Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/3b45967adfe3872fa127441e389fccb79465af32.roa
File:                     3b45967adfe3872fa127441e389fccb79465af32.roa (raw, json)
Hash identifier:          7/muhMcMy+qLqqaNZhkH2ua7juThGFrHLvYuAXodVKI=
Subject key identifier:   7B:37:98:82:EF:51:74:7D:D9:B9:FC:26:2D:0E:CC:04:39:D4:7F:FA
Certificate issuer:       /CN=fc6a343497b7a26c78a86a19daf6c2065a721822
Certificate serial:       2C7F
Authority key identifier: 97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/3b45967adfe3872fa127441e389fccb79465af32.roa
Signing time:             Mon 30 Oct 2023 17:18:58 +0000
ROA not before:           Mon 30 Oct 2023 17:18:58 +0000
ROA not after:            Thu 30 Oct 2025 17:18:58 +0000
asID:                     273111
IP address blocks:        200.50.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11391 (0x2c7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a343497b7a26c78a86a19daf6c2065a721822
        Validity
            Not Before: Oct 30 17:18:58 2023 GMT
            Not After : Oct 30 17:18:58 2025 GMT
        Subject: CN=3b45967adfe3872fa127441e389fccb79465af32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:82:d2:f6:22:6c:87:3b:a0:58:0f:69:64:
                    59:75:bc:6e:e9:85:e9:35:20:b4:e1:0e:7a:f8:bc:
                    c5:70:3b:bc:2f:3b:a9:d3:27:dd:d7:5f:39:4b:34:
                    b9:f7:29:cd:b2:48:74:4b:29:97:9c:2f:d3:18:86:
                    f5:ed:7f:8c:b2:c7:d8:9f:1c:f9:c2:ed:a4:9c:67:
                    f4:55:28:d9:48:9f:b2:a3:a5:60:22:5a:85:ac:df:
                    a6:e9:81:85:b5:8e:d7:46:07:85:38:d3:5c:9c:1b:
                    6c:6e:5b:cc:02:e4:31:a4:0e:61:4c:4a:7d:15:c4:
                    6d:5f:df:3a:8c:63:34:c5:7c:24:7d:63:95:2f:5c:
                    b5:ab:c7:36:d6:f3:64:d3:43:b0:b2:30:ee:f1:25:
                    aa:cc:7a:e7:d2:9c:7a:73:a4:37:48:8f:de:03:1b:
                    14:44:c6:99:19:32:fa:86:a3:11:68:89:c4:9d:ab:
                    fd:61:4c:47:c5:ac:0e:76:47:2e:a0:21:0a:1f:2e:
                    dc:15:f4:c5:74:34:35:bd:b5:fe:d3:b5:94:ea:d5:
                    0e:bf:a1:b2:f5:29:39:a3:c6:9b:91:1c:0e:e2:5d:
                    de:5e:7f:d6:eb:6f:93:e7:5e:81:a4:2d:6e:8f:fe:
                    68:7e:26:98:e1:19:6b:8b:e0:fb:f8:9f:69:66:13:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:37:98:82:EF:51:74:7D:D9:B9:FC:26:2D:0E:CC:04:39:D4:7F:FA
            X509v3 Authority Key Identifier:
                keyid:97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/3b45967adfe3872fa127441e389fccb79465af32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/fc6a343497b7a26c78a86a19daf6c2065a721822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:27:0e:d9:9a:f9:85:2d:54:19:5c:c7:77:a2:e3:10:7b:
         44:33:37:de:8b:2f:d7:ee:51:69:7c:ff:9f:13:c7:51:d5:d4:
         51:6b:76:5a:50:e0:6e:ed:7c:16:c6:87:d6:14:21:22:1d:d0:
         cd:6b:25:33:8b:04:c0:47:af:f8:d6:70:61:bc:fc:29:3c:19:
         08:09:9b:93:79:ce:f1:3a:b4:1b:0f:9c:3a:1c:d3:73:91:13:
         95:1c:6d:d9:9a:c1:64:26:d8:3a:90:be:27:e9:2d:36:70:44:
         6b:cc:47:45:eb:53:f9:7a:53:36:8e:e2:15:05:6e:95:3f:ef:
         3c:3e:01:58:bf:78:8c:1d:34:9a:67:2c:e7:f0:de:31:56:e4:
         4a:b6:1b:df:a6:ad:d1:04:c1:db:e4:20:9a:b6:d5:ef:f9:06:
         64:68:23:32:a8:c7:80:82:ed:a2:ca:26:39:cb:a3:2f:a3:84:
         04:08:1d:47:54:0f:25:66:dc:36:9b:dc:23:eb:0b:15:cb:e5:
         cf:00:62:5b:13:4b:40:05:b7:ef:31:7e:14:72:05:84:fd:e4:
         26:3d:83:2c:a3:de:cd:eb:1b:81:7a:db:a4:b4:53:6f:17:0d:
         45:5e:cb:bc:a6:9b:19:51:88:13:32:8f:1b:d0:1d:a2:05:ed:
         eb:4f:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org