Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/644ce9e1c92142c185d68b25d9ddce9f23c14eb6.roa
File:                     644ce9e1c92142c185d68b25d9ddce9f23c14eb6.roa (raw, json)
Hash identifier:          KxStAELQNSy7LhMs4w0Prx674mz+ytjyc5hn+RvaObo=
Subject key identifier:   42:23:1A:55:70:7B:F1:5C:24:B2:A8:2B:AB:04:0B:89:F9:AF:17:37
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29C62E
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/644ce9e1c92142c185d68b25d9ddce9f23c14eb6.roa
Signing time:             Tue 06 Feb 2024 15:37:16 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.24.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737710 (0x29c62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=644ce9e1c92142c185d68b25d9ddce9f23c14eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:9d:fa:ae:1c:2a:c0:74:0d:ef:24:69:54:
                    0f:9b:1c:8b:30:d1:93:a8:92:bf:ab:45:64:47:bf:
                    b3:08:8a:55:ed:cf:6d:e6:f4:44:63:22:07:fe:b3:
                    aa:ad:2d:d5:41:89:3c:5b:63:73:8b:4b:cf:ce:78:
                    d0:c5:40:19:a7:21:8f:59:d2:8e:98:f8:62:e8:fd:
                    c8:da:ce:1a:f7:e2:61:5e:45:f0:0e:ce:73:c0:19:
                    86:67:1b:7e:3b:a0:59:73:51:f6:1a:ff:15:3d:91:
                    b2:84:7d:57:d6:6d:59:f6:c4:bc:8c:31:fc:f3:dd:
                    85:fc:ab:45:8f:ac:24:62:13:aa:a7:37:45:07:1c:
                    6e:cd:b7:0d:cb:1d:3a:7e:fb:b4:7b:b0:7e:4f:d5:
                    21:a1:f6:32:85:ed:66:53:c0:82:c2:f0:32:ba:f1:
                    93:2b:f4:c1:65:9f:a5:f3:99:93:df:1d:d2:1f:b9:
                    fd:be:f9:53:80:19:cb:77:3a:1c:c8:e9:59:3a:73:
                    e6:14:b2:ec:6b:43:4f:a5:df:e1:77:d5:73:1f:46:
                    cd:53:08:2c:ae:32:e9:f8:db:7f:6c:af:6c:f7:95:
                    3a:15:3d:08:4d:56:4e:20:33:07:06:e4:c8:22:a7:
                    79:65:74:50:ec:32:2e:e0:93:17:6b:bb:11:bc:9c:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:23:1A:55:70:7B:F1:5C:24:B2:A8:2B:AB:04:0B:89:F9:AF:17:37
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/644ce9e1c92142c185d68b25d9ddce9f23c14eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:94:a1:c2:cb:ba:1a:13:ca:33:3b:5b:09:63:1d:a9:cf:
         79:a2:b8:98:8e:63:92:46:c5:51:f3:25:37:26:52:8a:27:5f:
         87:f5:9c:2b:4f:91:89:c9:3a:fd:11:42:c6:ed:b4:a5:bd:94:
         8c:83:1d:10:55:fd:98:20:4d:62:4e:6b:19:18:69:bc:bb:92:
         21:24:07:51:c9:96:d2:31:44:10:e4:37:4e:64:fe:64:62:4e:
         62:e1:a9:b3:0b:c9:52:21:9a:43:9f:18:64:ac:8f:a5:77:72:
         09:26:7b:90:3a:47:01:93:94:0c:42:7b:13:d6:52:54:62:14:
         de:de:7b:e5:f5:f1:de:85:a8:6a:63:8a:c0:a0:16:41:7c:05:
         7c:0a:61:7f:73:62:08:46:58:36:f7:f1:d1:73:57:41:38:b1:
         69:e3:ba:38:68:3c:b2:6b:5f:93:c6:03:d0:c6:09:f1:55:52:
         c3:9c:6d:7a:ac:a8:ae:34:c8:7a:47:0c:36:77:ed:e8:a8:ec:
         54:03:68:42:b7:ee:d7:eb:72:75:0d:c8:8f:07:69:78:a7:dd:
         99:b9:69:12:90:74:b9:e9:63:36:98:05:ef:18:73:48:24:2d:
         18:e1:d3:3b:0c:e2:23:c2:13:55:e5:07:02:22:d7:d8:3c:49:
         a2:be:d3:b5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKcYuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
YTFkZDQwMzViOGQyOWJhNzU2NmM2NDUyOTYzNGZmNjQ3ODNhNGYwHhcNMjQwMjA2
MTUzNjQ3WhcNMjkwMjA2MTUzNjQ3WjAzMTEwLwYDVQQDEyg2NDRjZTllMWM5MjE0
MmMxODVkNjhiMjVkOWRkY2U5ZjIzYzE0ZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjw6d+q4cKsB0De8kaVQPmxyLMNGTqJK/q0VkR7+zCIpV7c9t
5vREYyIH/rOqrS3VQYk8W2Nzi0vPznjQxUAZpyGPWdKOmPhi6P3I2s4a9+JhXkXw
Ds5zwBmGZxt+O6BZc1H2Gv8VPZGyhH1X1m1Z9sS8jDH8892F/KtFj6wkYhOqpzdF
BxxuzbcNyx06fvu0e7B+T9UhofYyhe1mU8CCwvAyuvGTK/TBZZ+l85mT3x3SH7n9
vvlTgBnLdzocyOlZOnPmFLLsa0NPpd/hd9VzH0bNUwgsrjLp+Nt/bK9s95U6FT0I
TVZOIDMHBuTIIqd5ZXRQ7DIu4JMXa7sRvJzV3wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEIjGlVwe/FcJLKoK6sEC4n5rxc3MB8GA1UdIwQYMBaAFBDAW2YqV0U2UCDx
1vqPWe9NlP7cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNhMWRk
NDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzY0NGNlOWUxYzkyMTQyYzE4NWQ2OGIyNWQ5ZGRjZTlmMjNjMTRlYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvNDNhMWRkNDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgY2TANBgkqhkiG9w0BAQsFAAOCAQEAOYuUocLLuhoTyjM7
WwljHanPeaK4mI5jkkbFUfMlNyZSiidfh/WcK0+Rick6/RFCxu20pb2UjIMdEFX9
mCBNYk5rGRhpvLuSISQHUcmW0jFEEOQ3TmT+ZGJOYuGpswvJUiGaQ58YZKyPpXdy
CSZ7kDpHAZOUDEJ7E9ZSVGIU3t575fXx3oWoamOKwKAWQXwFfAphf3NiCEZYNvfx
0XNXQTixaeO6OGg8smtfk8YD0MYJ8VVSw5xteqyorjTIekcMNnft6KjsVANoQrfu
1+tydQ3IjwdpeKfdmblpEpB0ueljNpgF7xhzSCQtGOHTOwziI8ITVeUHAiLX2DxJ
or7TtQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org