Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9d4a520000f5b403dd248811f26408604c7b4bb7.roa
File:                     9d4a520000f5b403dd248811f26408604c7b4bb7.roa (raw, json)
Hash identifier:          bH2Vpj4rFd7t4G0yG6TjJR8sygMbXiYTVfjZBMqfi58=
Subject key identifier:   F4:ED:0B:57:BB:84:40:A7:21:02:4C:77:96:55:7B:78:9E:19:EE:B6
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1BEFDB
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9d4a520000f5b403dd248811f26408604c7b4bb7.roa
Signing time:             Wed 28 Sep 2022 02:46:20 +0000
ROA not before:           Wed 28 Sep 2022 02:34:45 +0000
ROA not after:            Sat 28 Sep 2024 02:34:45 +0000
asID:                     19114
IP address blocks:        200.7.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830875 (0x1befdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Sep 28 02:34:45 2022 GMT
            Not After : Sep 28 02:34:45 2024 GMT
        Subject: CN=9d4a520000f5b403dd248811f26408604c7b4bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:61:5b:74:bb:a4:a3:e7:39:18:5d:2a:f1:
                    3e:65:84:52:2b:9a:dd:1b:e6:5c:8e:92:46:21:f0:
                    44:93:5c:97:1c:3f:16:27:e9:49:dc:3e:66:24:41:
                    57:6c:04:ef:2d:07:0d:95:42:e6:10:4f:2c:99:16:
                    84:03:6e:57:e0:2a:15:8d:24:9d:22:83:54:e3:fb:
                    36:0c:ad:b7:d7:c1:b4:60:63:92:fd:c8:ae:44:cb:
                    be:e3:26:ed:1b:64:57:21:18:35:a2:81:0d:40:a8:
                    41:da:b6:e8:75:a9:ed:2e:1b:4e:a8:2b:0f:e3:ea:
                    d6:cd:3e:f4:05:1a:31:e3:87:47:64:34:8c:ae:c7:
                    41:ec:f6:ce:ac:38:fa:22:30:3c:a9:0b:69:9c:0e:
                    d9:d4:34:ba:5c:8f:d4:c1:b1:16:8f:bd:56:92:55:
                    bf:25:cb:1f:e2:ce:41:3d:6a:f7:a0:02:ce:8d:8d:
                    c6:eb:42:3c:4b:a4:ee:57:e0:b5:db:6e:bb:02:0b:
                    51:08:6e:f4:74:96:e9:6b:35:2d:e3:f9:c1:23:be:
                    f5:30:52:91:ec:d8:9e:b7:55:b1:1d:e7:67:f1:d0:
                    d3:a5:79:fb:3f:8b:c9:66:24:92:5d:02:fb:db:92:
                    e7:d6:bd:bc:b6:fa:bf:50:9a:f5:b5:27:da:e0:bf:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:ED:0B:57:BB:84:40:A7:21:02:4C:77:96:55:7B:78:9E:19:EE:B6
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9d4a520000f5b403dd248811f26408604c7b4bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d3:c0:a6:cc:3f:e1:46:e0:fe:7f:7a:d8:f0:77:f5:b9:d7:
         cc:92:d6:38:01:e9:46:d5:e6:a3:97:b0:13:60:b9:70:4f:b0:
         e6:7f:17:82:ab:9f:08:26:14:ae:6b:4d:17:a9:d7:cf:66:55:
         55:09:4c:9a:c0:2d:d8:52:9a:c0:9e:23:f8:79:c2:ce:10:16:
         f9:26:46:a3:a8:5a:ea:41:bb:ce:fd:b1:96:02:30:53:fc:17:
         a7:25:2e:77:fc:4a:4d:62:9d:34:a4:6f:14:71:2a:79:76:1e:
         ad:c4:67:08:f6:63:72:bd:36:6c:c1:07:d0:94:c6:2f:15:3c:
         94:df:ff:12:b4:90:6b:d9:a5:0b:81:84:aa:ca:47:18:3f:b0:
         98:0e:09:78:1c:d6:cb:be:b0:eb:59:33:8e:7c:21:70:7b:7f:
         bd:49:9e:bb:68:00:ca:06:d1:18:87:8e:80:f1:34:59:45:39:
         09:71:be:67:e7:10:f5:25:2b:fc:76:e4:8e:39:50:46:d7:2b:
         a8:63:ae:de:a5:e6:9d:ba:11:2e:36:a3:61:d0:07:af:c1:07:
         fe:33:60:b2:8b:98:9b:a8:7f:2f:70:63:b7:2b:94:38:cf:5b:
         f4:7e:d2:29:74:6a:d1:29:7c:6d:42:d2:fe:2e:62:5a:5e:91:
         c8:cb:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org