Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/acfafb2e6f711ca4a8b6aa086988a5e40fb073e9.roa
File:                     acfafb2e6f711ca4a8b6aa086988a5e40fb073e9.roa (raw, json)
Hash identifier:          zsY1Uyi18VBSEnCqfk9bQ+Rly7KraCfSAjoBZPaxD14=
Subject key identifier:   E5:B5:FF:51:91:A8:7F:12:59:01:8F:1A:36:A9:0D:36:C4:A1:99:F2
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29DA65
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/acfafb2e6f711ca4a8b6aa086988a5e40fb073e9.roa
Signing time:             Tue 06 Feb 2024 15:37:25 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.24.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742885 (0x29da65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=acfafb2e6f711ca4a8b6aa086988a5e40fb073e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:23:f1:6e:09:5e:8d:1c:03:b2:5e:52:6f:
                    27:7e:49:f5:48:20:5c:1a:40:e4:7f:43:1c:30:cf:
                    e8:f9:34:c8:30:0b:20:f9:c4:f0:7c:4b:b1:5a:16:
                    a2:fc:2b:23:eb:68:94:cf:e1:ec:03:2d:61:da:30:
                    76:93:00:10:f8:ae:48:2a:bf:31:14:13:52:67:58:
                    a9:45:84:21:ab:f8:ec:8a:5c:35:41:3c:c8:dd:7d:
                    70:9b:62:91:40:1a:31:21:3e:16:62:8f:bf:ab:52:
                    f8:53:16:48:78:e7:43:36:e4:d4:91:8d:87:f1:6c:
                    31:f5:b5:aa:1f:04:b1:ea:21:91:f6:49:a8:8f:ec:
                    4e:10:18:77:f7:32:33:94:69:cf:af:88:2f:39:2d:
                    4d:ec:48:e8:8a:70:9f:d7:8a:17:7b:96:10:a2:53:
                    64:31:30:bb:b3:5b:1b:87:5c:3c:7f:1d:c8:f3:9e:
                    d6:8f:42:15:29:00:87:32:46:54:bf:a4:23:2f:59:
                    f6:33:2b:69:5b:4f:a9:65:02:d2:cd:3b:aa:16:49:
                    38:3d:c1:a3:5c:be:a4:66:01:dc:55:5e:d6:7a:bc:
                    ad:33:c2:ca:7c:39:af:82:83:10:58:67:d0:32:68:
                    4c:af:69:d0:96:1c:45:5b:1e:ef:61:51:28:89:e8:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B5:FF:51:91:A8:7F:12:59:01:8F:1A:36:A9:0D:36:C4:A1:99:F2
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/acfafb2e6f711ca4a8b6aa086988a5e40fb073e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:fc:5d:bb:d0:0d:8e:26:39:79:fe:fb:e3:19:b2:04:d0:
         d3:50:e5:6b:76:93:70:8f:c0:fd:85:b9:01:ba:38:d1:74:da:
         fa:eb:c8:a1:83:0e:9e:bc:b5:57:12:36:0b:60:1c:70:64:b4:
         73:37:1a:da:8c:52:d8:36:10:7d:49:22:4f:43:d9:e1:9c:f1:
         e0:5c:d0:a8:5f:7e:47:e6:aa:36:08:ef:2b:f9:3e:8e:1f:d9:
         08:a2:6e:74:07:ad:f2:2d:98:11:d5:46:7f:62:4f:61:27:de:
         b1:ac:d9:53:26:91:82:51:f7:cb:95:4f:b0:1a:39:71:67:da:
         47:43:ab:e8:ca:4b:f6:af:97:51:75:47:fc:64:9b:f1:12:27:
         4a:2c:1e:46:10:10:88:a0:61:65:74:7b:f0:00:83:e0:7f:50:
         4c:95:92:e2:0a:d7:fa:5e:1e:99:8e:e9:f9:ae:2d:b4:f4:9f:
         60:83:35:1a:46:d3:d3:74:b2:1a:70:53:49:82:07:b5:ae:37:
         5c:90:77:2e:b3:1b:3b:02:ec:63:da:87:12:0c:e9:7e:db:8d:
         95:2d:4c:c9:31:bd:98:56:a9:44:b6:cb:0e:07:4e:7d:76:94:
         e9:c5:89:9e:43:9a:66:51:9f:86:4f:25:5e:7b:47:36:89:95:
         c3:16:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org