Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c66b87f7f823b6edbbabc3cacf4e4b1dd93cdc5d.roa
File:                     c66b87f7f823b6edbbabc3cacf4e4b1dd93cdc5d.roa (raw, json)
Hash identifier:          jvWjaR69AaR9wXrLG4sVm68YAGbR+f1fjUtYs0R2kbg=
Subject key identifier:   48:AE:F9:4C:33:BF:9C:64:AB:B3:1F:72:5F:BD:E4:59:90:89:3C:35
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1F3CAC
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c66b87f7f823b6edbbabc3cacf4e4b1dd93cdc5d.roa
Signing time:             Wed 25 Jan 2023 22:35:43 +0000
ROA not before:           Tue 24 Jan 2023 22:31:59 +0000
ROA not after:            Sat 25 Jan 2025 22:31:59 +0000
asID:                     19114
IP address blocks:        200.24.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047148 (0x1f3cac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Jan 24 22:31:59 2023 GMT
            Not After : Jan 25 22:31:59 2025 GMT
        Subject: CN=c66b87f7f823b6edbbabc3cacf4e4b1dd93cdc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bc:b1:cf:44:66:96:9d:3c:a8:95:bc:0f:38:
                    f8:32:6d:57:71:5a:08:32:1b:b7:1f:d7:65:e4:52:
                    b3:cd:2a:d7:e2:c0:48:87:ca:87:cd:47:90:e8:64:
                    50:89:0e:d1:c5:eb:46:4c:40:2b:00:b0:b8:31:eb:
                    47:89:08:fd:90:a9:86:d0:2b:75:08:29:e0:eb:7b:
                    d8:aa:df:6f:2a:83:ea:a2:e2:b1:15:33:7b:21:80:
                    06:84:9e:62:b6:62:1d:dd:97:16:b3:9e:0c:e2:b7:
                    83:7e:56:cc:e7:fa:38:a0:6a:25:12:e9:0f:db:cc:
                    b3:dd:2d:77:bb:0c:bf:8f:c8:52:5b:f3:d3:36:c7:
                    a7:e4:55:96:4f:6f:a6:4e:92:1c:1a:77:2f:86:cd:
                    fa:d0:6a:d5:81:0c:51:ec:a2:f6:4c:46:ca:fd:6d:
                    f8:bd:e8:1c:c5:c1:a3:93:20:0c:28:89:50:ef:a6:
                    6b:cc:f5:72:8f:ac:b7:90:a2:db:ad:bd:78:c3:6a:
                    ff:a1:8e:4a:10:c0:9a:2a:98:13:da:05:41:cb:80:
                    0a:5a:f6:ac:d8:c2:d4:cf:49:91:e0:6a:c8:e1:f1:
                    30:d6:5c:92:df:55:3d:f6:77:3f:63:46:09:2f:52:
                    f3:bf:f7:f1:19:57:cc:60:ab:3a:62:28:70:e6:7f:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:F9:4C:33:BF:9C:64:AB:B3:1F:72:5F:BD:E4:59:90:89:3C:35
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c66b87f7f823b6edbbabc3cacf4e4b1dd93cdc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:08:c0:34:22:28:99:f5:fa:60:09:45:2c:ab:90:1c:e4:
         a7:12:26:4d:6f:d8:4e:9c:a3:3a:e8:bb:ea:27:28:9b:e1:4f:
         cd:a3:9c:0d:8b:16:ec:72:4c:aa:e7:0f:48:8e:60:8f:01:5a:
         c3:4b:c2:3d:56:7b:2a:77:3b:a6:00:ec:0d:dd:77:e0:68:08:
         8c:e0:52:52:eb:8c:28:c4:76:b8:df:0b:00:ac:8c:5c:0f:19:
         2e:04:32:5e:78:c7:e1:85:26:fd:d8:5b:58:a8:c8:f3:10:31:
         cf:66:d1:ab:87:64:4d:6b:24:be:31:2d:17:4d:c9:e1:03:f0:
         e6:12:4a:93:c3:21:1e:fb:1f:d2:d5:f5:6a:bc:c9:62:f3:36:
         6e:c7:8c:80:5a:c2:b9:dd:d7:ba:40:cf:b5:b0:09:07:c6:d6:
         2c:33:b8:d9:2e:a4:61:8e:8d:ec:97:1c:10:dc:c8:1a:af:4b:
         27:ba:aa:28:2a:19:34:f3:72:f0:fa:5b:db:b4:78:53:e9:7f:
         98:f8:da:b0:bf:ab:28:63:81:94:87:c3:8e:df:df:d2:0a:a6:
         a4:d0:52:af:0e:f3:ed:41:9e:6d:6f:c2:6c:01:b8:50:fe:6a:
         c1:a2:99:c6:53:c8:b3:cd:de:c5:5f:5f:5a:86:39:50:b0:a1:
         a9:3b:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org