Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/abe0fc77202e588f6d585eb22806befd15bbb521.roa
File:                     abe0fc77202e588f6d585eb22806befd15bbb521.roa (raw, json)
Hash identifier:          Kn+Q4r7mH1qEguniIhnEdrR9NOgmkpdXyk0wkqH+iDg=
Subject key identifier:   62:AE:9F:82:19:C9:1A:A1:89:94:A0:58:34:76:94:11:01:1F:00:52
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       239448
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/abe0fc77202e588f6d585eb22806befd15bbb521.roa
Signing time:             Thu 14 Sep 2023 20:19:28 +0000
ROA not before:           Wed 13 Sep 2023 20:19:21 +0000
ROA not after:            Sun 14 Sep 2025 20:19:21 +0000
asID:                     25773
IP address blocks:        200.91.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2331720 (0x239448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Sep 13 20:19:21 2023 GMT
            Not After : Sep 14 20:19:21 2025 GMT
        Subject: CN=abe0fc77202e588f6d585eb22806befd15bbb521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:48:ed:da:19:08:46:4c:4d:e3:c4:ac:8c:
                    9c:3c:61:dd:cf:3c:cb:be:a1:76:99:77:c1:71:87:
                    76:48:63:ce:d9:33:88:1c:07:7f:fa:ea:21:e6:57:
                    7f:c7:e9:6f:0d:a5:ae:98:09:a8:5f:3d:86:40:0b:
                    11:e0:e0:10:71:9e:2b:17:57:70:2a:0a:2e:0e:fd:
                    90:7f:d0:8b:66:07:c3:3e:44:5a:99:28:c0:82:d9:
                    a5:48:ab:9c:8d:29:99:79:a2:f9:72:52:7a:c0:8f:
                    86:9c:22:a1:09:ab:05:cd:3f:18:4d:98:8e:ca:b8:
                    f0:c8:7d:53:ac:2b:40:d8:22:25:a6:e4:69:ba:93:
                    0a:24:c2:ff:79:cb:d6:bd:5f:1c:c5:93:4d:45:3c:
                    f3:82:f2:11:4e:ac:98:83:25:02:a9:bf:a5:f6:98:
                    ea:9d:40:3c:92:d5:b2:f9:8b:7d:ae:26:e6:ed:3f:
                    37:49:bc:39:59:15:4b:a4:f7:9c:72:11:ca:ac:da:
                    e6:b6:76:10:f1:d6:68:c5:79:30:c1:23:73:d5:c1:
                    40:72:37:23:d3:d0:9d:fd:fb:5e:b8:09:da:69:26:
                    fe:3d:89:b2:bb:34:74:d5:a7:c1:5a:dd:71:32:c7:
                    42:df:62:d9:ec:25:f9:34:95:79:67:a7:cf:3e:6d:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:9F:82:19:C9:1A:A1:89:94:A0:58:34:76:94:11:01:1F:00:52
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/abe0fc77202e588f6d585eb22806befd15bbb521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:2a:2c:1b:3b:09:88:f4:b9:84:af:87:a3:80:68:8d:fa:
         74:fe:49:8a:09:b8:c9:09:f6:df:b0:b4:9d:ed:06:8f:b0:6a:
         04:95:af:be:7a:9e:2f:55:1a:c6:84:4c:c1:8b:dd:13:57:70:
         7f:bb:ad:89:a6:32:fb:70:5b:05:00:f5:5b:4f:f7:58:4d:37:
         1d:1b:12:a5:7e:26:ce:ee:ae:d3:98:62:97:53:19:a6:79:d9:
         af:39:f4:da:a2:4c:36:f9:f8:24:cc:72:30:48:ad:f7:42:eb:
         3e:30:8a:4a:e8:32:20:2b:9e:54:bf:4f:8c:1c:3e:50:5e:f0:
         cf:21:e8:1b:5b:bc:d8:5e:fd:3b:44:f4:07:e9:d3:c6:b2:a9:
         3a:9c:a0:89:76:28:05:1d:7d:a6:f7:27:24:92:a0:b2:73:11:
         57:5e:58:fc:d0:76:51:24:73:de:1a:1c:c0:6b:80:14:2b:f3:
         41:4c:11:7b:8c:20:6c:ea:1a:b4:d2:b5:fb:e0:1a:4e:0a:cf:
         43:0a:16:87:d0:13:87:48:b9:28:bd:9c:fb:df:13:39:ef:ad:
         05:60:ec:d9:6a:13:e5:19:a9:cb:f3:05:b5:fb:53:ff:6b:f5:
         82:bb:32:fa:eb:d9:7c:bd:bc:a4:b9:e5:0e:4d:ae:db:35:42:
         b3:34:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org