Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c129844b39454c57954591ef25a02fef8353feca.roa
File:                     c129844b39454c57954591ef25a02fef8353feca.roa (raw, json)
Hash identifier:          sUmtdj3b6WIha6LJnI0h6pccxzmRaN1epkemUav3O20=
Subject key identifier:   0F:8A:73:D4:29:53:B9:7C:28:64:12:AA:4D:F8:B9:3B:63:48:00:62
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       269575
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c129844b39454c57954591ef25a02fef8353feca.roa
Signing time:             Fri 27 Oct 2023 16:38:03 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.24.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2528629 (0x269575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=c129844b39454c57954591ef25a02fef8353feca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:44:13:bb:bb:c4:cd:21:6e:33:5c:3f:7c:
                    e8:ef:57:32:e5:d6:e1:07:db:4e:f4:fe:52:b7:d9:
                    74:91:56:ff:50:a6:88:1e:a1:15:1e:52:15:e8:8d:
                    17:75:d5:80:c0:2d:e1:cb:26:11:61:e9:a2:f5:ec:
                    51:19:54:d1:57:25:2e:18:2f:43:ab:19:1b:06:9f:
                    62:1b:ea:5b:8e:f0:66:ce:da:ea:6f:83:0d:c2:8b:
                    7c:8e:17:60:a4:97:97:88:b7:ea:fd:fb:d5:79:73:
                    cc:d8:5c:ba:a6:cd:9a:2c:eb:0b:55:9c:a9:3d:1f:
                    16:2a:57:27:f7:ae:2b:d7:d8:20:99:d0:c0:d7:32:
                    60:ed:c8:52:c8:91:dd:19:40:d4:ca:e0:a8:ad:38:
                    9f:38:f0:51:61:5d:7f:fa:67:61:ad:da:1a:51:b5:
                    5d:02:8b:e4:1a:8a:c0:26:32:b0:e3:fb:45:11:d3:
                    51:42:c3:45:75:1e:5f:6d:54:ed:60:c6:eb:27:3a:
                    40:3d:ef:67:f0:bc:01:90:d7:75:4b:bd:ac:06:04:
                    9e:f8:05:c7:32:98:35:d5:4b:67:5d:d4:0b:8d:16:
                    71:7b:09:ea:cf:ce:2a:3b:4a:39:ac:36:b7:39:9b:
                    dc:2d:75:cd:63:f2:5d:03:b5:32:24:f7:ad:4f:6c:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:73:D4:29:53:B9:7C:28:64:12:AA:4D:F8:B9:3B:63:48:00:62
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c129844b39454c57954591ef25a02fef8353feca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:05:cd:b6:d6:22:ca:db:99:7e:04:dc:ac:30:6a:7d:de:de:
         0d:1b:fe:95:bb:a9:59:93:81:3c:27:1a:de:dc:c3:42:21:a3:
         9d:62:9e:03:75:b4:13:d6:41:fd:88:c4:e3:85:40:22:4f:f8:
         90:10:84:7e:8f:82:81:0c:2c:d3:33:2e:d7:f2:66:2f:ff:24:
         16:e5:0f:e3:d7:bc:da:27:3a:fa:8a:5f:1f:ad:31:b4:89:cd:
         77:36:ed:c2:21:24:6d:d5:41:f5:a6:6a:ba:06:31:37:d3:2e:
         3f:f0:0d:5e:68:f8:1f:4d:c0:04:41:6a:88:0b:e3:d8:b0:df:
         45:e6:05:c3:a0:f0:c1:fc:c8:b4:4e:cb:09:6f:f8:20:dc:22:
         45:b8:9c:64:a7:e0:9f:85:8c:97:67:4a:df:cd:91:42:09:db:
         3a:12:ff:4f:7c:cb:66:e8:21:30:57:e9:f9:17:ad:8f:7c:c5:
         a0:56:d9:dc:ff:22:65:e2:3b:eb:16:68:af:a8:0e:69:b5:00:
         b7:3b:ec:af:3d:4c:7d:80:21:19:9f:fe:e5:01:ef:c3:52:fa:
         6f:c6:68:1c:da:19:d2:8f:4f:24:45:8b:81:a3:4a:07:80:b5:
         40:2b:fd:a7:6d:96:f2:44:eb:d1:f9:a8:dc:ea:f8:5b:e4:97:
         79:da:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org