Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f2e7df259d78702fa8e50c58a45db3118a246fd7.roa
File:                     f2e7df259d78702fa8e50c58a45db3118a246fd7.roa (raw, json)
Hash identifier:          JnX3hkvdkyCJUqzTX/MItUkZ2XoxZ17HuX9A/QYQYcI=
Subject key identifier:   09:61:E6:F6:11:E2:40:0E:8C:3C:EE:F5:64:6D:35:22:CA:68:74:BA
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       05459B
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f2e7df259d78702fa8e50c58a45db3118a246fd7.roa
Signing time:             Wed 09 Aug 2023 17:31:53 +0000
ROA not before:           Tue 08 Aug 2023 17:31:52 +0000
ROA not after:            Sat 09 Aug 2025 17:31:52 +0000
asID:                     7004
IP address blocks:        200.29.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345499 (0x5459b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Aug  8 17:31:52 2023 GMT
            Not After : Aug  9 17:31:52 2025 GMT
        Subject: CN=f2e7df259d78702fa8e50c58a45db3118a246fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:59:28:32:3d:36:13:c7:75:84:6d:c1:ad:
                    6c:17:c3:3d:58:78:ef:12:84:da:54:71:5e:1c:c1:
                    df:cb:ea:ed:64:52:07:e1:ff:19:6d:46:93:12:f3:
                    cd:83:8a:b5:e5:3c:89:25:66:f1:a5:0a:fa:b9:17:
                    4a:7d:9f:71:e1:21:15:0f:8b:dc:15:e2:0b:0a:ec:
                    ac:19:6c:db:0c:c4:1c:d9:22:5b:76:d3:cb:4f:12:
                    e1:91:99:66:e8:f0:f0:df:39:52:8d:18:b2:5d:86:
                    90:19:85:12:d4:96:bd:03:ef:38:ce:b5:fa:29:18:
                    60:d0:93:7e:6b:f3:92:dc:f8:9b:0d:29:05:77:f3:
                    1e:48:85:05:c8:fd:e5:74:fd:05:17:31:04:5e:93:
                    7d:20:e0:3e:fb:75:13:f0:fc:31:3f:ec:24:f2:f3:
                    53:0b:88:17:2e:6a:f1:1c:a9:29:e2:3c:01:4a:67:
                    c5:4f:de:50:66:73:c6:12:a7:b1:7a:ef:95:92:ec:
                    ae:02:5c:09:71:88:c6:31:0a:66:f5:52:3e:d3:7d:
                    ed:0b:f7:e2:76:18:da:c5:de:7b:4f:18:3d:c7:5d:
                    03:bf:40:21:3e:ab:8b:d6:f8:49:bd:1d:ff:d1:7d:
                    87:97:11:fe:4e:fa:fa:de:a5:69:5b:02:b7:aa:c3:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:61:E6:F6:11:E2:40:0E:8C:3C:EE:F5:64:6D:35:22:CA:68:74:BA
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f2e7df259d78702fa8e50c58a45db3118a246fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:a1:46:9b:7a:2e:f5:f6:7a:ed:8e:75:ec:71:8c:0e:46:a1:
         fe:3b:3b:fc:34:e5:79:e4:26:ae:73:63:d2:9c:c6:63:19:2a:
         3b:5e:47:83:f6:b9:b6:b2:dc:d6:d1:5f:3e:ae:f6:e3:97:09:
         24:28:c3:34:00:05:06:93:22:d7:0c:ad:91:88:20:cc:c0:04:
         aa:7c:52:94:1d:cf:15:db:18:04:b2:c1:9c:40:d0:b5:6f:26:
         9c:45:18:5c:e2:ad:70:80:96:3d:f6:20:fc:dd:05:a1:32:d0:
         d5:1a:91:f6:79:35:5d:71:c4:5b:ee:0b:38:1c:f8:69:12:d5:
         62:5e:82:03:c7:e4:83:40:c0:56:12:24:8b:77:6a:c6:3d:e4:
         ae:70:0b:67:33:16:95:c0:ad:1d:67:fe:7f:93:3d:5a:0e:48:
         59:3c:c4:d2:cc:93:02:c9:a6:5a:4a:b5:23:27:44:a4:f3:b7:
         90:63:37:e1:28:6e:ea:97:b5:aa:23:0f:22:fc:87:27:b3:d8:
         46:8e:70:4f:64:6a:c0:a4:66:60:d2:9b:bd:2c:f0:05:cc:10:
         70:81:1e:3c:9b:71:59:01:09:3a:45:ab:74:24:48:7c:5e:1d:
         30:23:cf:cb:ac:7c:d7:68:64:de:62:13:49:60:6e:71:16:c9:
         4b:61:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org