Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/40db266859ee7972a79d4315eacd9ce6a9f14512.roa
File:                     40db266859ee7972a79d4315eacd9ce6a9f14512.roa (raw, json)
Hash identifier:          VjnNUhUGMQXsZl0cqo1UScocpnGhcjNzSwLAeV2yvJw=
Subject key identifier:   EC:C8:48:CC:49:11:7D:50:3A:BA:86:73:96:17:2F:FF:B2:00:22:E0
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       278E5C
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/40db266859ee7972a79d4315eacd9ce6a9f14512.roa
Signing time:             Mon 20 Nov 2023 17:00:48 +0000
ROA not before:           Mon 20 Nov 2023 17:00:48 +0000
ROA not after:            Thu 20 Nov 2025 17:00:48 +0000
asID:                     7315
IP address blocks:        200.7.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2592348 (0x278e5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Nov 20 17:00:48 2023 GMT
            Not After : Nov 20 17:00:48 2025 GMT
        Subject: CN=40db266859ee7972a79d4315eacd9ce6a9f14512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:dd:00:68:76:82:5f:06:28:c5:e9:40:32:
                    04:27:42:4d:4c:58:c3:c2:54:28:89:86:51:2e:6b:
                    75:6b:f8:48:8b:e2:69:53:59:c2:f2:ca:a0:73:28:
                    b1:db:fa:fa:f6:2c:ff:6f:2f:33:96:56:5f:4c:30:
                    51:47:14:c1:e1:22:1f:27:65:d0:d2:0e:7b:6c:e7:
                    76:74:7a:b1:ca:1e:a0:af:c2:a4:4d:15:17:8e:eb:
                    4b:42:16:2f:26:e2:4e:f1:2c:9b:b8:77:b3:f8:be:
                    0b:66:35:7b:00:b7:2b:64:f3:05:2a:19:5c:82:b3:
                    40:66:b2:49:53:8c:1d:18:55:50:19:eb:ae:d7:1e:
                    e7:01:14:39:d8:fa:22:55:34:89:a8:b9:2e:09:48:
                    a5:7d:18:bc:bf:6e:a8:fe:2b:14:98:74:ae:42:9d:
                    f8:e6:15:d4:b6:1d:ff:07:92:bd:96:27:d5:a8:e9:
                    c0:1a:42:cf:dd:0e:95:c7:ea:28:65:62:b5:c1:20:
                    8f:97:5e:de:e9:76:22:ad:5a:59:24:2d:fa:00:87:
                    8e:7c:4c:0b:f1:d3:00:8d:d6:24:65:d4:f0:07:ed:
                    23:8c:5f:63:66:fe:d9:12:6d:2c:f4:db:da:08:86:
                    98:72:27:02:ea:46:ca:72:94:6d:0d:82:e0:39:34:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C8:48:CC:49:11:7D:50:3A:BA:86:73:96:17:2F:FF:B2:00:22:E0
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/40db266859ee7972a79d4315eacd9ce6a9f14512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:1e:be:06:cd:d9:64:f9:25:85:bd:38:49:ee:b3:01:96:2d:
         fd:16:91:0e:15:fe:dd:39:47:3e:3d:9e:09:e2:9c:ff:70:5f:
         9c:e0:3a:e2:d1:4c:16:36:4c:c1:ff:69:18:ee:3d:8d:41:a2:
         89:05:a7:33:76:d9:5a:68:75:ff:63:b8:cd:7f:83:ca:71:d0:
         53:1a:79:7c:69:ea:df:9b:3f:92:bc:26:bd:56:3a:a8:6f:e7:
         40:f5:11:01:e1:c6:83:25:66:47:6b:2e:af:21:d0:4c:6c:1e:
         e7:d3:5c:46:ca:93:a2:90:1b:28:9b:7f:34:c8:fb:41:48:57:
         25:82:31:c6:a6:6b:2b:38:43:dd:15:9e:58:c4:3c:2e:d8:a5:
         83:36:ce:f1:10:2c:29:03:af:88:53:21:78:d4:80:fb:18:5d:
         34:8a:75:a8:4b:80:3d:a2:e4:cb:dd:e4:32:85:6c:6b:b4:07:
         93:35:31:7c:11:39:bb:2d:25:4b:71:01:e0:fd:bf:c2:c8:33:
         2c:f2:7c:69:e5:ae:5c:f5:c7:14:09:27:b6:cb:09:e1:d3:80:
         66:2f:23:86:10:62:c3:c5:83:cc:45:aa:01:20:9e:d9:18:aa:
         5d:98:39:b2:70:b6:e0:29:4c:28:04:fb:15:31:c0:13:57:fa:
         8a:07:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org