Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/b60a720408c3798d91ec86168d19be60746c6590.roa
File:                     b60a720408c3798d91ec86168d19be60746c6590.roa (raw, json)
Hash identifier:          xXh8qYuT1XexuqS45/PmLex6mDgzSgOuFNmojG9Mr+M=
Subject key identifier:   CA:7B:A8:6F:79:7C:D3:DA:7D:1D:40:02:8C:06:90:F1:13:E6:9A:F5
Certificate issuer:       /CN=07c5dda587eb5b6e1e6a7dec2c035772d8503e12
Certificate serial:       222E42
Authority key identifier: C9:07:2B:7E:CE:38:83:76:0B:29:28:73:AB:2C:50:1C:07:AE:97:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/b60a720408c3798d91ec86168d19be60746c6590.roa
Signing time:             Mon 11 Sep 2023 19:34:21 +0000
ROA not before:           Sun 10 Sep 2023 19:34:21 +0000
ROA not after:            Thu 11 Sep 2025 19:34:21 +0000
asID:                     10617
IP address blocks:        200.59.64.0/18 maxlen: 24
                          201.221.96.0/20 maxlen: 24
                          216.244.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240066 (0x222e42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c5dda587eb5b6e1e6a7dec2c035772d8503e12
        Validity
            Not Before: Sep 10 19:34:21 2023 GMT
            Not After : Sep 11 19:34:21 2025 GMT
        Subject: CN=b60a720408c3798d91ec86168d19be60746c6590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:e8:c3:06:19:39:88:19:45:6e:a9:df:00:
                    c3:d7:7c:c2:be:60:64:a9:1c:8c:0f:74:31:5d:76:
                    6a:c1:92:00:d1:a5:60:22:6b:3c:80:6b:5c:5f:f9:
                    43:bb:78:54:7d:a9:01:ac:5e:a4:c5:80:e4:df:99:
                    ac:5c:a8:70:23:7a:8b:ac:99:ac:ef:25:c5:29:38:
                    67:02:90:1b:2b:44:e0:c1:29:bc:2b:9b:b0:aa:9e:
                    74:e1:4a:30:80:04:de:4c:f6:7c:92:dd:cd:22:f8:
                    1f:41:4c:ac:19:96:79:4d:6e:36:fb:6b:c4:9c:1b:
                    c6:ae:4e:74:3a:a4:9b:ab:3a:05:c2:9e:83:4b:b0:
                    e7:e7:ca:22:fa:d1:36:a9:36:9b:63:45:ee:f2:2b:
                    58:c9:96:86:93:eb:af:bc:52:97:53:0b:89:2b:10:
                    21:57:4f:42:2a:5b:44:08:3c:6c:23:e1:12:1c:02:
                    23:22:96:05:72:40:eb:37:fb:49:59:1a:a9:d6:3b:
                    f2:2f:6e:1c:73:7a:17:c2:e9:94:4c:9a:7a:2c:02:
                    4c:0c:4d:21:2b:50:a6:fc:10:b3:05:b8:c7:c8:7f:
                    b5:40:35:70:34:7f:3d:34:17:9d:3f:a5:ff:7a:94:
                    ba:29:3c:00:22:08:bd:a0:f8:ff:01:cd:c3:46:f2:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7B:A8:6F:79:7C:D3:DA:7D:1D:40:02:8C:06:90:F1:13:E6:9A:F5
            X509v3 Authority Key Identifier:
                keyid:C9:07:2B:7E:CE:38:83:76:0B:29:28:73:AB:2C:50:1C:07:AE:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/b60a720408c3798d91ec86168d19be60746c6590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.64.0/18
                  201.221.96.0/20
                  216.244.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:0e:62:32:be:8b:e5:7d:9b:b1:69:76:8f:54:8f:df:48:
         46:b8:2a:6c:f7:5b:6b:c1:ab:d4:58:e9:7c:e8:f4:17:23:b1:
         59:83:4a:ca:86:66:f1:3c:7b:e8:9a:45:82:77:3b:53:69:f8:
         8f:d4:a1:dc:32:f5:5c:50:b0:62:e2:24:41:1f:a3:3b:21:b8:
         6a:ff:47:8a:a2:03:bc:10:da:61:11:b4:e7:20:0d:6f:04:2b:
         0d:0b:32:06:dd:fd:c0:b6:e9:52:1b:42:0d:18:ef:f0:38:c3:
         43:e7:cf:f0:e8:27:44:59:89:29:58:36:64:54:da:42:f9:de:
         7e:3d:e2:c0:1d:f3:5b:aa:89:3c:f3:3f:2a:59:4b:e7:90:b3:
         c7:ce:87:f9:b8:3e:07:6b:2c:c2:7a:3d:b5:95:eb:d6:c0:6c:
         d1:84:85:6d:15:65:70:7e:bf:d8:ee:42:97:ab:6f:92:87:ab:
         ef:a1:4c:8f:65:6a:65:a1:67:95:74:4b:42:cc:88:c8:22:c3:
         47:f5:86:b7:3b:1e:15:d8:1f:00:23:5e:5d:da:95:72:63:ed:
         a1:88:ce:07:68:da:06:11:ed:d7:c5:06:cd:9d:26:a8:52:39:
         c0:fd:1c:92:55:3e:ea:93:fd:46:59:22:53:1a:a3:01:bc:61:
         41:64:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org