Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/7187baef917a2f8195abc65b3a209848acab04c9.roa
File:                     7187baef917a2f8195abc65b3a209848acab04c9.roa (raw, json)
Hash identifier:          j8In46MYQpPUqt68xpDLBGkkapuciLxyE0HC86RFnqY=
Subject key identifier:   14:F4:27:23:53:55:B6:EB:B3:CB:DB:AD:3A:6E:D4:11:B2:43:F8:06
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       275217
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/7187baef917a2f8195abc65b3a209848acab04c9.roa
Signing time:             Fri 10 Nov 2023 20:48:25 +0000
ROA not before:           Fri 10 Nov 2023 20:48:25 +0000
ROA not after:            Mon 10 Nov 2025 20:48:25 +0000
asID:                     7315
IP address blocks:        200.7.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2576919 (0x275217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Nov 10 20:48:25 2023 GMT
            Not After : Nov 10 20:48:25 2025 GMT
        Subject: CN=7187baef917a2f8195abc65b3a209848acab04c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:e6:36:80:5f:a9:26:36:42:98:6d:47:0a:
                    6a:e1:82:2d:8a:6b:db:ce:62:d7:6a:89:0c:56:50:
                    10:7f:63:64:80:45:c8:15:4e:9e:cc:88:2f:6e:22:
                    e3:da:79:04:af:d8:81:a1:5d:d2:65:f2:81:88:23:
                    5c:8f:be:ef:e7:74:e7:94:9e:7e:04:08:6d:dc:85:
                    aa:c3:ac:a1:4e:58:fb:59:d7:ab:39:fd:dc:5d:98:
                    37:5e:1c:21:8e:cc:86:af:cf:83:80:30:b5:6c:b8:
                    63:21:6c:96:67:f7:fa:67:f2:81:af:12:d1:24:bc:
                    ce:87:2b:a7:ae:3c:49:c7:8e:e5:1f:8a:44:c7:b4:
                    eb:f5:c1:bd:d2:f7:ef:e0:59:22:16:0f:85:2b:d4:
                    06:d6:fb:63:40:e9:f5:f0:a4:ba:37:2e:c1:6a:4b:
                    27:50:e9:97:fd:32:06:ac:59:9e:f3:86:f9:e6:5b:
                    83:84:bc:ff:d3:8a:a3:1e:f4:45:45:79:34:34:86:
                    5a:20:af:67:22:19:1f:4f:fa:5f:2b:35:c6:7d:a5:
                    84:f1:31:ce:6b:84:ed:25:d9:c1:5b:a3:e6:18:9e:
                    03:16:8d:2d:e5:f5:c7:86:99:16:72:6a:aa:aa:73:
                    e8:ab:de:ce:21:39:43:63:4f:ff:2d:b1:47:f1:0b:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F4:27:23:53:55:B6:EB:B3:CB:DB:AD:3A:6E:D4:11:B2:43:F8:06
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/7187baef917a2f8195abc65b3a209848acab04c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a9:f9:6d:f8:0e:fb:c0:dc:8f:a1:92:86:0c:f8:28:0b:3d:
         26:5f:cd:70:3e:ca:c0:1e:60:50:c1:87:09:60:86:db:af:1e:
         23:19:6c:83:78:72:2c:2e:d9:33:a5:39:74:55:fc:7a:2a:c5:
         b3:d4:f9:1c:e9:c7:ef:fe:bc:4c:e9:1b:ea:a4:0d:6f:5c:3d:
         c8:9b:16:0b:6a:92:38:d8:f7:9c:2d:64:dd:6b:7d:cd:e8:21:
         b8:59:d9:f9:fb:08:c2:27:a1:5a:dd:f8:12:b9:44:3a:30:fd:
         9d:26:34:e5:1e:46:c9:7c:d9:c4:ea:cd:6d:c6:05:f5:fd:14:
         2d:8a:8c:a5:7a:aa:00:5c:c4:6d:47:0c:e1:a2:e4:78:62:c6:
         93:8e:2f:f5:84:21:b2:ff:13:91:66:c7:7b:da:35:c0:34:78:
         18:ca:a2:b9:ef:1c:ba:9c:97:69:2d:2b:f9:bb:f2:b0:7d:d8:
         b7:d2:d2:01:5d:90:b3:33:ef:37:9d:d3:e5:e1:a0:ce:12:93:
         40:06:b1:1f:12:1a:4a:28:6c:7c:c0:47:2d:b1:23:71:aa:c5:
         1c:a8:4f:b0:5b:41:40:67:5e:8f:f2:c6:19:b1:80:64:5a:2f:
         b8:1a:f0:42:7a:c0:de:60:98:7f:8b:7b:38:4e:d8:37:d8:70:
         50:74:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org