Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e1c8cca0ea088e722dcda82922f11cbf171841b9.roa
File:                     e1c8cca0ea088e722dcda82922f11cbf171841b9.roa (raw, json)
Hash identifier:          nF5mEcDungJScYy9O6Qd45o7M/JfDnYtFyLGSJHHrcA=
Subject key identifier:   C3:F6:1F:85:BB:31:2B:0C:25:F7:E6:AA:06:2D:4D:54:DF:2B:02:4A
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29E8BE
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e1c8cca0ea088e722dcda82922f11cbf171841b9.roa
Signing time:             Tue 06 Feb 2024 15:37:35 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.24.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746558 (0x29e8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=e1c8cca0ea088e722dcda82922f11cbf171841b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:04:86:4a:ed:25:6f:ad:19:a3:d4:cf:02:74:
                    81:3b:07:1b:90:eb:b8:47:2a:23:39:74:08:af:50:
                    fb:00:c0:ee:85:31:18:2e:96:14:fd:90:6d:15:26:
                    49:41:6e:d9:08:10:1e:ff:da:1b:10:cf:9a:54:ab:
                    c6:71:6e:b9:f1:21:16:28:db:09:a4:8e:1c:f4:37:
                    71:5d:82:72:2f:86:a9:f9:fb:19:18:dd:d8:65:55:
                    31:00:b8:14:63:08:66:53:81:e9:c0:94:e5:8f:d8:
                    e4:a6:65:cf:58:05:30:be:ed:9f:f6:66:9a:5a:4a:
                    82:89:b7:32:9e:2a:df:f9:4d:5a:2e:93:17:b8:29:
                    bf:23:a4:98:de:0e:94:63:82:1d:a6:b1:30:a2:2f:
                    88:38:64:5f:62:ca:12:35:03:de:7b:8b:21:51:df:
                    fb:51:eb:2f:92:8d:c2:9a:6e:71:9c:a5:df:ef:d9:
                    93:cc:56:18:d7:c2:5e:38:95:22:d6:f4:aa:e8:a4:
                    ed:fa:76:62:58:7b:f8:e5:41:25:86:5a:28:61:2a:
                    ab:02:9f:ff:88:7f:f8:53:c6:07:e9:6b:58:d6:66:
                    e2:f1:b7:d3:60:38:4a:98:be:cc:79:0f:09:a0:f2:
                    55:45:12:69:35:c6:be:7f:d6:6c:6e:0f:e9:9b:41:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F6:1F:85:BB:31:2B:0C:25:F7:E6:AA:06:2D:4D:54:DF:2B:02:4A
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e1c8cca0ea088e722dcda82922f11cbf171841b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:fd:90:7a:3e:f9:0a:81:72:bc:1e:bb:4d:fc:82:46:b3:
         36:63:2a:88:49:59:30:12:ea:f4:8d:40:0b:e1:9c:6f:26:e0:
         e7:09:06:f9:7a:a7:5e:73:89:05:cb:cb:75:84:a3:21:3d:93:
         c1:88:56:c6:ed:d5:69:e5:17:e5:5a:b7:46:5f:64:ac:13:9e:
         43:d3:53:95:de:aa:7d:49:cf:5b:e7:6f:01:42:91:72:be:31:
         23:94:3a:aa:35:1f:01:37:d6:67:fa:da:06:48:0c:87:ad:9f:
         59:f4:b2:fd:7d:64:86:a3:90:7e:9a:13:a1:6d:23:c9:8c:4a:
         c1:ac:57:02:ca:20:fd:c5:f9:ec:df:19:b0:aa:91:67:06:73:
         53:0a:40:c2:3d:4c:d3:e5:8b:03:d8:b2:c3:e4:7a:92:b8:f8:
         8a:8c:17:34:ef:27:6f:de:64:b6:58:71:90:8f:d1:09:cf:b6:
         a8:d1:62:f4:f1:3e:2c:f4:f3:e4:cf:78:7c:0f:f2:1d:d7:c0:
         37:c1:f6:aa:81:47:22:d8:50:f0:b1:35:7e:b2:7a:1a:27:42:
         44:ad:80:09:c8:fd:26:09:3f:e5:3c:df:39:ad:fa:2e:5d:4f:
         49:6a:d8:67:5b:88:f4:46:24:6a:56:f3:7a:da:fc:d0:8f:53:
         a2:e8:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org