Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/27b5d92afb6c722d373cbefcf7b169736f82dbcb.roa
File:                     27b5d92afb6c722d373cbefcf7b169736f82dbcb.roa (raw, json)
Hash identifier:          fUX64+jnJYiWor9U/5kS6qxsAIe0BuwrzVtPy/n4+HY=
Subject key identifier:   57:7D:CC:7F:38:19:B4:9C:1A:C2:4E:B9:A4:24:43:3B:FA:C5:AE:C5
Certificate issuer:       /CN=5c7013b2a2f9960ed4d3a4a2b977739b9f30979e
Certificate serial:       121001
Authority key identifier: DF:4F:8B:18:CF:F1:0F:F3:AC:86:06:69:B7:36:4B:78:40:56:EA:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/27b5d92afb6c722d373cbefcf7b169736f82dbcb.roa
Signing time:             Wed 12 Apr 2023 08:30:00 +0000
ROA not before:           Tue 11 Apr 2023 08:30:00 +0000
ROA not after:            Thu 10 Apr 2025 08:30:00 +0000
asID:                     271898
IP address blocks:        200.39.60.0/24 maxlen: 24
                          200.39.61.0/24 maxlen: 24
                          200.39.62.0/24 maxlen: 24
                          200.39.63.0/24 maxlen: 24
                          200.39.60.0/22 maxlen: 22
                          2803:4210::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183745 (0x121001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c7013b2a2f9960ed4d3a4a2b977739b9f30979e
        Validity
            Not Before: Apr 11 08:30:00 2023 GMT
            Not After : Apr 10 08:30:00 2025 GMT
        Subject: CN=27b5d92afb6c722d373cbefcf7b169736f82dbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:03:c4:ea:68:e8:c8:fe:c9:62:d9:c2:bf:
                    e3:5a:98:bc:c5:05:4b:fb:30:51:75:89:11:b6:ff:
                    03:61:de:8c:27:0b:cc:50:97:d5:b5:9d:03:99:68:
                    50:6e:3a:c5:ea:ea:88:a7:4d:1f:d4:c5:aa:0b:fe:
                    4a:48:70:eb:a9:04:d7:32:ee:a6:48:2a:40:70:f6:
                    bd:a7:aa:3a:b0:f4:8c:8b:4e:fe:ef:cb:fc:f0:7e:
                    15:31:61:ee:d7:0f:24:03:20:7a:4d:5d:c8:ae:90:
                    6e:c8:36:79:09:c9:0a:a6:8a:0a:16:07:96:f5:46:
                    b3:68:c3:7d:24:cb:3d:8a:ff:21:d3:91:ed:3c:53:
                    69:00:1c:73:d8:05:41:8d:45:16:8c:56:97:5c:5d:
                    43:78:41:b6:20:4b:86:4b:94:96:67:45:ab:9e:2e:
                    7b:a8:bb:fd:ac:6c:d5:74:c0:8c:d8:c7:48:c3:82:
                    05:65:49:ad:14:f2:c2:5f:35:b4:f3:ad:0f:6a:34:
                    8b:99:a6:25:b9:63:c8:9e:fd:78:03:d7:7f:57:5c:
                    b8:ae:b9:27:b1:6f:cb:fe:95:4e:d4:26:e1:d8:ce:
                    7d:25:4c:b2:29:59:bf:2a:d4:bf:89:84:58:5f:c1:
                    b3:68:0a:95:ab:43:23:b6:01:13:84:a1:47:f4:4d:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7D:CC:7F:38:19:B4:9C:1A:C2:4E:B9:A4:24:43:3B:FA:C5:AE:C5
            X509v3 Authority Key Identifier:
                keyid:DF:4F:8B:18:CF:F1:0F:F3:AC:86:06:69:B7:36:4B:78:40:56:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/27b5d92afb6c722d373cbefcf7b169736f82dbcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.60.0/22
                IPv6:
                  2803:4210::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:ef:42:0e:98:d9:8f:4d:83:cb:ac:15:7e:3f:18:b9:18:
         7f:8b:b2:ee:09:21:f9:85:cb:64:8c:1f:0c:ed:17:a0:6b:0b:
         42:ed:cc:3a:ed:78:40:de:5d:c5:dd:02:b7:e3:8b:b6:2c:6f:
         b1:72:77:de:a3:e8:ad:96:01:ac:bc:16:7c:62:df:4f:16:8f:
         74:f5:9e:1c:6e:ba:f5:ba:fa:ab:ce:e1:c3:c7:6b:a0:9b:48:
         ab:f8:02:ae:25:0d:d6:c6:dc:cd:db:fb:b8:52:f6:87:ee:69:
         6f:7f:70:f2:0a:fe:82:19:aa:17:71:cb:cb:07:f6:5e:95:c0:
         b0:d9:34:9b:a8:d4:f3:24:e0:f9:73:8e:29:3a:43:31:6e:f9:
         02:5a:b0:4b:79:40:e0:9d:98:eb:84:8c:bc:fe:7d:18:52:95:
         a4:97:39:1c:34:2c:0e:16:f9:c5:b5:93:bf:52:07:42:e2:3b:
         2d:58:ec:01:7c:cc:c6:42:d9:a2:14:9b:50:b8:42:67:36:6b:
         93:5a:97:ad:f7:71:82:ee:1d:a0:49:f8:76:3f:15:a7:7a:08:
         cf:f4:49:26:80:4a:01:e2:b0:c3:48:0f:ce:4d:00:99:35:ee:
         3e:f3:14:67:06:5a:ed:8b:5f:48:97:d9:17:c5:ea:9e:9e:42:
         fd:25:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org