Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/8ee0731891c5dc66a4ce3861998d8c89c828b307.roa
File:                     8ee0731891c5dc66a4ce3861998d8c89c828b307.roa (raw, json)
Hash identifier:          nEhSzlD4Z5nQe/UuET8q/d7Fty+m5g4CT5FVbcGZ0JY=
Subject key identifier:   70:B7:B6:A8:F6:36:66:0C:70:71:96:CC:D0:E3:BD:A1:72:39:64:82
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29AF2C
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/8ee0731891c5dc66a4ce3861998d8c89c828b307.roa
Signing time:             Tue 06 Feb 2024 15:37:08 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     27947
IP address blocks:        200.7.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2731820 (0x29af2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=8ee0731891c5dc66a4ce3861998d8c89c828b307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:26:84:c6:d7:55:25:bb:dc:dc:9d:b4:4f:
                    d2:20:28:21:24:eb:7e:77:3f:21:b3:2b:20:ea:53:
                    ea:99:c6:4c:95:a4:30:1f:2c:fb:ba:2f:6e:14:e9:
                    4f:a1:e3:1e:f6:10:f5:83:5b:fc:09:b4:f0:28:cb:
                    07:7e:b6:4e:47:f6:17:bc:fb:54:6f:fc:5a:50:a4:
                    f8:b3:31:7d:bc:10:07:0f:45:92:a3:1f:ee:72:98:
                    f2:95:17:b1:c2:fd:b5:3e:2f:b8:10:0f:50:f4:28:
                    ae:08:40:30:46:21:5a:ef:88:4b:6c:f6:b4:34:f3:
                    48:07:84:66:4c:32:96:e5:f9:52:af:12:03:b3:c9:
                    23:f1:8a:f5:af:45:68:ce:c3:e4:4c:2b:d6:02:02:
                    bd:13:08:05:b8:96:53:93:2f:c1:48:47:0c:3f:77:
                    94:da:cf:ac:a0:2f:fc:b3:8a:a6:9a:c5:ad:23:6c:
                    9f:13:d6:95:0a:e9:cb:34:7b:fd:db:83:6f:f4:ca:
                    72:11:29:62:7c:07:8d:59:95:78:e8:06:ed:5e:d3:
                    2e:6a:0a:8e:8e:34:d4:5a:1a:ad:7a:45:97:16:3a:
                    75:b1:83:f2:70:3e:29:a1:e2:82:a7:8e:67:21:0e:
                    ba:2f:f7:cd:83:c9:f1:2e:96:c1:ff:62:0e:a5:07:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:B6:A8:F6:36:66:0C:70:71:96:CC:D0:E3:BD:A1:72:39:64:82
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/8ee0731891c5dc66a4ce3861998d8c89c828b307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:46:e8:97:1c:92:af:a1:4c:d7:5b:2f:49:07:98:45:58:
         0b:56:52:aa:61:29:b3:39:cb:17:83:96:63:46:33:2f:15:19:
         69:de:bd:bd:1c:0d:82:48:85:63:b4:ce:e1:e4:fc:02:97:7e:
         f9:20:f5:b0:12:02:06:17:43:31:f7:dc:d0:ee:cd:c2:d3:c3:
         87:01:77:38:c7:62:24:60:68:b7:c0:48:1a:7e:c1:f5:db:1f:
         5c:5b:eb:47:cb:a0:79:fb:8e:ba:2c:44:2b:6c:10:7b:3c:56:
         b8:e0:e5:b6:b4:c7:81:24:44:d7:57:ad:77:77:a8:2a:ec:aa:
         38:c7:86:c2:03:31:87:0a:91:4a:a4:9f:9e:ac:b0:e7:6c:b4:
         f5:7a:eb:78:4f:88:35:dc:89:66:1a:fc:4a:60:d9:70:d5:fc:
         d5:29:c4:54:56:d7:a9:26:a8:da:c1:6a:af:a4:b0:dd:9e:89:
         7a:85:c9:af:b0:5e:49:f8:4a:32:01:2f:fd:ce:cf:a6:08:a1:
         d3:6f:d6:7b:3b:f4:68:fd:01:52:9d:89:1e:fe:47:fe:7d:46:
         69:ed:d9:58:67:06:80:24:ba:62:7a:96:e0:be:2b:f7:3d:54:
         1a:49:7c:17:ba:2a:ba:30:78:75:4a:05:24:96:3f:68:0a:29:
         9f:ab:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org