Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ccc643ce64df0c423ed977d30b08328ab372b129.roa
File:                     ccc643ce64df0c423ed977d30b08328ab372b129.roa (raw, json)
Hash identifier:          aGQcGfOI90YhILKLOyFq8GpCuSR0EBqq7nNPPzAVfi0=
Subject key identifier:   31:34:60:D8:11:31:A2:A8:DE:7D:F3:55:1E:2A:2F:97:71:2F:4C:39
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29AB28
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ccc643ce64df0c423ed977d30b08328ab372b129.roa
Signing time:             Tue 06 Feb 2024 15:37:07 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.7.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2730792 (0x29ab28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=ccc643ce64df0c423ed977d30b08328ab372b129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:f6:36:04:79:ba:c7:3e:0d:26:e9:0d:1d:
                    d4:58:d9:fa:ea:d3:0c:5b:28:ab:2d:fc:a6:b6:ba:
                    3b:03:b7:c0:75:f0:3d:2d:ca:a4:0d:5a:4b:9d:c4:
                    ec:15:3e:32:39:e1:80:dc:33:78:8d:99:b3:9b:34:
                    8a:7a:d5:df:07:a0:cc:5f:ae:90:6d:29:b0:a3:6e:
                    05:04:4b:ad:7f:6a:c4:b6:f9:4e:99:32:eb:b8:41:
                    fc:6b:f9:7a:4a:7a:e4:8a:9d:d7:b3:01:d2:b8:83:
                    ca:f2:e7:de:89:58:9c:0e:74:c7:2d:8e:cd:58:c6:
                    db:a2:f8:f8:fe:73:a8:0a:58:6e:be:d3:e6:cb:de:
                    1f:59:75:f3:be:27:ed:a3:b7:1a:65:be:99:86:12:
                    65:78:55:ce:6b:af:0b:ea:c4:a6:38:ed:bc:c1:39:
                    37:8b:5a:8b:6d:99:f1:9c:4c:5d:59:12:7a:6d:d4:
                    1d:6d:52:40:75:c5:34:be:ad:41:b4:ef:7c:a8:dc:
                    60:13:e5:f2:d9:e8:76:06:a5:cf:71:57:7a:e0:13:
                    6a:ca:c2:7f:83:e3:3b:09:4f:c4:1e:fe:db:02:04:
                    81:d7:a7:87:9a:51:36:8b:55:1d:6f:e6:6b:a8:83:
                    63:e1:c6:9a:56:93:d2:1a:21:0c:22:5a:0b:a3:5f:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:34:60:D8:11:31:A2:A8:DE:7D:F3:55:1E:2A:2F:97:71:2F:4C:39
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ccc643ce64df0c423ed977d30b08328ab372b129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:8a:2f:32:b4:c2:b4:af:ab:73:2b:9c:e0:4b:07:ae:44:4e:
         ea:10:59:cd:c5:3f:16:b5:e6:ba:9b:bf:b6:05:73:cd:fe:64:
         88:74:b7:bf:a8:4d:15:2a:0d:a0:7c:30:11:0f:53:58:31:c9:
         71:a9:0d:35:4a:81:e8:19:c9:47:ed:6f:f1:30:56:67:2b:c3:
         6a:7e:83:55:6c:a9:27:93:a1:ef:77:94:67:14:2d:72:1b:ee:
         65:8b:83:e6:0e:ce:55:9d:98:a0:d0:86:aa:b6:f9:e4:6a:54:
         46:c4:b1:92:43:bf:99:97:45:3d:9f:2a:c5:94:ec:d7:13:2f:
         2e:2c:f2:12:a5:36:bc:39:63:5a:ef:47:f6:92:f7:ff:9b:41:
         3c:63:f7:ba:a1:a1:f1:b3:ef:19:26:34:9b:f0:1b:e1:3d:40:
         58:f3:59:77:d6:2d:9e:4d:52:94:ef:c5:a6:01:9d:a7:bd:2c:
         31:ef:56:8d:46:93:e6:f3:f7:fe:ea:0e:25:ef:c4:7e:b6:53:
         a8:0e:0c:c6:9f:e7:93:5e:90:85:89:4f:47:37:0b:95:05:8a:
         4f:8e:87:10:46:1a:93:dd:53:83:63:8d:85:f3:d6:9f:8f:ad:
         e8:71:9b:b9:11:42:68:c5:7d:b9:74:7b:24:ba:d6:cb:16:fc:
         0f:d2:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org