Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c3179637fc340f795c279d5603a97ba3d343677.roa
File:                     2c3179637fc340f795c279d5603a97ba3d343677.roa (raw, json)
Hash identifier:          EZizgREr/6ZkJ9d0DmSIitM+suNCCrX3V2xiSXr69Nw=
Subject key identifier:   74:77:E4:46:9C:30:17:6B:58:6B:75:E9:B1:FC:66:3E:81:9B:F1:77
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03D60B
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c3179637fc340f795c279d5603a97ba3d343677.roa
Signing time:             Tue 11 Jul 2023 13:28:34 +0000
ROA not before:           Mon 10 Jul 2023 13:28:34 +0000
ROA not after:            Fri 11 Jul 2025 13:28:34 +0000
asID:                     7418
IP address blocks:        200.29.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251403 (0x3d60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:28:34 2023 GMT
            Not After : Jul 11 13:28:34 2025 GMT
        Subject: CN=2c3179637fc340f795c279d5603a97ba3d343677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:8f:ac:42:9f:0a:d2:e3:01:bd:4f:6c:1f:
                    b4:2c:6d:7e:0f:c3:fd:1e:cc:d7:9e:72:84:38:ba:
                    03:57:49:60:e2:ac:b2:de:64:0c:1e:ca:7b:4e:c5:
                    f7:63:63:13:16:10:da:88:03:cf:3e:a3:11:6c:7c:
                    a1:e2:0d:6a:91:6b:6e:7f:f5:f2:d6:e9:d0:a1:16:
                    a9:8b:7b:03:9b:81:95:85:77:83:d0:15:73:e2:a4:
                    64:45:e1:62:13:dc:3d:3c:fa:fc:2e:35:ad:81:a9:
                    47:37:0c:e0:f2:82:f4:85:47:c1:94:85:6c:a8:00:
                    11:b6:67:4a:78:90:2b:28:86:62:46:28:c9:7e:22:
                    aa:40:bf:f6:30:ce:04:ff:0f:9a:ca:16:f9:b4:e8:
                    a3:ff:21:09:2c:95:31:ef:bf:60:a5:06:59:67:b4:
                    f3:da:83:c2:b4:24:21:94:7e:07:2f:6c:92:94:ab:
                    1f:53:58:ee:43:f0:33:0c:3e:45:fe:da:2d:d9:a8:
                    b3:b3:20:77:07:ff:96:91:73:52:29:e8:25:f0:7c:
                    15:00:8d:4e:1b:0d:71:3e:26:9b:62:df:bb:b6:ef:
                    05:9c:60:15:91:52:3a:b0:80:c2:68:fd:2c:03:08:
                    65:51:c6:c5:85:ea:46:50:a4:31:56:71:1d:21:71:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:77:E4:46:9C:30:17:6B:58:6B:75:E9:B1:FC:66:3E:81:9B:F1:77
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c3179637fc340f795c279d5603a97ba3d343677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:5e:f1:be:af:77:9f:b3:f5:24:b7:11:43:dd:a5:b0:d5:29:
         12:bc:06:ad:cc:8c:d0:ed:0b:c7:63:16:2e:5d:44:b3:a3:95:
         90:77:3c:91:77:42:fe:26:03:19:0d:d2:19:4d:d1:2c:43:30:
         a8:f7:a4:90:1a:11:96:ac:24:5f:ee:18:71:c3:dc:69:66:e6:
         87:e6:0e:03:ac:97:25:01:c3:7b:c2:3b:95:1d:e9:93:4e:86:
         7a:df:fa:d2:f0:09:de:8a:76:ed:ec:a8:3f:c7:c7:b0:4d:d2:
         bf:c3:73:8c:d1:67:58:99:0c:19:7d:26:87:2a:ae:9b:11:d3:
         88:f7:9a:08:b4:f1:41:ed:11:ff:99:37:f0:fc:27:b5:81:f2:
         66:3e:6a:1d:08:e1:29:12:d3:d9:c5:68:d3:4d:d5:1e:95:66:
         05:a2:d3:9c:e6:a9:f2:1c:53:15:63:ce:24:3a:64:ae:e6:7a:
         9a:cf:39:e7:de:e6:96:a6:3c:cc:a5:cb:ee:fc:df:89:91:5f:
         92:56:ca:ae:23:b1:c0:4d:de:23:ef:7d:25:8f:a8:3c:86:d4:
         3c:29:5d:41:a2:a6:a3:3d:ff:d2:a6:12:64:bc:ae:80:61:00:
         c5:29:de:56:86:0b:11:19:6b:ea:3e:0c:63:1c:a4:41:7d:17:
         74:bf:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org