Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/e1e60ff4f7679447c5f1f016662b7ab3fee0e89b.roa
File:                     e1e60ff4f7679447c5f1f016662b7ab3fee0e89b.roa (raw, json)
Hash identifier:          W811TlcTjpcJywB9qrRf9NI0PFMsi9dKswQezu2yRrs=
Subject key identifier:   1F:BA:D7:41:46:99:F3:97:45:3B:0C:F6:9E:D8:BE:70:7E:C9:E6:50
Certificate issuer:       /CN=37891eaab39a53321626b241200bbc4960887f67
Certificate serial:       2828FC
Authority key identifier: 1F:89:B3:12:35:F6:85:3A:92:FD:07:B9:11:D7:1D:11:B2:3A:76:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37891eaab39a53321626b241200bbc4960887f67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/e1e60ff4f7679447c5f1f016662b7ab3fee0e89b.roa
Signing time:             Mon 18 Mar 2024 13:49:31 +0000
ROA not before:           Mon 18 Mar 2024 13:49:31 +0000
ROA not after:            Wed 18 Mar 2026 13:49:31 +0000
asID:                     64101
IP address blocks:        200.33.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2631932 (0x2828fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37891eaab39a53321626b241200bbc4960887f67
        Validity
            Not Before: Mar 18 13:49:31 2024 GMT
            Not After : Mar 18 13:49:31 2026 GMT
        Subject: CN=e1e60ff4f7679447c5f1f016662b7ab3fee0e89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:7a:ab:25:09:e8:4d:9f:23:a9:f8:9a:b8:
                    a8:5d:83:2b:26:3d:fe:5f:3c:3c:6c:68:bb:10:9a:
                    6d:df:45:b7:0c:f3:4d:a2:97:43:81:75:ef:21:f2:
                    ae:52:3f:4a:a2:97:29:34:67:cf:bf:15:89:58:41:
                    6f:7e:ac:97:e2:a3:f6:ba:f7:6e:75:9f:22:04:d7:
                    10:de:90:ea:ef:e4:df:97:00:22:cf:31:a8:95:cb:
                    3a:ba:c3:e2:3d:a0:f1:be:36:d5:b1:07:80:9c:c2:
                    48:10:54:a3:7b:8a:0e:a0:ba:d8:06:3a:f2:3f:82:
                    e6:4a:70:ee:79:e3:b1:38:02:95:7b:ba:8c:82:2a:
                    95:d1:e2:62:84:f6:1b:91:47:46:2a:92:a0:28:83:
                    66:f0:2a:15:9b:28:5a:d1:a1:3f:dd:83:e2:6f:74:
                    47:7a:cb:39:06:fb:54:42:d1:e3:8a:68:8b:83:b2:
                    5c:f5:68:74:09:95:73:ae:a9:bf:94:2c:a2:f6:59:
                    9a:06:21:49:1d:78:29:d3:d3:3d:04:d8:fb:36:f8:
                    ac:33:d6:6d:ab:e1:10:32:08:24:cc:e4:91:0f:70:
                    20:69:8f:ce:a1:c1:7d:7d:5e:95:00:5a:a5:c6:29:
                    ed:41:f9:79:f2:d4:f8:c1:4a:d1:18:a1:b7:d1:8d:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:D7:41:46:99:F3:97:45:3B:0C:F6:9E:D8:BE:70:7E:C9:E6:50
            X509v3 Authority Key Identifier:
                keyid:1F:89:B3:12:35:F6:85:3A:92:FD:07:B9:11:D7:1D:11:B2:3A:76:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37891eaab39a53321626b241200bbc4960887f67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/e1e60ff4f7679447c5f1f016662b7ab3fee0e89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/37891eaab39a53321626b241200bbc4960887f67.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:51:65:6b:c8:07:49:aa:df:c8:7a:be:f5:e8:a5:06:c0:98:
         b3:32:0a:d6:e9:8f:e0:e3:31:05:ce:02:58:ba:8d:ec:44:44:
         0a:6b:42:9a:d0:0c:3f:e4:13:2f:f8:40:74:5a:c1:82:09:67:
         2d:12:79:18:ec:af:49:55:a8:24:51:e3:bf:c3:80:0f:0a:84:
         93:70:dc:2c:b6:32:73:f6:21:1e:ff:5e:cb:17:e6:f0:72:a2:
         05:f3:d1:5e:ed:6e:de:f6:3f:36:80:97:26:34:69:f3:4e:86:
         b8:aa:5b:67:72:b2:c3:f0:72:5f:ee:57:d8:27:79:da:a7:08:
         46:2f:b1:79:f0:f4:3c:57:f0:80:b9:54:5d:39:f0:d3:a2:fb:
         3f:93:58:21:ee:09:27:c2:a9:d6:17:4f:07:f8:4f:45:3e:14:
         1b:5e:c2:bc:73:71:4b:27:20:e7:71:d6:e0:6f:77:56:27:96:
         aa:5b:f3:0e:08:62:12:c8:4a:c8:4d:3e:a9:07:5e:9b:bc:a5:
         19:2d:a6:3d:2b:e7:fa:00:10:f6:83:34:8f:1e:d1:0f:bc:2e:
         fe:a6:4a:d4:c5:83:f8:2a:bc:5f:a0:21:8d:44:3d:b2:c5:bb:
         11:88:7e:a9:29:d8:70:f4:67:1e:81:61:6f:ec:a0:8c:f3:8e:
         23:4b:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org