Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/59d360c11b50942429492f31da50db177c06179f.roa
File:                     59d360c11b50942429492f31da50db177c06179f.roa (raw, json)
Hash identifier:          tbTYE9s9/x54c8wu/tnXv4CMwE5SrGKH5/LJ7A0nNTs=
Subject key identifier:   1E:B2:5F:D1:94:91:FE:33:DE:CD:EB:B2:78:E1:FB:B7:C1:09:13:D4
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       278900
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/59d360c11b50942429492f31da50db177c06179f.roa
Signing time:             Mon 20 Nov 2023 17:00:18 +0000
ROA not before:           Mon 20 Nov 2023 17:00:18 +0000
ROA not after:            Thu 20 Nov 2025 17:00:18 +0000
asID:                     7315
IP address blocks:        200.7.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2590976 (0x278900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Nov 20 17:00:18 2023 GMT
            Not After : Nov 20 17:00:18 2025 GMT
        Subject: CN=59d360c11b50942429492f31da50db177c06179f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:9e:f9:fe:36:af:84:8f:ec:94:10:cd:91:
                    f4:fe:aa:2a:6e:df:a9:63:f6:92:4c:d1:cd:6f:0b:
                    24:80:82:db:4d:3c:a3:3d:ff:21:9a:71:d4:9f:d2:
                    0f:79:b5:62:22:90:69:a8:64:bf:c7:41:29:79:86:
                    46:a9:06:64:77:6f:6d:c4:ca:b6:6f:51:e7:b3:d1:
                    a7:29:6a:0b:ac:cc:37:5e:44:e6:d9:87:7c:fa:dc:
                    5f:0e:a9:4b:31:15:29:a5:0b:f1:a8:9d:4f:34:cf:
                    08:0c:b8:48:69:45:6d:5e:9b:0f:03:76:4e:b1:d2:
                    75:67:7f:af:68:d3:e8:41:e3:68:ef:69:b9:74:5c:
                    94:aa:db:e2:35:f1:29:5b:6b:ec:c2:bf:82:9b:9e:
                    fd:2d:33:09:49:83:96:c2:72:27:5d:90:17:6c:e0:
                    ec:0e:5c:be:e4:76:df:a8:f3:ad:40:52:9b:18:5b:
                    05:45:b2:32:e4:8b:de:9b:1e:a4:32:91:f7:1f:ea:
                    8d:78:a0:1b:6d:f1:1e:85:98:51:94:be:70:1d:35:
                    bc:ba:bb:bb:87:e5:74:e2:91:b9:b4:a9:27:10:21:
                    85:17:59:5d:af:98:5e:75:c5:7f:f2:23:ca:e5:cb:
                    b8:65:82:7e:ea:8c:48:e4:29:5c:22:40:ad:22:24:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:5F:D1:94:91:FE:33:DE:CD:EB:B2:78:E1:FB:B7:C1:09:13:D4
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/59d360c11b50942429492f31da50db177c06179f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:58:e4:4c:78:6d:70:f0:67:09:ae:9a:a0:ae:55:70:8f:89:
         4a:0e:fa:fb:d9:22:fe:fc:d7:63:22:ec:c0:cb:ed:3e:1c:ec:
         8a:42:ca:43:82:c8:b6:3c:96:f1:cf:11:23:8c:44:fb:67:77:
         04:54:e7:bd:0a:74:56:4b:0b:ee:cd:57:86:d3:70:76:3f:9b:
         44:93:d5:6d:76:bf:91:9c:d0:75:0d:4a:36:f8:d7:01:87:42:
         4e:d3:16:d7:4c:04:47:9e:40:fa:7e:ee:8e:db:85:54:49:d1:
         8d:11:45:aa:5b:ba:f6:38:0a:c9:b4:13:21:e7:cd:08:6a:11:
         e3:85:00:4d:ed:f3:83:b2:c6:eb:71:ca:29:f6:54:d1:ac:0f:
         43:27:47:4a:1a:c7:d8:18:18:da:69:df:66:b5:d3:72:53:f5:
         4c:4f:b6:77:c9:db:e9:9b:a0:c4:40:58:3f:f6:ae:1e:18:d9:
         6b:81:2d:1e:4f:fc:a3:36:07:dd:f4:c6:ae:44:3f:07:86:d9:
         31:33:6f:91:33:9a:a6:3d:5e:3c:df:02:71:b0:e6:21:a5:6e:
         02:63:17:80:31:55:a3:98:1f:a7:71:6f:9c:91:a3:37:d1:f2:
         e6:9b:42:dc:c7:43:b0:ea:4e:01:08:4a:b3:ea:f6:02:32:39:
         ca:4f:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org