Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c8e6a73f38683bce01a1cb16f2bba4ef276ef2df.roa
File:                     c8e6a73f38683bce01a1cb16f2bba4ef276ef2df.roa (raw, json)
Hash identifier:          ceXtHfS3raKizkto1aq8nWwR9NQkWmHVmxlx+qHMjNg=
Subject key identifier:   BD:93:4B:41:31:DA:32:4F:3D:B0:1E:50:6A:40:22:01:96:76:73:22
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26A848
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c8e6a73f38683bce01a1cb16f2bba4ef276ef2df.roa
Signing time:             Fri 27 Oct 2023 16:38:16 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        200.24.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533448 (0x26a848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=c8e6a73f38683bce01a1cb16f2bba4ef276ef2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:f6:90:d5:f8:6f:d3:32:c1:28:e7:d7:bf:
                    90:42:e4:23:16:a3:35:54:8d:ae:53:bf:26:e2:bd:
                    46:f6:ad:75:25:1d:06:d7:32:1e:60:3c:30:35:cc:
                    d8:30:ba:2d:25:1f:9c:4f:33:7f:49:6c:6f:51:90:
                    08:d8:0f:e2:11:65:c5:02:49:7a:28:b9:c1:cd:80:
                    bf:11:a9:11:d3:3b:9f:61:52:ba:79:4d:5e:57:9d:
                    c8:94:39:fd:05:81:bb:7f:86:ad:76:e0:4a:a2:46:
                    51:f4:7f:54:56:bf:97:f7:cc:2c:e8:df:18:7a:73:
                    31:4a:e5:79:fe:ab:34:7b:db:42:17:4d:ca:a8:4f:
                    6e:55:83:4d:43:78:d5:c5:e6:ce:62:80:82:60:64:
                    18:2f:ee:27:68:08:b5:1e:46:e1:70:59:35:84:a6:
                    3f:0f:58:33:f9:aa:57:9d:95:7a:d0:ae:74:18:40:
                    1f:36:4b:a6:fb:66:c7:59:cd:a7:02:ca:04:f7:a9:
                    63:cd:55:56:13:d0:6f:04:88:88:be:7f:af:91:12:
                    8f:16:f6:15:f0:1e:3d:b4:9b:19:ca:c9:b7:69:5d:
                    f7:bd:0c:93:36:a7:30:3d:d3:33:71:24:36:7a:30:
                    d0:64:1e:5b:6e:78:2a:df:1f:f0:c4:b5:5d:b6:d5:
                    67:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:93:4B:41:31:DA:32:4F:3D:B0:1E:50:6A:40:22:01:96:76:73:22
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c8e6a73f38683bce01a1cb16f2bba4ef276ef2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f7:d4:1c:6f:13:d8:d4:ba:54:88:4b:71:82:5c:7d:d3:41:
         ab:a3:f3:5f:cf:cd:aa:cb:b9:e0:35:13:b2:84:70:d4:d0:d7:
         a1:4f:44:3b:a7:4a:63:a7:a7:63:58:b0:00:d2:92:d4:f6:40:
         36:f4:fa:0a:aa:15:47:f4:80:be:06:87:4e:5b:13:89:a0:b1:
         3b:2c:ae:f8:39:20:24:a2:5f:2f:4d:40:30:0a:86:b2:fb:54:
         c5:f4:d5:d0:53:dd:dd:32:27:cc:47:41:74:16:4c:0e:e3:d9:
         42:aa:7d:b0:3d:a2:25:eb:4e:fe:91:7b:80:26:74:00:85:c5:
         c1:78:ca:30:94:ce:4c:e1:12:7e:9b:c9:ce:51:07:c9:7c:b9:
         91:99:a4:d8:e5:05:2b:fd:4b:06:d9:ec:be:4f:5d:0c:49:0d:
         db:02:32:bd:8d:f3:2c:8d:42:5c:3e:d3:3e:53:01:82:96:d1:
         d9:7b:1a:e9:76:a7:d2:59:d6:6f:34:4b:96:42:9d:e4:9c:cb:
         df:74:63:8f:e0:87:ec:ff:95:b8:88:e4:5b:93:ff:7a:58:95:
         e5:2b:35:37:fe:54:3c:2c:33:b0:59:e6:03:6f:92:0c:64:6c:
         d0:e4:eb:10:48:af:53:ce:cb:a5:01:5b:ab:c7:dc:5f:47:ac:
         b2:44:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org