Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/eec073692a96bf07de713a63f6be1e56ad60b108.roa
File:                     eec073692a96bf07de713a63f6be1e56ad60b108.roa (raw, json)
Hash identifier:          mwikg9XiCuRRipEUHRjvOpMFBS8SjIRxcMznRb4Ei4s=
Subject key identifier:   6A:F3:D5:A6:32:35:C4:4D:C6:34:45:DD:7F:A2:4F:1A:63:9D:C2:C6
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       262276
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/eec073692a96bf07de713a63f6be1e56ad60b108.roa
Signing time:             Thu 07 Dec 2023 17:12:10 +0000
ROA not before:           Thu 07 Dec 2023 17:12:09 +0000
ROA not after:            Sun 07 Dec 2025 17:12:09 +0000
asID:                     52363
IP address blocks:        200.61.131.0/24 maxlen: 24
                          200.61.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499190 (0x262276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Dec  7 17:12:09 2023 GMT
            Not After : Dec  7 17:12:09 2025 GMT
        Subject: CN=eec073692a96bf07de713a63f6be1e56ad60b108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:0c:3e:10:d1:db:fb:2c:28:61:22:ef:18:
                    72:f0:d9:48:0e:e7:be:a2:a5:37:42:24:a8:d4:06:
                    83:76:ee:80:09:dc:d6:29:c1:ef:79:00:66:dd:de:
                    20:06:73:5a:45:f5:6b:2a:b9:c4:12:1f:35:71:db:
                    c5:54:3b:31:dd:35:2e:0b:94:2e:b2:98:30:35:ff:
                    c8:c2:28:0b:9c:76:79:29:5b:7e:9f:0b:33:ff:a6:
                    47:ab:b6:a0:41:80:33:39:b2:c8:9a:3d:79:6e:f4:
                    97:6d:d4:c2:8f:98:9f:60:67:8f:19:cf:02:2c:d3:
                    cd:f8:fd:2b:62:2c:5f:e6:07:ae:99:fb:bb:ea:30:
                    ab:5c:35:8e:ea:5e:a3:f4:75:f7:2b:37:fe:ef:a7:
                    fe:e0:00:e9:3d:31:8d:fd:f1:fe:14:42:e6:b0:ae:
                    51:bc:f1:31:20:ae:38:2a:44:d6:17:97:89:df:b5:
                    ca:90:0a:15:f1:8e:85:76:0d:44:8a:2c:2d:d4:44:
                    b7:ca:d6:98:73:34:56:33:f0:94:9c:30:35:03:0a:
                    28:38:80:12:8c:ed:3d:de:e0:9f:1e:18:1b:f9:df:
                    ee:c7:a8:b6:2b:ef:01:65:65:38:18:a8:7a:8a:23:
                    23:eb:83:96:6e:85:a1:fb:7a:c1:95:38:0a:71:bf:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F3:D5:A6:32:35:C4:4D:C6:34:45:DD:7F:A2:4F:1A:63:9D:C2:C6
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/eec073692a96bf07de713a63f6be1e56ad60b108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.131.0/24
                  200.61.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:f6:8f:32:80:15:39:59:d4:2a:49:66:ea:04:85:77:d9:
         35:34:70:7a:66:fe:f5:75:9d:61:90:5b:3f:02:6b:f7:3c:e2:
         0a:f3:65:ed:bb:be:56:f8:d8:14:a0:49:5b:98:ec:8b:a0:97:
         24:20:9d:2d:61:9f:1f:40:e8:ce:9a:48:08:fb:77:f0:21:1c:
         bb:e7:60:f3:5b:14:3b:ff:e7:b0:d3:51:14:28:57:87:f8:66:
         8c:a2:e4:f8:f1:d0:c0:9b:e1:88:9e:49:af:8b:55:f6:f5:9a:
         c5:aa:c8:4e:f3:06:be:81:e7:e5:94:0d:17:d1:87:d9:d5:3f:
         f7:75:4d:72:e8:0b:83:4e:a3:16:31:16:35:df:d6:99:0f:48:
         ee:5d:0a:23:f9:81:aa:02:c4:5e:ac:47:a3:a7:0d:44:2e:24:
         c1:1d:c8:41:66:82:5a:ec:0d:f3:bf:a9:b9:cc:37:2f:c0:3b:
         bb:c2:5c:a9:91:f9:3e:8a:1b:17:49:50:9a:e5:f3:e9:6d:c4:
         a5:fe:68:52:a2:f3:3e:59:cc:0c:d2:6c:07:9c:6f:95:bf:32:
         66:d4:b5:2c:68:1f:3c:44:5a:c6:57:9b:c0:e2:54:8e:00:6b:
         ea:d1:4d:45:8e:02:f8:52:83:32:3c:e0:00:9f:cc:45:f8:17:
         f2:d7:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org