Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/90277f3bc3b333902da6cc583fb922970ea13b14.roa
File:                     90277f3bc3b333902da6cc583fb922970ea13b14.roa (raw, json)
Hash identifier:          m/gnVSAQ6njLkAxKbpVFL5YMxaBEWQwP6lTMpiSt+aM=
Subject key identifier:   F8:04:24:9E:1C:8C:17:24:24:DC:E1:EB:4D:B4:E4:07:AB:07:67:58
Certificate issuer:       /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial:       1F78AB
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/90277f3bc3b333902da6cc583fb922970ea13b14.roa
Signing time:             Mon 11 Dec 2023 19:00:30 +0000
ROA not before:           Mon 11 Dec 2023 19:00:30 +0000
ROA not after:            Thu 11 Dec 2025 19:00:30 +0000
asID:                     273045
IP address blocks:        200.107.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062507 (0x1f78ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
        Validity
            Not Before: Dec 11 19:00:30 2023 GMT
            Not After : Dec 11 19:00:30 2025 GMT
        Subject: CN=90277f3bc3b333902da6cc583fb922970ea13b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a7:d6:63:1e:18:91:51:57:e3:4b:5f:b0:2b:
                    7f:aa:3d:b5:37:fe:dd:70:4e:c0:31:ca:7f:29:e8:
                    0a:a8:01:2a:db:9b:49:92:2a:9f:04:59:db:00:a9:
                    46:2a:3e:44:59:8b:b8:cb:5e:ae:63:b7:3d:70:50:
                    33:c7:04:fd:ef:0d:b2:d4:c1:f4:55:15:94:6c:d1:
                    33:3a:8a:64:9f:c5:e1:66:57:56:a4:2f:fa:7b:67:
                    29:d2:00:f4:21:b9:09:98:a6:0e:da:ef:81:0d:6f:
                    21:23:c1:59:cb:06:89:9e:60:31:b0:f8:0a:b0:69:
                    f1:e1:ce:44:85:a1:d9:63:0c:00:a2:0e:f0:aa:db:
                    16:d0:4e:46:21:f7:3c:89:75:b4:6e:2b:c3:c8:09:
                    5c:10:a7:4a:a1:5f:69:ae:25:30:2c:23:a5:2e:22:
                    98:0b:fa:60:a7:4b:c5:53:48:6e:6c:41:fe:ed:02:
                    32:f4:37:f2:9f:eb:a4:c8:ea:eb:57:b4:14:7f:d3:
                    26:dc:6a:05:cc:0a:2e:ef:f2:47:53:40:42:c0:70:
                    bd:3a:d3:dc:4e:97:f2:c5:17:ed:b3:f8:7a:9f:ae:
                    06:fe:3a:2e:fd:65:bb:cc:55:63:88:17:3b:2b:bf:
                    9a:ae:70:d2:14:f7:19:bc:ce:af:32:2e:e9:f7:53:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:04:24:9E:1C:8C:17:24:24:DC:E1:EB:4D:B4:E4:07:AB:07:67:58
            X509v3 Authority Key Identifier:
                keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/90277f3bc3b333902da6cc583fb922970ea13b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:14:2c:97:85:c4:8c:47:46:4b:10:c1:45:09:92:ef:ac:
         2e:3d:54:3d:7a:99:13:43:23:7e:11:9b:00:8b:86:f5:4e:89:
         63:53:66:ed:59:47:e0:50:d6:2b:26:f9:e5:1e:d0:4e:30:2a:
         d2:b6:39:bc:fc:a4:be:c2:09:a2:20:09:1c:ee:c4:b3:e2:80:
         82:99:72:2b:b3:ea:37:c9:b7:6b:f7:b4:2a:03:78:ed:8d:40:
         81:8c:5a:64:0e:e7:3e:72:45:db:9e:20:25:dc:1d:8d:53:82:
         10:66:90:97:5c:1b:ad:53:5a:be:30:e4:00:ec:32:02:0d:cd:
         ae:a5:fe:65:7c:40:d0:96:23:ad:1f:6c:e2:33:dd:90:d6:e9:
         83:cc:ec:0b:45:d9:6a:a9:2f:54:93:ee:d1:81:19:c0:5a:c3:
         6c:e2:e5:0e:88:68:2c:57:fa:27:8f:c7:97:c1:55:80:49:b1:
         63:8a:81:13:03:aa:e2:5b:e1:02:fe:62:6c:6f:71:9d:ef:41:
         61:30:63:ca:d4:4c:42:e3:97:39:03:95:9b:86:4e:f8:67:45:
         37:f0:f1:09:4d:dc:f2:63:41:22:98:b1:d3:0e:42:ef:cc:ef:
         f2:e0:e5:32:15:47:d8:36:c5:04:94:43:aa:b4:c8:61:8b:66:
         f6:e1:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org