Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5f13ee91d85cd70a9d42cf4d230015f001b0c038.roa
File:                     5f13ee91d85cd70a9d42cf4d230015f001b0c038.roa (raw, json)
Hash identifier:          OG5lgsLIqnHwUveYM6EQX714ABwecTn+txPuQi6OmqQ=
Subject key identifier:   94:AD:1E:7A:96:98:17:86:DB:ED:88:7B:EB:B2:D2:4B:70:69:82:DF
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       26393F
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5f13ee91d85cd70a9d42cf4d230015f001b0c038.roa
Signing time:             Tue 24 Oct 2023 21:45:13 +0000
ROA not before:           Tue 24 Oct 2023 21:45:13 +0000
ROA not after:            Fri 24 Oct 2025 21:45:13 +0000
asID:                     19114
IP address blocks:        200.7.210.176/28 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505023 (0x26393f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct 24 21:45:13 2023 GMT
            Not After : Oct 24 21:45:13 2025 GMT
        Subject: CN=5f13ee91d85cd70a9d42cf4d230015f001b0c038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:14:d2:23:69:a3:f8:2e:8f:9c:7c:3b:fd:
                    78:cf:1f:44:38:dd:18:00:19:ab:2c:af:82:0f:86:
                    27:85:dc:02:a6:50:e4:05:72:a8:c1:89:99:32:26:
                    5e:8c:6a:c3:a3:9b:53:7d:72:99:16:3b:4e:bf:4a:
                    88:85:3c:68:73:2e:95:a5:41:e9:44:2d:8a:59:84:
                    9a:72:12:d7:2e:7f:30:f3:a2:4f:98:03:f5:68:91:
                    7f:ee:bc:ea:40:63:2f:e6:57:45:ee:cd:36:7f:b3:
                    e9:73:d9:63:af:92:fe:2e:a9:c8:c1:a9:9c:ab:60:
                    08:60:58:15:1d:f8:ba:fe:a5:83:55:e6:de:96:75:
                    72:c7:b2:99:9b:d9:18:48:cd:f2:c8:aa:f5:fd:1e:
                    28:e8:7c:d2:9b:68:f8:3b:33:f9:61:b9:88:a3:ae:
                    c7:0e:93:37:5e:b7:32:0d:29:28:05:46:1d:9c:e0:
                    e9:a3:2d:dd:1e:07:a3:2d:f1:58:19:51:69:7a:c9:
                    8a:40:96:c2:b5:2b:4f:18:fd:74:93:6a:67:d8:7c:
                    59:7a:5b:df:64:39:b8:48:df:41:b3:ed:58:96:cc:
                    ed:1f:ce:d8:93:36:01:14:db:57:57:7b:d5:67:bc:
                    c9:df:7f:7f:5d:91:da:36:82:5d:1b:23:92:a4:3f:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AD:1E:7A:96:98:17:86:DB:ED:88:7B:EB:B2:D2:4B:70:69:82:DF
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5f13ee91d85cd70a9d42cf4d230015f001b0c038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.210.176/28

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:17:f0:ef:a6:3b:3c:d4:25:33:d8:87:8d:b5:35:61:b7:
         b1:86:2c:bc:49:a6:8e:04:dd:13:f6:30:a3:25:8a:f5:1a:3d:
         30:52:f4:c7:da:ea:87:bd:68:e4:32:51:14:b5:b5:ce:b6:2b:
         7b:cf:ac:86:76:f4:b5:f1:e6:41:97:89:25:64:07:af:58:39:
         b6:0f:c2:68:e2:cc:2a:7e:ce:5f:66:5c:b0:c1:c9:67:b4:e3:
         17:70:b6:a9:4b:d7:44:18:3f:49:4a:44:f3:49:59:57:71:92:
         8a:21:cf:30:b4:ae:92:91:2d:72:aa:83:d2:d6:ae:4a:43:3e:
         29:59:59:9a:14:8d:6a:09:6c:0e:60:06:bf:b3:03:78:61:e1:
         6c:3e:1d:8b:7d:be:6c:cf:93:4c:ab:f9:c3:a4:1e:fd:24:63:
         ec:6d:51:0e:72:24:1e:ab:30:68:ef:8a:d2:2b:56:f2:01:17:
         19:87:3c:39:70:d3:a1:38:4d:83:71:b0:3e:a9:a5:1c:8f:a4:
         77:39:e2:28:a3:55:8b:96:42:d3:06:4a:6f:44:ab:e7:97:71:
         e0:76:1d:b4:ef:a2:02:99:86:72:60:32:28:08:23:ca:f9:3b:
         84:9c:1c:69:61:54:79:79:84:e8:e7:0f:53:ab:5c:79:ed:b0:
         35:36:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org