd:87:19:91:11:ca:ed:71:9a:18:
                    17:50:12:7c:e4:b6:f5:dd:f1:37:0b:9b:79:62:f5:
                    63:1f:7a:64:dd:9a:eb:f3:a7:1f:41:2e:16:ce:73:
                    b5:21:49:4c:16:fc:6f:f7:c0:47:27:b7:83:5d:71:
                    b1:f7:7b:e1:a5:14:07:1f:3d:3d:c6:38:ec:24:07:
                    76:87:5d:56:e7:ef:39:63:5d:7d:54:d9:5d:a0:e0:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1A:A8:D9:71:39:11:FB:48:5D:C1:21:7C:F0:C5:05:9F:E1:89:8A
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/24f60247dca003677a9487f698035042a7755c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:fc:92:a0:c1:39:04:35:1b:39:aa:66:06:49:59:fc:0f:2a:
         c2:04:32:fc:93:06:7f:cd:57:76:6b:84:0f:84:76:43:1b:44:
         0f:8a:98:ab:d5:e9:cf:be:74:b5:c4:ec:b7:fd:8f:18:c9:d0:
         8a:db:8e:76:2b:63:1c:2c:dc:30:e0:8b:53:a5:2e:8f:b5:ac:
         48:4e:55:e3:d9:82:aa:9b:25:a9:5a:16:77:7c:a5:f5:a1:53:
         e2:b4:5d:3a:f0:10:c7:47:ae:c8:4f:d0:82:22:d8:0a:30:fc:
         d1:79:49:fc:d7:72:84:b8:e5:73:65:6f:04:a8:eb:6b:03:f0:
         ea:73:5c:3f:0d:cf:6b:8b:47:fc:f2:de:62:e4:7b:dd:a8:2e:
         58:72:76:81:7d:9d:94:d4:37:44:1c:2b:b8:eb:05:31:79:dc:
         b8:b8:31:5f:a8:75:3e:e8:f1:76:55:c7:d7:a0:09:87:f0:1d:
         ec:a1:85:f6:d7:f5:3b:db:c9:51:f2:6b:9e:ea:a9:4b:01:47:
         f1:5d:5c:a8:85:c7:c9:ad:5f:49:10:f2:ee:29:9c:9e:c4:35:
         43:10:6e:2a:20:2c:f6:c1:20:3d:3e:0e:9a:8f:d6:b5:b1:26:
         0f:b5:a1:39:f7:eb:09:94:cc:eb:8e:91:f7:19:b0:79:5c:dd:
         a2:00:0b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org