Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/7b9daa290b6153db498d4b0f8f5244e894a4c3d8.roa
File:                     7b9daa290b6153db498d4b0f8f5244e894a4c3d8.roa (raw, json)
Hash identifier:          KClKvYgRT9Y7qldVTh27cwALaqtHsox6EcYmPqTcLoM=
Subject key identifier:   8A:11:F1:84:53:C3:BF:C0:BD:98:0B:D8:2A:88:E9:85:B9:C2:AF:06
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       0EAC41
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/7b9daa290b6153db498d4b0f8f5244e894a4c3d8.roa
Signing time:             Tue 11 May 2021 21:57:24 +0000
ROA not before:           Tue 11 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     271874
IP address blocks:        200.24.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961601 (0xeac41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: May 11 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=7b9daa290b6153db498d4b0f8f5244e894a4c3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:1b:d2:ad:93:39:dd:b5:5d:e8:33:49:eb:
                    45:66:87:4a:ca:60:cd:5c:6f:34:0a:88:6f:80:6e:
                    85:7e:12:8d:95:78:27:3e:c0:57:ec:91:05:b4:d6:
                    3f:7e:18:ee:6a:07:1e:03:5d:5e:5b:c5:96:02:93:
                    7c:bc:85:1e:41:ef:70:e0:75:61:e1:2d:f2:9a:33:
                    fc:4f:a3:ef:d8:11:d9:cf:f7:24:1f:75:10:b3:4c:
                    fc:09:d6:c4:7c:a4:71:23:f8:78:34:55:a1:6a:f8:
                    f8:99:a0:67:ee:22:8c:66:d9:21:67:bc:78:ef:b4:
                    62:89:22:50:dc:e6:79:cb:50:30:f5:69:6e:dc:b5:
                    2a:8c:55:29:99:e3:ee:cf:7e:32:7b:08:f4:b0:0e:
                    f6:af:5c:11:c9:41:c7:a8:75:45:d3:c4:a7:2c:7b:
                    41:74:5b:be:4b:ac:f0:c4:ad:69:97:71:31:86:ba:
                    6d:00:a2:dd:12:23:a4:a3:ca:c0:92:f6:18:74:61:
                    3e:f2:73:51:6e:6c:1f:55:2a:84:eb:4a:8c:3d:ca:
                    b5:a6:c6:07:88:25:d1:0f:31:94:2c:a6:26:eb:88:
                    55:7d:31:e9:4d:cb:5c:32:d2:32:2b:f4:06:a2:93:
                    ac:49:cb:a3:fa:9d:8f:43:bb:6a:ef:09:aa:cd:37:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:11:F1:84:53:C3:BF:C0:BD:98:0B:D8:2A:88:E9:85:B9:C2:AF:06
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/7b9daa290b6153db498d4b0f8f5244e894a4c3d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:56:c2:35:c7:61:15:ca:98:4e:e5:45:aa:51:a7:9b:d5:ae:
         15:ac:fa:54:5b:53:9f:ff:9a:79:74:89:f4:2a:68:46:68:25:
         fd:a2:97:56:75:36:e6:82:0e:b5:49:64:39:d7:b6:01:5e:5a:
         25:c8:4f:15:ca:01:02:19:9a:47:29:3c:2e:73:75:37:87:70:
         f1:85:5c:9d:ef:9d:71:03:7f:67:8f:1d:2f:e1:c1:ae:3f:26:
         b0:66:76:e1:e9:80:75:93:fb:53:21:6c:36:82:eb:be:be:89:
         10:34:e4:a5:18:7c:c8:95:d4:20:3b:93:d6:e4:5e:0c:91:78:
         d8:b5:d1:9f:44:42:58:d7:9f:8a:7a:9b:aa:34:5f:5d:54:a6:
         37:84:eb:cc:52:9b:a1:ae:2b:ca:5c:7b:7e:a2:1e:b6:c0:24:
         d4:d1:4a:3f:a7:a1:09:3b:bd:99:75:21:38:5e:5b:24:3a:21:
         fb:08:1b:16:cf:6d:3f:a6:3d:ba:af:69:42:cb:4f:7a:0d:68:
         6f:57:75:47:72:41:0b:b1:0c:ab:e1:27:ee:08:c9:7f:a4:87:
         53:44:bc:e7:62:a1:bb:8a:77:e2:ea:d8:bd:eb:b0:7e:c4:08:
         0d:4f:c5:7b:44:6c:bb:b0:2c:88:b2:5c:d2:59:e1:39:08:61:
         e6:e1:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org