Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/bd445d78b19530ba57a557082f113e919659a08a.roa
File:                     bd445d78b19530ba57a557082f113e919659a08a.roa (raw, json)
Hash identifier:          21Clmykatmv0GJu6DswR/RNH/+MAWHaXNDpeLob8CE8=
Subject key identifier:   FA:A5:3E:AA:BE:71:C7:CF:FE:91:56:41:F6:1B:D5:FC:75:43:DB:FF
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A28C7
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/bd445d78b19530ba57a557082f113e919659a08a.roa
Signing time:             Tue 06 Feb 2024 15:38:20 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     7315
IP address blocks:        200.7.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2762951 (0x2a28c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=bd445d78b19530ba57a557082f113e919659a08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:79:e3:b1:b7:8e:d8:e5:72:5c:42:1d:08:
                    f0:75:b1:13:f9:f2:7d:d0:18:37:0f:74:2f:74:74:
                    ed:5d:bf:89:31:d6:91:1f:2e:cb:9e:3b:f5:26:a2:
                    a7:db:99:4b:58:54:ab:ac:4d:96:18:ea:a7:5b:34:
                    2a:c5:74:42:8d:a3:cd:8b:72:a6:ea:b6:31:ac:56:
                    d8:d1:d6:5d:72:4c:f5:1e:77:b2:07:57:f8:22:9e:
                    a8:67:59:d1:35:18:91:14:96:47:bf:3b:34:5d:a3:
                    f2:96:e7:c8:81:fd:95:d3:37:37:da:03:90:62:71:
                    f3:03:60:94:18:4f:bc:81:ce:52:52:17:e5:2c:59:
                    8e:99:5d:0d:d1:6d:7b:cb:11:c4:c2:e0:13:51:13:
                    46:27:66:fb:5c:ef:7a:44:1e:2b:59:08:34:84:8f:
                    dd:c3:10:c1:4d:e7:f5:63:b0:94:f0:5a:e4:be:eb:
                    ae:d7:17:df:f3:eb:8d:e5:ea:ec:94:1a:c3:92:e2:
                    c7:08:37:ed:ec:db:86:a9:46:b6:4a:46:92:72:42:
                    05:b6:cc:0e:32:67:bd:92:bb:7b:1d:6e:3f:26:50:
                    58:12:6b:bb:6e:a5:71:c3:fc:0a:8c:1a:42:8f:00:
                    48:bd:e2:81:2d:56:f6:7f:f5:81:75:fa:ed:fe:87:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A5:3E:AA:BE:71:C7:CF:FE:91:56:41:F6:1B:D5:FC:75:43:DB:FF
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/bd445d78b19530ba57a557082f113e919659a08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:76:97:ae:59:5f:d4:24:b8:9b:b7:9a:15:de:b0:b4:0f:c9:
         34:df:02:34:e1:3b:2a:a4:bb:df:dc:8e:2b:6c:b7:4c:0c:dd:
         b2:b8:76:30:46:f0:0a:de:43:15:ca:3a:c0:8f:8a:a4:54:4e:
         4b:b5:c4:e3:56:e1:e2:a3:0f:42:ef:3b:07:a1:3e:f1:48:b1:
         7b:a7:8b:ed:30:f7:98:22:bb:45:31:23:3f:91:0d:da:9e:cc:
         8c:6e:b9:8c:81:29:50:97:9d:9f:7a:28:80:cb:2e:2a:b5:35:
         b9:81:9a:1a:8a:85:87:9c:c8:18:77:4e:1e:72:37:35:5a:b5:
         35:94:47:ea:ea:9f:80:4b:4f:ff:55:b0:cb:3f:32:23:54:67:
         a5:31:3c:d9:b6:fa:a2:9f:5b:39:2c:3c:64:df:ff:b1:ed:e3:
         87:9e:1c:00:12:68:01:48:75:e8:d9:1d:cf:55:4e:2b:36:70:
         69:0f:b1:c0:65:16:4d:e5:02:0a:7c:70:75:58:71:00:4c:92:
         5c:36:15:57:86:85:9f:00:79:9b:30:97:4f:33:36:b2:09:98:
         7a:97:65:09:0c:41:53:e2:3e:7d:8a:aa:ae:6d:e4:b7:2b:c9:
         fa:12:e8:9e:9f:42:d8:51:0b:fb:cd:33:b1:f1:c6:1a:1a:ce:
         f3:d1:6b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org