Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ebd84e0135bc3545d507458699c4dee40e24f429.roa
File:                     ebd84e0135bc3545d507458699c4dee40e24f429.roa (raw, json)
Hash identifier:          2ojJfUmixwEIOYAhEj8EVtnX6Ls/73O7eeuDQcelJ5k=
Subject key identifier:   79:9C:7E:2C:C3:30:B7:17:90:F0:27:20:78:E2:4E:E1:46:D6:CD:1D
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A272C
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ebd84e0135bc3545d507458699c4dee40e24f429.roa
Signing time:             Tue 06 Feb 2024 15:38:16 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     7315
IP address blocks:        200.7.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2762540 (0x2a272c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=ebd84e0135bc3545d507458699c4dee40e24f429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:5c:0c:40:68:d0:09:d4:2b:9a:87:bf:98:
                    cf:fa:cc:b2:17:90:cb:8a:31:06:07:ca:16:1f:4c:
                    7d:fc:f2:43:76:c3:a3:df:34:0c:ca:1a:c7:2e:35:
                    67:b6:09:22:12:7b:db:bf:da:4f:5b:4e:a3:c3:1b:
                    5e:5c:64:4a:01:81:42:00:64:85:59:8c:7c:28:dd:
                    a4:eb:f4:e0:3a:2a:e2:d4:0e:06:43:47:2c:7f:e4:
                    86:51:1a:ba:51:74:29:15:14:b3:aa:d6:e2:7b:86:
                    7e:99:7c:2e:c2:67:b6:f4:5d:39:66:32:0b:92:2f:
                    85:04:1d:47:d3:d6:50:8e:2e:a6:c5:51:46:1c:39:
                    f4:1d:b3:c1:9b:20:d2:70:3d:ec:7f:c0:f3:6e:1a:
                    36:01:43:9c:99:2f:11:8b:2c:dc:42:3d:54:11:59:
                    48:cf:8f:3c:7e:01:02:89:96:1d:53:d7:ae:1a:9f:
                    4e:6b:51:25:e2:85:de:04:3d:39:80:3b:d3:62:65:
                    3f:ad:c7:37:6e:1f:3d:84:52:ec:74:ac:bb:0d:4b:
                    9f:f6:90:6a:0e:5a:d7:01:b0:ad:a1:33:35:80:6e:
                    04:81:c5:4e:39:e2:d2:67:80:3e:40:51:8c:07:0f:
                    16:d1:74:05:aa:60:04:53:cd:a5:87:06:10:5f:19:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9C:7E:2C:C3:30:B7:17:90:F0:27:20:78:E2:4E:E1:46:D6:CD:1D
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ebd84e0135bc3545d507458699c4dee40e24f429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:29:3c:91:8b:d9:de:db:5e:89:2e:7b:c7:66:1d:de:a3:
         1d:54:80:77:85:ec:b5:5b:bf:91:5f:6a:07:99:0e:ff:e8:16:
         fe:10:51:6a:48:77:85:80:0b:d0:f6:30:5b:cb:5c:b6:d8:91:
         cd:52:79:6f:fc:db:d9:af:17:eb:41:b6:8e:a9:69:fa:f8:c1:
         c4:d9:71:79:b2:e1:80:85:73:4f:cf:67:24:95:fc:d2:af:e4:
         84:4b:19:89:d1:83:21:e7:70:ec:29:b7:55:b4:bd:a2:a5:2a:
         5a:9b:8f:62:2b:f6:e5:29:7b:cf:e5:fc:b0:71:85:26:fd:16:
         49:a9:5e:ed:f4:ff:92:15:62:5a:1c:b8:c7:4a:8f:b7:87:54:
         0b:9c:83:74:aa:36:4b:b6:85:2b:29:de:7d:02:63:13:45:e7:
         f7:1e:71:de:8a:8d:ff:1c:cf:be:82:b2:77:77:0d:3f:a4:21:
         69:08:f5:1f:f8:37:e5:fc:a6:ca:96:7d:83:e8:07:ef:c6:14:
         ae:02:58:58:22:6a:31:0d:30:52:4e:4d:96:ed:2c:74:8d:95:
         8c:7a:6a:81:f6:f0:f6:c8:13:0d:6e:dc:d8:44:6a:11:4d:48:
         cd:fc:9e:a5:2b:cc:00:d2:8a:47:4a:48:66:44:ae:d8:89:70:
         2d:12:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org