Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/462ba42f9dd4a86ef023563116d079328b5cc2f8.roa
File:                     462ba42f9dd4a86ef023563116d079328b5cc2f8.roa (raw, json)
Hash identifier:          OIieMNdJS6cNMDSf7DFS/JOLnraAyxsnZVK+J1aSUHo=
Subject key identifier:   D3:57:8B:83:4F:B6:5B:8C:28:FB:F8:DD:80:17:48:6B:E6:51:23:1A
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26A014
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/462ba42f9dd4a86ef023563116d079328b5cc2f8.roa
Signing time:             Fri 27 Oct 2023 16:38:11 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.7.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2531348 (0x26a014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=462ba42f9dd4a86ef023563116d079328b5cc2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:77:c8:20:ac:6c:6c:5f:d2:87:c0:d8:72:
                    3c:b6:24:55:18:97:2a:0d:3a:a4:5a:5a:ab:0d:74:
                    1c:e6:92:26:75:fb:a4:42:09:db:17:41:ef:44:3a:
                    da:ad:01:9a:4d:7a:0f:e3:5e:f7:35:a9:7e:83:0c:
                    ac:2d:3d:53:91:38:3e:d6:63:9a:74:87:2e:c0:58:
                    1c:36:67:c9:f1:fb:11:bf:1c:9c:66:dd:0b:79:90:
                    3f:2c:02:a9:36:9f:c8:9d:bb:38:37:1c:8e:3c:af:
                    00:3c:18:1e:7e:98:ee:78:7d:a2:4c:30:21:ea:1e:
                    5b:09:a5:c5:8e:cf:e3:64:f8:43:e1:f0:d7:7d:29:
                    cd:9c:6f:8d:82:d3:ec:4e:4f:0c:c8:6c:03:87:ae:
                    87:55:92:a2:2d:af:f9:69:19:59:4c:ac:19:97:64:
                    b4:55:1a:e0:f0:e0:c8:39:05:34:46:7e:93:53:69:
                    74:97:6c:42:33:a0:c8:8c:a3:11:c9:71:b4:ed:6b:
                    0d:2e:0a:32:5c:28:d7:75:e7:cf:3c:21:b9:d4:f3:
                    13:c6:b9:1e:26:35:5f:d0:74:08:f0:43:96:94:6c:
                    f8:c6:7f:dc:10:7e:5b:07:dc:17:b6:b2:5c:ad:5c:
                    dd:09:db:98:d9:df:e5:99:de:68:5f:84:da:81:f0:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:57:8B:83:4F:B6:5B:8C:28:FB:F8:DD:80:17:48:6B:E6:51:23:1A
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/462ba42f9dd4a86ef023563116d079328b5cc2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:66:92:88:cb:19:b4:db:6c:fa:67:1b:74:2f:3a:a9:93:86:
         21:36:fe:f4:d5:f1:8c:37:6d:cf:28:02:77:b9:f1:48:13:b7:
         0f:28:d0:2a:ce:e1:04:f3:a7:48:7e:ec:8f:d5:55:6a:35:88:
         fd:96:92:14:4d:8b:1a:b8:af:0b:0d:c4:c9:c9:f4:fe:69:fc:
         cf:19:a6:0b:97:f1:95:3d:8b:51:a4:5c:08:45:c5:0b:a5:9f:
         04:5e:cf:41:7b:01:9b:36:82:d3:0d:08:5e:b0:1c:0d:0d:37:
         ce:cb:2e:86:c2:11:2b:02:62:3f:52:45:be:b0:1b:36:93:2c:
         9d:20:b7:76:ee:5d:e2:16:24:37:22:cb:0f:1c:5a:09:42:55:
         1e:ce:f0:b0:0b:10:9b:9e:b4:a4:b8:a5:45:a0:e0:30:45:a9:
         c4:08:86:98:c1:fb:b7:04:04:8d:0b:7b:4d:47:80:03:63:e6:
         d5:17:9f:23:c9:a2:8f:e1:ac:d2:b3:09:d0:e3:1a:5d:32:5f:
         44:86:17:fa:47:41:c1:87:de:c1:a6:37:5e:41:89:88:3d:fd:
         55:f9:31:b6:05:c3:ed:87:a9:22:9e:55:0a:77:0d:c3:bd:01:
         2a:30:b0:f8:e4:61:ef:73:05:79:b1:bb:66:5f:0d:c7:57:f7:
         3c:11:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org