Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/2322a5ef96ba81b5e13f01bfd2f642e099e588d0.roa
File:                     2322a5ef96ba81b5e13f01bfd2f642e099e588d0.roa (raw, json)
Hash identifier:          v7IyhPYncFhwpt+pQhcSzUNZ0sKoASYqG60Q9Ut/xmE=
Subject key identifier:   4F:29:99:0D:5A:7A:8E:70:F8:F6:98:B3:60:60:79:A1:1E:53:D6:22
Certificate issuer:       /CN=da0cd30df4491331691a183f5b0a9260b7daadec
Certificate serial:       290AEB
Authority key identifier: 21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/2322a5ef96ba81b5e13f01bfd2f642e099e588d0.roa
Signing time:             Mon 18 Mar 2024 14:12:27 +0000
ROA not before:           Mon 18 Mar 2024 14:12:19 +0000
ROA not after:            Sun 18 Mar 2029 14:12:19 +0000
asID:                     198949
IP address blocks:        200.119.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689771 (0x290aeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0cd30df4491331691a183f5b0a9260b7daadec
        Validity
            Not Before: Mar 18 14:12:19 2024 GMT
            Not After : Mar 18 14:12:19 2029 GMT
        Subject: CN=2322a5ef96ba81b5e13f01bfd2f642e099e588d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:3c:c4:ff:41:4c:ec:3b:99:c2:9c:9d:80:
                    52:35:10:52:92:43:5b:0f:96:f9:44:3a:91:ce:a7:
                    4d:75:b0:d2:af:26:8b:26:64:a9:3f:4c:0a:1c:7f:
                    11:00:c5:98:73:f0:ba:74:e3:29:78:6b:92:40:25:
                    3a:b6:a7:2e:c4:c8:f0:c0:03:81:bc:0b:6c:73:3c:
                    bc:cf:2e:3d:c5:1b:cf:e1:1a:c3:f5:79:b4:81:01:
                    c8:2d:ee:11:9b:ce:45:15:0d:0c:94:82:fd:d7:6b:
                    c5:53:a7:7c:01:9a:e6:76:7b:8e:e6:74:fe:c6:ac:
                    d9:68:1d:e9:fe:e0:37:f1:07:87:a8:3f:06:d0:2c:
                    f8:14:bf:cd:9c:88:96:14:25:39:1f:b7:1a:94:d6:
                    e2:4f:c4:ac:17:eb:a5:ce:0b:bf:e8:89:69:e5:14:
                    c6:87:38:7d:b2:72:a9:b9:00:97:c3:5d:d5:87:3f:
                    4e:c5:9f:b4:21:1c:c8:08:28:8e:45:d8:1b:bc:63:
                    f3:0a:ea:77:e2:a0:dd:21:d6:57:7c:d8:fb:a4:9b:
                    89:34:25:13:4c:30:13:02:a4:26:3b:57:18:20:0a:
                    5b:79:52:05:ce:04:a4:97:15:6d:12:c4:ef:0f:89:
                    8d:2b:29:1e:ab:c9:35:ad:08:0e:3b:96:21:d9:9a:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:29:99:0D:5A:7A:8E:70:F8:F6:98:B3:60:60:79:A1:1E:53:D6:22
            X509v3 Authority Key Identifier:
                keyid:21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/2322a5ef96ba81b5e13f01bfd2f642e099e588d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:76:b8:62:d2:c9:f0:0a:9e:cd:43:37:0a:e9:7f:a0:32:35:
         3e:1f:ae:12:e8:f5:52:c5:41:6d:79:87:a2:2e:e6:55:6a:74:
         d3:98:04:fb:0c:a3:bc:f8:61:93:43:38:ef:83:39:c4:89:a5:
         8b:ad:f1:5f:0e:47:ea:57:d0:e4:88:80:32:31:ea:17:8e:40:
         8e:7d:f4:22:a9:8e:e1:95:82:6f:bf:fe:74:d5:5c:43:48:bd:
         47:92:62:28:c9:fe:5d:b6:87:e6:33:46:1b:2b:5d:27:61:4f:
         3d:67:2b:a4:b9:6e:ec:2f:af:fa:40:7b:39:ca:c5:3e:99:e6:
         0c:17:0e:eb:f1:67:27:de:38:01:f5:25:5d:d0:97:08:dc:02:
         49:16:1f:21:68:a7:6f:6f:96:81:17:24:69:8a:83:21:88:e7:
         02:86:ee:18:e1:cc:9b:64:61:44:3c:5e:28:04:c4:f1:55:87:
         b0:49:89:ef:7c:6f:7c:e9:d4:b5:39:b8:63:fe:08:03:98:15:
         79:d3:ac:d6:03:55:2d:9b:13:06:be:92:25:27:77:68:25:fd:
         ed:7c:6e:a6:d5:9d:b1:83:3b:33:b7:88:c6:0c:71:c6:90:cc:
         a8:c6:0b:db:bc:b4:7b:9a:64:8b:b0:27:7d:75:c7:ee:b3:96:
         ed:92:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org