Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/697f79d1764a08f5ef2414d20bf66f2d5faf86d8.roa
File:                     697f79d1764a08f5ef2414d20bf66f2d5faf86d8.roa (raw, json)
Hash identifier:          tLztidqMQYXQvwcsId43dtWy4UhKxWqYxW8FvEH/CHg=
Subject key identifier:   85:E1:3A:BD:E6:EA:1A:E8:5A:FE:18:EF:45:7F:D8:07:32:81:22:B7
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       2005A1
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/697f79d1764a08f5ef2414d20bf66f2d5faf86d8.roa
Signing time:             Fri 24 Feb 2023 15:26:15 +0000
ROA not before:           Thu 23 Feb 2023 15:25:18 +0000
ROA not after:            Mon 24 Feb 2025 15:25:18 +0000
asID:                     19114
IP address blocks:        200.24.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098593 (0x2005a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Feb 23 15:25:18 2023 GMT
            Not After : Feb 24 15:25:18 2025 GMT
        Subject: CN=697f79d1764a08f5ef2414d20bf66f2d5faf86d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:92:96:8e:b7:c3:b0:ad:b4:96:7c:a5:75:
                    90:32:7c:77:f4:38:29:69:6e:ef:9a:b1:6a:de:59:
                    3e:16:5e:77:0b:5a:42:c0:aa:ed:cd:fe:13:78:e4:
                    b6:55:48:a6:4d:ff:0b:c7:d4:7b:b3:1a:3e:5a:ac:
                    76:72:05:6e:38:2d:8e:8d:8b:82:a1:3b:21:d2:25:
                    f8:15:06:d7:b9:b7:bb:e2:d6:9e:02:8e:76:5c:51:
                    bc:25:ad:d9:f9:f8:90:88:de:6f:fd:f0:a6:3c:b9:
                    92:a6:2a:64:2e:11:a0:10:27:a4:93:5e:83:8a:f3:
                    9a:73:e2:89:20:11:b1:c6:cc:9f:88:61:ff:ae:9b:
                    a6:92:5e:23:bf:0b:86:2e:3c:1c:80:ba:25:d4:1a:
                    25:65:5e:5b:99:9f:54:0c:a1:e1:6f:4e:23:c8:df:
                    45:cb:87:7c:a2:f4:40:9b:dd:e0:cb:b9:13:d4:12:
                    88:92:44:9e:48:54:10:63:bb:ca:d6:49:a9:b0:df:
                    fd:cb:81:61:47:e9:9f:39:ae:5d:22:d9:c1:37:b2:
                    2b:43:af:5e:96:3c:41:30:33:db:fe:0f:44:5a:ad:
                    80:44:2d:a6:ec:17:c1:68:ba:00:2c:e4:ab:9d:15:
                    59:e3:e6:9a:c8:a8:e9:b5:6a:83:0c:86:dd:92:3a:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E1:3A:BD:E6:EA:1A:E8:5A:FE:18:EF:45:7F:D8:07:32:81:22:B7
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/697f79d1764a08f5ef2414d20bf66f2d5faf86d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:12:72:0a:01:76:44:a9:21:e6:e7:10:ac:5c:58:13:24:65:
         8c:ff:75:9c:de:cc:9f:be:f1:df:b5:3d:52:9b:49:85:71:a4:
         3c:82:6d:ed:bf:b1:7a:f2:c2:2c:9e:bb:4a:8d:30:88:5c:58:
         89:bc:7f:a9:6c:6b:d4:34:c2:7c:85:13:1e:55:c7:51:b4:b3:
         fb:14:b8:9b:9b:db:e0:44:b5:fd:fa:f8:f9:06:99:bf:0d:81:
         27:8a:d8:c8:a4:81:2d:fc:94:d2:5b:fe:5f:47:4a:d9:71:70:
         a5:38:4f:ee:b0:fe:67:6b:b2:a1:38:1b:8c:59:42:b8:4b:ff:
         d2:80:c6:08:7d:77:ea:c1:fb:e5:74:62:5c:cc:ed:0f:fc:16:
         4f:b3:ed:92:98:b5:d6:67:47:6d:38:a7:a7:73:55:56:0d:f1:
         14:5a:82:63:26:6d:3a:62:a1:68:14:27:53:81:14:3c:dc:ea:
         ca:c1:d6:e3:20:fd:34:56:81:be:f3:e9:aa:2f:41:1d:99:27:
         6e:5c:97:ff:9f:49:90:85:94:bb:11:9d:24:2e:11:2c:84:95:
         7e:e6:a3:97:16:52:eb:ba:57:75:66:a0:1c:eb:c9:98:a6:c3:
         a0:93:7a:41:a2:36:c7:36:4b:11:f0:cb:84:06:b2:74:23:af:
         f5:91:3b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org