Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6478797d79d91f0827f47957a51d71679cf17b44.roa
File:                     6478797d79d91f0827f47957a51d71679cf17b44.roa (raw, json)
Hash identifier:          DZ70yqCm7UJ4Pz/9gV7PIqoZGaMAoGOgBuYcudzdj74=
Subject key identifier:   3F:F6:39:12:D6:BC:28:BB:99:19:0C:2A:A3:7F:2D:89:ED:13:26:D6
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1FEE8A
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6478797d79d91f0827f47957a51d71679cf17b44.roa
Signing time:             Wed 22 Feb 2023 18:17:17 +0000
ROA not before:           Tue 21 Feb 2023 18:14:55 +0000
ROA not after:            Sat 22 Feb 2025 18:14:55 +0000
asID:                     19114
IP address blocks:        200.24.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092682 (0x1fee8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Feb 21 18:14:55 2023 GMT
            Not After : Feb 22 18:14:55 2025 GMT
        Subject: CN=6478797d79d91f0827f47957a51d71679cf17b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a6:ec:60:8a:2a:2a:66:c8:c5:0c:49:ea:12:
                    2d:22:81:a8:e3:08:3a:d5:2d:fe:d9:f7:d0:2b:f2:
                    50:fc:48:40:e0:7b:d7:d8:a8:82:dc:cb:ec:df:0b:
                    fe:8e:99:38:ff:a6:f1:07:ce:3f:1d:e3:ea:3b:ac:
                    b9:31:10:6d:af:02:18:c4:52:31:4c:20:78:18:e5:
                    d8:88:6d:9e:7d:27:a3:8a:aa:3c:3e:2d:5c:c0:27:
                    87:68:89:ee:e2:ac:f6:e6:36:fe:fb:f1:e1:bc:f2:
                    aa:da:4e:8f:0e:d3:d2:32:09:6d:6b:c6:dd:ca:f2:
                    09:7b:e7:c3:da:69:67:d8:16:b2:6b:7b:7e:f9:b4:
                    53:21:05:38:77:4d:ac:97:64:09:b8:7a:fb:35:a9:
                    3f:11:53:10:22:ea:82:50:3d:37:6e:38:b3:b5:71:
                    d0:58:6c:97:71:3b:0a:78:13:3f:a9:ab:aa:2e:19:
                    7f:f5:56:31:7c:fd:ae:a9:61:0a:3f:d6:9e:85:ce:
                    b6:4d:af:d3:b2:7a:53:b9:8b:51:05:e4:86:b1:2f:
                    52:95:8a:1d:6c:75:52:22:ac:bf:38:52:b9:d9:69:
                    3a:84:d6:4a:76:d6:a3:6b:23:95:76:43:eb:cb:d5:
                    f9:51:22:77:1f:2e:4c:6a:df:f4:9e:8f:0e:cc:bc:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:39:12:D6:BC:28:BB:99:19:0C:2A:A3:7F:2D:89:ED:13:26:D6
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6478797d79d91f0827f47957a51d71679cf17b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:96:12:96:19:66:56:9c:9d:7b:6a:82:00:64:05:81:20:00:
         c6:3c:8b:35:ed:cb:ff:4f:77:03:9a:bb:8c:62:11:23:90:2a:
         3c:53:bc:a8:93:e9:7e:ba:fd:46:8e:6e:4c:9b:d1:d3:c6:c8:
         b0:19:2d:80:8f:7a:6e:28:45:d4:4e:65:a0:4d:08:f9:c3:36:
         87:1b:45:90:41:4b:4d:dc:9d:b1:97:37:a8:1c:cb:3a:9c:86:
         86:07:c2:0d:45:04:fc:d7:86:ff:4f:20:11:13:62:5a:db:92:
         53:38:07:68:9d:6e:fa:62:88:02:97:ec:d4:96:c8:79:cb:37:
         f6:28:f7:57:5f:5e:70:39:d4:91:33:bd:44:df:2c:33:6c:2c:
         a3:e7:e5:23:0e:27:c3:d6:4d:3e:61:43:86:8e:b4:dd:d3:35:
         de:96:03:c0:12:2c:ce:87:73:76:fe:64:7c:fe:ab:eb:3e:31:
         ee:c3:e5:ef:15:cc:70:bd:a0:d1:82:97:65:68:1c:ef:61:50:
         55:ca:ca:7e:a4:8c:75:50:dc:e2:f7:dd:42:b9:f0:1e:56:df:
         80:5b:79:dd:d7:06:1e:bc:2d:48:a4:fb:a5:31:fd:54:38:12:
         04:3e:1b:b8:ee:1c:a0:f9:0c:54:de:da:3a:c1:b3:4a:b1:23:
         8d:6e:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org