Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/748d317ac5c7e3da0d1b33034354e1b695c9ecba.roa
File:                     748d317ac5c7e3da0d1b33034354e1b695c9ecba.roa (raw, json)
Hash identifier:          nGbmGJZb+uj+xlf+t8Pe7KniY1exnMddJgHTcRhOi0o=
Subject key identifier:   F8:8E:36:9A:7B:46:0C:8B:5D:8B:F7:42:A4:3C:DD:8F:86:36:8B:85
Certificate issuer:       /CN=fc6a343497b7a26c78a86a19daf6c2065a721822
Certificate serial:       310F
Authority key identifier: 97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/748d317ac5c7e3da0d1b33034354e1b695c9ecba.roa
Signing time:             Mon 30 Oct 2023 17:19:16 +0000
ROA not before:           Mon 30 Oct 2023 17:19:16 +0000
ROA not after:            Thu 30 Oct 2025 17:19:16 +0000
asID:                     273111
IP address blocks:        200.50.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12559 (0x310f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a343497b7a26c78a86a19daf6c2065a721822
        Validity
            Not Before: Oct 30 17:19:16 2023 GMT
            Not After : Oct 30 17:19:16 2025 GMT
        Subject: CN=748d317ac5c7e3da0d1b33034354e1b695c9ecba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:0f:64:cc:64:41:a5:93:00:30:d0:ce:b4:
                    3f:c5:17:53:3f:ed:85:09:f6:2e:85:9c:3e:d4:96:
                    f4:88:26:32:94:77:84:34:81:04:f1:d0:e4:fd:75:
                    3b:e8:e1:5b:a9:8a:93:e2:25:9e:6c:f4:23:ad:0e:
                    64:c3:05:f2:a5:6d:b0:c3:90:27:97:25:d3:5d:6e:
                    f1:4a:eb:5b:a1:de:45:a4:72:d5:34:2c:8a:da:5c:
                    75:ff:35:30:8c:f9:8b:d6:4a:fd:70:63:ac:9e:2b:
                    c1:a1:23:4f:4e:4f:ff:0b:d8:7c:38:10:85:86:47:
                    ee:ba:89:87:d4:34:70:ed:ab:58:6f:29:6b:52:1d:
                    5e:87:ed:23:34:ab:db:a5:5b:38:3d:da:69:96:4f:
                    9a:80:f8:df:ca:32:cd:4a:07:54:1d:45:71:de:d5:
                    9d:b0:5e:2d:50:a1:f2:d9:8a:58:b4:1d:52:d8:f3:
                    54:ac:a3:24:2e:fb:4c:4b:1b:1c:f6:fd:65:b0:f2:
                    53:9b:89:02:20:4b:dd:15:12:17:e9:e3:17:90:1a:
                    3d:37:ff:67:40:3f:a1:39:91:4b:77:e3:17:88:a2:
                    01:34:2b:7e:a8:e4:be:eb:0d:63:f8:ff:a6:52:95:
                    13:92:1d:94:66:63:1d:df:09:d3:7e:f1:11:91:f0:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8E:36:9A:7B:46:0C:8B:5D:8B:F7:42:A4:3C:DD:8F:86:36:8B:85
            X509v3 Authority Key Identifier:
                keyid:97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/748d317ac5c7e3da0d1b33034354e1b695c9ecba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/fc6a343497b7a26c78a86a19daf6c2065a721822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:03:5a:cb:ec:cf:b6:28:8e:8b:b4:e8:be:df:ad:31:f6:38:
         bb:8e:e4:51:68:ac:a8:90:99:9e:3a:bb:8d:57:08:28:fa:97:
         74:a7:5f:8f:e6:3f:b4:ab:68:df:d8:d5:16:1d:56:f1:6f:b2:
         3a:35:1e:06:a3:01:d2:85:f9:b7:f5:2f:ed:b8:b0:c9:45:00:
         a8:d3:af:ea:46:0b:a2:a3:8d:5c:2f:df:9f:28:db:b2:12:f5:
         c2:94:72:aa:56:c8:c0:57:25:de:51:11:8d:2e:d0:c6:36:57:
         cd:2d:a4:59:fa:63:f0:b9:01:df:0b:a0:dd:1d:4d:32:7e:32:
         f0:03:8f:62:4b:e7:f4:b2:14:dd:a9:cc:e8:a7:2d:05:a1:4c:
         fa:15:87:f0:6e:e2:8c:8e:fb:a7:81:04:a8:a1:ac:5c:cf:10:
         e1:7e:72:aa:66:85:98:b0:83:19:58:27:50:f9:44:d7:c8:61:
         b1:7b:af:c9:01:92:00:c8:fa:95:95:62:88:90:b8:99:2e:e1:
         17:1e:72:3d:71:88:bb:8d:08:6d:19:bd:99:f8:17:d2:f2:f3:
         16:cb:bf:71:1d:2f:dd:ac:2b:c6:9b:c7:b0:2d:2f:75:ca:db:
         91:d4:13:bd:f5:fd:8f:62:28:24:93:fa:59:67:f6:b6:2a:2b:
         50:f4:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org