Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2cc3b7002aaec35cc283a635ff1e23124c72836f.roa
File:                     2cc3b7002aaec35cc283a635ff1e23124c72836f.roa (raw, json)
Hash identifier:          g6xv5Lv2iXymXlc9LUYjMW/xc2qpnqbzNE/qw+y8r84=
Subject key identifier:   C9:F8:8F:B8:70:EB:BA:51:80:E5:4B:24:00:4A:12:CD:20:66:22:1F
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       269D47
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2cc3b7002aaec35cc283a635ff1e23124c72836f.roa
Signing time:             Fri 27 Oct 2023 16:38:09 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.7.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530631 (0x269d47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=2cc3b7002aaec35cc283a635ff1e23124c72836f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:32:55:c7:86:16:0d:65:16:7f:a2:85:8d:
                    32:08:00:95:e7:7d:f3:5c:56:52:ff:67:61:df:9d:
                    e8:e7:af:57:16:ad:ce:84:25:95:1a:ef:31:87:9a:
                    a7:65:99:5a:8d:23:cb:01:73:5e:a5:71:cd:f7:03:
                    81:8b:1f:0c:da:d6:c0:56:41:a3:6f:12:3b:e0:2a:
                    5f:e8:e5:2b:45:42:35:d8:e6:09:4e:8f:d4:94:cc:
                    31:8f:93:41:86:13:4f:fb:7b:ed:26:e8:38:e7:ca:
                    db:35:97:48:1c:99:38:b8:1b:a0:b2:62:e2:e1:30:
                    74:27:23:cb:d2:87:29:aa:85:f5:ad:d7:c8:43:8d:
                    74:78:b1:59:1a:2b:54:e4:9c:12:92:f6:9f:ff:f1:
                    6f:24:7e:91:4f:9c:88:e4:bf:b3:d7:f9:d8:cc:6d:
                    00:5f:6f:40:63:b3:71:0c:47:59:a7:ec:4f:36:1b:
                    e9:ed:3c:0e:69:16:e4:df:03:ec:15:12:f9:86:5a:
                    b3:cf:a4:a9:29:d6:0d:2a:ba:22:41:72:86:89:5a:
                    64:59:93:d6:87:70:9c:88:b0:90:37:61:31:1b:07:
                    2f:51:f5:62:c6:22:ad:c1:57:10:b3:fb:ef:25:55:
                    c8:2e:8f:22:42:b7:a8:d4:de:4f:18:04:5d:28:47:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F8:8F:B8:70:EB:BA:51:80:E5:4B:24:00:4A:12:CD:20:66:22:1F
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2cc3b7002aaec35cc283a635ff1e23124c72836f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:9c:63:c5:14:48:3f:21:fc:5e:3c:74:5f:02:f1:4e:29:
         2e:5e:50:ab:19:39:bd:d6:51:66:83:01:f5:45:e1:94:5c:ad:
         43:93:3d:aa:f4:a6:71:b4:9a:62:c5:16:00:56:6e:4c:d9:7a:
         d0:e2:fa:03:5d:72:7e:22:96:b9:c6:78:6c:92:b8:f5:46:5e:
         20:c8:8a:95:e8:ab:e0:3d:3c:41:87:62:d0:74:e3:2a:1d:39:
         f5:fc:f3:c5:54:90:90:1f:77:53:a3:91:a8:ab:1b:11:ff:61:
         57:08:9f:5a:fe:a9:8e:20:ef:93:57:e9:ad:b5:07:2b:33:04:
         0a:08:47:b8:5c:9d:77:24:71:9d:63:39:45:f8:12:4b:1b:da:
         7a:30:55:20:f8:09:2c:c1:e7:22:b2:47:54:1c:9f:25:53:64:
         e8:16:af:aa:9e:7d:8f:f9:eb:a9:db:41:f2:6c:3a:aa:67:65:
         12:05:24:c9:11:1a:47:97:cd:ed:7c:11:ed:af:0b:45:bc:2a:
         ed:90:57:36:15:56:55:ff:7b:98:e1:a7:b5:b1:e5:69:a9:cd:
         3b:98:5a:1c:90:4f:80:69:c6:9c:16:fa:44:15:93:01:8a:30:
         6c:d1:9d:1f:50:e3:cd:2c:83:9f:fa:0e:ff:24:39:ca:f3:83:
         75:89:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org