Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9855e6050d824313f65549ef279ff92c3e6b26ff.roa
File:                     9855e6050d824313f65549ef279ff92c3e6b26ff.roa (raw, json)
Hash identifier:          4PMrKyrAVdYpVA8/NzPwy+QCHNNqaI/aaoaJJE42RAU=
Subject key identifier:   50:24:5A:F4:45:8E:1B:75:76:76:83:BB:22:59:4F:07:98:38:0E:9D
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A3D17
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9855e6050d824313f65549ef279ff92c3e6b26ff.roa
Signing time:             Tue 06 Feb 2024 15:38:43 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     7315
IP address blocks:        200.7.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768151 (0x2a3d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=9855e6050d824313f65549ef279ff92c3e6b26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:f7:75:48:d6:ed:c1:7a:4d:ec:43:62:5c:
                    05:63:9f:a6:d8:f7:26:35:7a:72:e1:2c:f6:87:f8:
                    74:9a:2b:a8:c0:79:85:50:db:af:c3:7f:82:00:ec:
                    8b:50:8f:ec:87:5d:2b:bd:77:a2:5a:91:61:37:64:
                    8f:c1:cf:5c:5a:9a:6b:6e:43:43:ed:2b:c7:e9:05:
                    45:ac:cd:04:1d:09:7f:c3:7e:24:31:87:ea:f0:8a:
                    f4:ac:a1:01:7d:7a:0f:35:3d:05:a0:0f:f6:7e:d5:
                    97:8d:07:4e:c8:b0:c6:61:6d:ba:ca:b6:a0:e2:ef:
                    45:a3:ac:4a:1a:17:37:37:d2:54:77:40:66:4b:17:
                    b3:d7:de:76:c2:1e:16:d5:e8:d8:8d:36:5d:80:68:
                    9e:6e:a0:83:27:2f:73:08:57:ee:3a:e3:02:15:7f:
                    63:6f:82:bd:3c:5c:01:a8:3a:23:46:65:6f:ea:ae:
                    37:9f:0c:2b:82:3a:9a:8a:e6:9b:e1:1b:87:9b:11:
                    a8:85:7a:6f:2a:80:85:bd:32:43:6f:c1:08:46:92:
                    26:1b:ea:7a:79:1a:a3:07:7c:19:07:21:7f:28:d9:
                    9c:f4:df:00:2d:c4:9e:b2:c5:07:a6:6d:16:9d:7f:
                    a1:07:75:98:8d:cf:e1:bf:ac:38:d9:b5:38:eb:1c:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:24:5A:F4:45:8E:1B:75:76:76:83:BB:22:59:4F:07:98:38:0E:9D
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9855e6050d824313f65549ef279ff92c3e6b26ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:16:10:c7:cb:a0:1f:4d:fd:2a:74:91:f3:48:12:df:49:
         30:f7:c5:34:f0:a3:6d:a5:ce:30:7f:54:c9:5e:9f:35:93:17:
         a0:f2:db:5d:0b:00:4b:f0:08:89:88:74:50:1a:f6:e7:a6:20:
         51:a5:31:df:f4:8d:46:35:90:d0:76:02:3d:44:11:f2:66:d4:
         79:03:04:d0:f8:52:4a:d0:a9:d3:44:e3:04:a5:7c:5c:00:ed:
         19:d8:0b:c3:6d:3a:d3:dc:fa:d6:c6:d0:51:1f:9c:58:74:97:
         c2:80:e9:d7:f1:bc:8c:04:32:c2:2a:21:ef:76:26:1c:d5:32:
         9a:e1:b9:5a:86:bd:26:94:ee:e0:bd:16:b8:0b:38:f4:c3:c1:
         06:9f:11:26:e3:68:80:ce:5f:f2:b6:43:30:dc:d4:a9:b6:0e:
         6d:39:70:04:29:c2:c8:6d:54:b2:ea:0e:f7:c4:7f:90:08:c1:
         41:7f:9a:a7:ab:7d:98:f4:4f:0e:c8:0b:92:d3:d4:d7:64:98:
         7a:0d:ee:29:89:d2:de:bc:bd:e0:8e:8f:4e:40:60:1a:59:5a:
         17:68:42:4c:ad:4d:42:49:11:cf:a9:f8:86:9d:fd:1c:e1:e2:
         09:57:83:3a:7f:88:7d:9e:92:65:95:c8:43:82:3b:79:c3:74:
         c5:37:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org