Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d125ba79d6996c5c6b043ef7e1ae7a8c88c4c9b9.roa
File:                     d125ba79d6996c5c6b043ef7e1ae7a8c88c4c9b9.roa (raw, json)
Hash identifier:          tdyavYnJEityPgBTrpDml/uJBykYi/ikubsuHQWXfCQ=
Subject key identifier:   F7:56:78:BA:93:3E:A7:7D:2D:C4:32:15:9A:DB:37:B6:A8:B6:7C:B8
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       0406E4
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d125ba79d6996c5c6b043ef7e1ae7a8c88c4c9b9.roa
Signing time:             Wed 12 Jul 2023 15:01:58 +0000
ROA not before:           Tue 11 Jul 2023 15:01:58 +0000
ROA not after:            Sat 12 Jul 2025 15:01:58 +0000
asID:                     16629
IP address blocks:        200.112.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263908 (0x406e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:01:58 2023 GMT
            Not After : Jul 12 15:01:58 2025 GMT
        Subject: CN=d125ba79d6996c5c6b043ef7e1ae7a8c88c4c9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:92:71:fa:1b:a9:b2:d6:97:4e:f0:11:78:
                    cc:fc:2c:5e:da:72:8e:b9:9a:e8:37:ce:03:69:c7:
                    fb:98:08:9b:aa:17:a1:89:ad:f5:7d:e1:17:28:d4:
                    54:63:53:2b:9a:00:2e:ff:10:4c:be:6b:00:05:74:
                    ff:cc:88:03:d5:db:6b:c0:14:02:a4:4e:8a:20:9f:
                    6b:67:8f:4c:6e:aa:4c:70:f8:6a:70:6d:95:05:c0:
                    a6:44:d2:17:e5:43:bb:e2:9a:36:4a:f7:1e:3a:1e:
                    8c:0c:d6:a2:8c:d5:ac:ab:30:c6:ca:9d:1f:a9:b0:
                    cc:a8:74:d0:a1:ee:6e:3b:df:79:a1:6f:2d:80:18:
                    39:65:51:74:a0:2c:02:05:b0:01:8d:24:53:73:79:
                    75:ea:4f:08:cf:84:8d:0a:bd:50:c4:c0:ef:ed:e7:
                    ac:ba:76:3d:9e:72:dc:c9:bd:62:d1:dd:9e:eb:87:
                    2e:a2:c8:d8:df:1e:69:3d:c3:c1:3d:a3:ee:b6:4f:
                    70:0b:83:e3:e2:b0:51:ea:cc:74:30:16:31:e3:15:
                    2d:ac:a7:91:da:97:67:89:98:fa:fe:ba:84:3c:8f:
                    27:01:b5:63:79:76:23:e1:c8:0a:ce:4b:5d:d9:5a:
                    5a:2a:0c:53:e7:91:8e:27:16:68:08:21:7e:07:29:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:56:78:BA:93:3E:A7:7D:2D:C4:32:15:9A:DB:37:B6:A8:B6:7C:B8
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d125ba79d6996c5c6b043ef7e1ae7a8c88c4c9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:25:48:53:f8:ee:31:c6:f5:3d:3f:df:99:91:16:7a:bf:
         05:e9:a0:b2:c7:a1:8a:b7:a2:74:fc:4c:b4:7c:97:4e:97:32:
         7d:4b:26:44:cb:96:70:1b:71:29:dc:d2:67:9b:51:a9:a1:9e:
         2e:38:dd:e5:fc:2f:e8:e0:74:c6:60:6f:7d:83:6a:77:08:47:
         6d:58:f6:f3:01:ec:a6:00:f4:ef:18:78:27:48:54:dc:ca:c0:
         89:02:9f:d1:13:2d:91:03:12:b1:6a:ce:30:65:33:a6:00:62:
         14:cc:70:f1:e9:22:5a:e8:46:34:5b:4e:f1:e8:26:95:a2:79:
         3d:29:4b:d5:67:26:d7:77:ad:4a:8d:85:b8:f7:d6:43:38:41:
         11:b5:e7:a8:1a:5d:c0:b9:fe:37:2f:f4:b6:2f:27:af:81:06:
         0b:41:60:c6:f4:fb:cc:63:b6:18:18:d6:c6:28:5f:d1:c4:70:
         c7:b7:7d:6b:64:10:c1:9d:fd:b7:84:cd:09:0e:f2:57:7d:95:
         86:c1:85:40:95:0d:09:f3:ed:3e:a5:66:91:ec:e7:ed:50:3f:
         4e:72:77:9c:8d:fe:ee:cc:1f:b8:51:ce:5c:c4:48:4c:d2:d0:
         3a:57:c8:c6:62:46:c3:c8:41:49:c5:c6:42:40:a0:29:67:04:
         51:25:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org