Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e11580df003b398fdc86616fe197521bdb49aa7c.roa
File:                     e11580df003b398fdc86616fe197521bdb49aa7c.roa (raw, json)
Hash identifier:          /KPXCQSd2wwJvi88h+EOL33aZ9ibKRWbADwNSmJgRQY=
Subject key identifier:   3A:10:00:C4:07:96:CC:3D:CB:8A:C0:11:35:C2:32:87:6F:5A:10:7D
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1F42AD
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e11580df003b398fdc86616fe197521bdb49aa7c.roa
Signing time:             Wed 25 Jan 2023 22:36:25 +0000
ROA not before:           Wed 11 Jan 2023 18:03:24 +0000
ROA not after:            Mon 13 Jan 2025 18:03:24 +0000
asID:                     19114
IP address blocks:        200.24.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048685 (0x1f42ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Jan 11 18:03:24 2023 GMT
            Not After : Jan 13 18:03:24 2025 GMT
        Subject: CN=e11580df003b398fdc86616fe197521bdb49aa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:69:2f:e1:ca:68:a5:eb:25:d9:40:fc:38:
                    94:d4:c0:08:40:3f:e6:b8:e5:5d:e9:15:2a:a4:34:
                    3a:8e:6a:56:9c:4b:8e:cd:95:88:39:91:fb:91:bd:
                    50:b7:0d:45:18:ab:3b:9f:bd:ca:9d:46:8b:d8:d7:
                    24:68:2c:0e:c6:69:f9:e5:9c:80:b4:ce:0f:cf:ec:
                    cb:73:08:0e:f5:c9:eb:0a:6b:a4:95:6c:ba:eb:37:
                    2d:ca:b7:d1:07:dc:23:53:ba:91:b9:22:f4:5a:c1:
                    d4:6d:06:82:91:89:d6:af:61:91:cd:c6:d0:93:1a:
                    38:63:6e:ff:45:9a:cc:1d:37:a6:06:e4:f1:a6:e2:
                    09:e0:86:46:72:90:01:3a:b3:5a:02:ad:e9:2a:73:
                    20:67:d0:86:22:17:f5:9b:49:e6:76:0e:9c:ad:e1:
                    ff:36:02:34:15:69:28:2c:5b:b0:4c:e2:03:e8:d3:
                    df:fc:d9:e5:d6:17:86:61:ca:78:ac:15:50:be:f6:
                    1a:70:98:3b:b2:d4:5a:37:34:83:f3:5b:7b:59:d5:
                    54:2a:96:1d:3d:df:a0:48:97:51:78:55:f9:e4:ed:
                    8f:5e:a5:5e:6b:67:e4:b5:2a:a6:28:82:ea:8c:cd:
                    8d:5f:7b:ff:26:6f:77:e5:85:91:11:1a:4b:d7:21:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:10:00:C4:07:96:CC:3D:CB:8A:C0:11:35:C2:32:87:6F:5A:10:7D
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e11580df003b398fdc86616fe197521bdb49aa7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:11:96:7a:0a:72:4c:47:fc:ed:14:c0:04:a8:ec:0c:33:c2:
         ff:f7:75:f5:dc:9c:28:2b:a5:a2:be:06:01:4d:5f:a9:e9:a5:
         dd:2e:71:6e:eb:e1:f9:b4:cd:12:3e:9f:06:f6:99:2f:db:22:
         28:a3:95:51:1c:39:29:cc:16:3c:91:78:ad:1e:88:a8:28:c3:
         58:58:76:ed:0a:05:cb:eb:0b:b5:0b:f9:a7:87:86:fe:38:74:
         eb:d7:21:fa:e1:22:85:24:c5:68:7b:80:9a:c1:49:a8:c9:2b:
         02:f3:c8:40:49:e9:75:eb:89:bf:e2:db:79:12:84:66:03:25:
         90:cc:51:32:c0:13:7c:5c:4f:a5:b2:c0:38:6b:d7:a1:34:b3:
         34:a8:21:ef:b5:4c:3b:2c:91:bc:66:6c:a5:a2:8d:09:fc:db:
         e8:77:06:cb:d4:bb:c6:89:24:74:10:5c:64:f8:59:aa:66:ac:
         92:2e:38:43:cd:1d:bc:ad:8d:05:a1:f5:d9:f6:23:be:dc:63:
         16:45:8a:f4:56:5e:a2:50:55:6b:c3:5f:b3:8b:da:f0:c0:ab:
         3d:fa:4a:67:1f:d9:a8:c4:dc:f2:06:5c:0c:96:d9:3b:31:88:
         86:eb:4d:e6:5e:21:1e:e5:1b:f8:6b:29:a1:11:99:15:ad:0f:
         d2:ce:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org