Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/463b44ec55c77d7e4e49271601b7cdc78c4d0cf1.roa
File:                     463b44ec55c77d7e4e49271601b7cdc78c4d0cf1.roa (raw, json)
Hash identifier:          r5HpmlA6+Cy/+21h6MTzO5Pl38QRQM3A6ZrONMyqFdc=
Subject key identifier:   60:8A:B0:58:42:F8:F9:CE:E2:BD:DB:53:03:37:20:B9:DE:49:49:01
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26B6EA
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/463b44ec55c77d7e4e49271601b7cdc78c4d0cf1.roa
Signing time:             Fri 27 Oct 2023 16:38:23 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.24.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537194 (0x26b6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=463b44ec55c77d7e4e49271601b7cdc78c4d0cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:29:55:fc:c8:5a:ee:17:79:8c:4d:55:ef:
                    43:76:bd:67:ec:e6:8e:db:62:fc:fa:c9:00:44:fb:
                    2a:c3:96:d5:d6:67:ab:0f:0d:e8:2f:e6:6f:d2:1e:
                    64:09:5c:3c:cd:8f:0a:af:59:56:f9:6e:a7:64:e8:
                    ce:97:9b:b7:92:b8:12:3c:89:64:33:93:ed:f1:f6:
                    77:75:40:c4:66:f9:b7:e3:b8:60:33:e6:f0:26:b7:
                    9c:73:ed:85:fa:44:ee:96:9d:3c:8a:ad:bf:84:a3:
                    bd:6b:08:e7:b7:de:cc:33:5e:63:c8:18:fc:bf:f9:
                    f6:4f:f6:93:f9:65:e9:d1:25:52:77:cd:61:14:74:
                    01:0a:aa:47:a0:76:6f:ff:66:25:75:fa:49:00:c4:
                    16:2c:af:99:8c:14:e1:91:21:a5:80:61:31:7e:68:
                    3b:c5:b2:c1:2c:2f:aa:f1:a0:60:a1:a0:ff:e2:8b:
                    2a:54:72:36:4c:68:9f:6d:bc:e4:b8:14:7c:b2:c0:
                    69:5e:a4:e7:13:10:69:ed:e4:49:53:40:37:a8:4b:
                    5c:21:26:be:69:b4:9f:c5:4c:b1:ca:cf:4a:7a:fc:
                    f3:76:03:7c:d5:6a:f7:d7:1f:02:2a:6b:ca:fc:48:
                    c9:19:f4:48:73:38:c9:fb:09:9b:bc:f1:cb:75:24:
                    38:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8A:B0:58:42:F8:F9:CE:E2:BD:DB:53:03:37:20:B9:DE:49:49:01
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/463b44ec55c77d7e4e49271601b7cdc78c4d0cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:af:c3:e6:46:7a:b5:51:fd:95:6f:83:7d:a6:d7:cf:de:
         85:ca:55:a9:9c:86:13:c8:e0:6f:e3:d8:67:1e:1e:07:fb:5a:
         6e:94:8e:01:ba:66:8a:14:60:ad:76:e4:a4:d5:bb:55:fe:39:
         34:f9:2f:c9:01:32:b9:bd:e4:da:f4:ef:94:fa:9a:cc:70:d1:
         5b:19:e5:e3:7f:1c:a6:ad:1e:5b:27:df:b2:46:2c:cd:d7:ec:
         7c:f8:55:7d:05:88:6c:80:f2:80:cb:fc:d7:f5:18:22:db:f2:
         0d:8d:9e:57:9f:c2:ab:d1:ba:a1:de:e9:0c:ed:40:05:22:34:
         50:d7:49:39:6f:03:4c:27:f9:22:0c:f3:77:28:fd:1f:c6:9c:
         11:61:55:74:aa:be:58:3b:31:3b:dc:7e:12:9b:7c:b1:31:6c:
         40:95:b8:14:5c:e0:8f:9f:ef:28:fd:a5:9c:80:bf:a7:b5:5d:
         0b:87:ea:1e:51:b5:4c:98:d8:c5:88:9d:74:1d:e4:cf:62:97:
         84:b3:ce:34:a8:85:a9:90:60:ad:61:c1:9e:68:10:79:d5:7d:
         84:fb:21:0d:4c:c2:ea:33:78:7b:ae:72:17:ff:d5:f4:7a:ae:
         bb:7d:b1:b8:b8:3f:dc:7b:48:41:be:eb:b5:45:b4:d1:fc:96:
         92:40:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org