Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/292b89a66f1e936d7769ee5277c9b7eb343b4cf4.roa
File:                     292b89a66f1e936d7769ee5277c9b7eb343b4cf4.roa (raw, json)
Hash identifier:          gR9Kwd8JKcnEk6hg36S8Z7c1U7pC8VVHQr6FhCehvSY=
Subject key identifier:   D7:D9:FB:73:75:89:F4:8C:0F:F9:04:12:4C:00:A2:EB:F7:02:52:88
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03CAE7
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/292b89a66f1e936d7769ee5277c9b7eb343b4cf4.roa
Signing time:             Tue 11 Jul 2023 13:26:41 +0000
ROA not before:           Mon 10 Jul 2023 13:26:41 +0000
ROA not after:            Fri 11 Jul 2025 13:26:41 +0000
asID:                     7418
IP address blocks:        200.29.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248551 (0x3cae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:26:41 2023 GMT
            Not After : Jul 11 13:26:41 2025 GMT
        Subject: CN=292b89a66f1e936d7769ee5277c9b7eb343b4cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:e5:ea:15:ea:db:a6:78:cc:6d:b1:51:c3:
                    e5:0c:d4:a4:f6:5c:8d:ad:e4:d8:60:93:ef:30:80:
                    65:0d:c2:e5:38:b6:0e:11:40:c1:7c:13:16:6f:b1:
                    a7:fd:e3:c4:14:2b:63:af:60:30:aa:c7:44:93:5f:
                    e5:c1:d8:d3:3f:b3:8a:91:df:7e:06:29:12:54:03:
                    54:c5:b6:af:62:0c:28:57:28:9c:6b:36:71:37:75:
                    d1:b0:b5:87:01:67:2e:ce:33:94:ad:74:2e:c3:af:
                    4e:e4:d5:f7:60:26:1e:b7:6b:64:81:31:16:99:a7:
                    58:f0:d2:d6:0d:0a:28:82:8e:e0:98:e5:b4:b2:9d:
                    ee:28:4c:10:89:e6:1c:fc:12:8d:e6:67:eb:0f:c4:
                    dc:db:5d:26:33:89:15:e0:65:e8:80:40:5b:08:ba:
                    bc:c4:8e:04:25:a0:c9:86:bb:32:aa:23:bf:30:cf:
                    18:06:fd:d6:07:89:00:92:98:2b:b8:db:95:91:15:
                    80:72:49:76:ad:ab:78:62:fb:94:9f:4b:c0:48:83:
                    be:3b:f2:c4:d8:f0:fb:75:d7:02:8d:7c:5e:3a:63:
                    b8:3b:4e:f7:4e:62:ed:1b:4d:4e:a1:1b:a4:43:a8:
                    60:df:36:53:52:a1:96:b3:9d:1f:03:69:71:5e:0c:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D9:FB:73:75:89:F4:8C:0F:F9:04:12:4C:00:A2:EB:F7:02:52:88
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/292b89a66f1e936d7769ee5277c9b7eb343b4cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:22:bb:85:61:f7:ba:85:7e:4b:80:87:ce:12:1f:8c:9a:72:
         21:f3:4b:c4:04:8a:f0:10:c0:ff:20:c9:43:d7:2b:1c:06:69:
         95:cf:3a:76:a2:3f:1c:56:0b:d2:a3:c9:9b:ec:6c:b5:e3:43:
         a3:f4:dd:45:1b:93:40:ae:a2:88:1d:3e:79:a5:99:0e:26:bb:
         ae:44:25:aa:29:b8:c5:fd:66:32:3d:21:d3:b9:cb:af:c1:a4:
         4c:e3:2b:21:33:67:db:63:51:df:3b:af:e8:5c:5b:78:9f:d3:
         dd:b7:90:ab:b5:69:29:27:65:b0:09:0e:44:cb:26:1f:75:99:
         c7:ea:2b:c6:41:70:de:ac:e5:76:58:59:aa:bf:7f:58:c5:51:
         82:3d:d6:cc:ae:31:ef:76:76:4b:06:49:2a:5c:92:50:ae:1b:
         66:6e:1a:7e:3d:8f:39:11:25:84:be:69:ca:97:34:b7:7f:e0:
         2e:33:fe:ab:6c:31:8f:9c:3c:05:4d:6e:0b:25:9c:6f:f2:50:
         35:d9:1e:12:1e:3e:45:c8:ff:98:24:90:15:6d:fb:d7:75:9c:
         02:29:22:0e:6c:a1:fc:d8:7d:80:26:c8:a6:a1:1c:57:98:85:
         84:65:6f:7b:1e:35:c4:a5:53:52:b6:6a:25:bf:82:17:0c:73:
         65:0c:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org