Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/55e1e030245c70b150305302f308db193cafb31d.roa
File:                     55e1e030245c70b150305302f308db193cafb31d.roa (raw, json)
Hash identifier:          ZEjEC0AH3Gp3THs7qoqhqcr8ZNWztgjoDXGehOXtBT8=
Subject key identifier:   E8:E4:1D:A4:D6:77:B2:32:0B:5A:69:20:B9:66:98:E7:D3:8B:07:C3
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       223FF6
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/55e1e030245c70b150305302f308db193cafb31d.roa
Signing time:             Tue 04 Jul 2023 08:30:14 +0000
ROA not before:           Mon 03 Jul 2023 08:30:14 +0000
ROA not after:            Wed 02 Jul 2025 08:30:14 +0000
asID:                     25718
IP address blocks:        200.27.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244598 (0x223ff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jul  3 08:30:14 2023 GMT
            Not After : Jul  2 08:30:14 2025 GMT
        Subject: CN=55e1e030245c70b150305302f308db193cafb31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:e7:34:55:5c:37:77:ad:ba:3e:f7:5d:4f:
                    19:c9:21:26:dd:d7:24:9a:fb:b4:08:c0:21:7b:2d:
                    d9:58:72:dd:f7:79:70:b0:6d:9b:52:fc:44:14:72:
                    2d:93:78:1c:24:ec:fe:b8:12:cb:5a:99:ec:b4:e7:
                    aa:11:60:ba:28:89:a5:b2:fd:0c:e2:e0:1b:42:e5:
                    47:bd:54:5f:06:22:60:19:0c:49:1e:e8:46:08:a7:
                    cb:c4:8b:29:a7:3a:54:6a:ba:0b:d9:d1:1b:0d:73:
                    51:98:e0:c0:bb:e2:97:be:6a:dc:41:07:3c:34:79:
                    44:9a:6d:1f:1f:11:45:a8:92:84:48:79:5d:c5:7c:
                    4b:31:6f:4e:58:d0:fa:6e:7a:71:13:7c:65:c9:74:
                    a8:7f:ea:5a:d5:ca:98:b7:09:cc:4f:e7:67:eb:72:
                    d5:1b:8d:de:22:7a:e3:18:69:80:df:3e:fc:2f:e2:
                    25:4c:a5:85:99:39:e6:63:e0:5c:a6:d7:56:d3:b9:
                    6d:78:55:72:cc:a7:94:8a:b6:d8:0b:51:4d:a7:55:
                    0f:67:41:cc:4f:89:54:fe:fb:f8:65:91:73:b6:a5:
                    6d:a7:e3:45:e5:98:e7:39:03:e7:2f:eb:90:4b:f9:
                    2a:ba:2a:0a:c2:a3:19:e9:82:5d:50:13:85:ea:b2:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E4:1D:A4:D6:77:B2:32:0B:5A:69:20:B9:66:98:E7:D3:8B:07:C3
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/55e1e030245c70b150305302f308db193cafb31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:65:51:97:41:55:de:f7:7c:a2:2c:d1:23:44:01:b8:b4:09:
         80:cd:e6:ea:fa:72:c3:29:5a:9d:56:7f:32:47:59:89:40:e6:
         45:9b:e7:39:fd:fd:3e:f0:93:74:e0:fc:6f:a6:02:37:d3:fe:
         76:11:bd:ec:8f:fa:c8:a7:66:ac:dc:2f:a2:a6:4c:22:fe:e1:
         a4:16:b3:6e:98:29:f0:1e:b0:a1:08:3c:4b:38:58:43:78:95:
         53:0d:8e:ee:20:cf:c7:2c:70:f8:95:33:87:7e:79:31:86:a9:
         7c:4c:39:df:d8:10:ba:2a:d4:11:d1:18:97:18:59:c7:19:2a:
         7d:2a:09:de:5c:7c:51:dd:f5:30:8b:0a:c6:ed:3b:be:b1:dd:
         10:d7:33:20:2e:d5:76:44:bc:58:22:c0:ba:1a:e1:ed:1d:2d:
         8a:84:af:92:6f:8b:6a:90:c9:f1:5b:63:ac:52:4a:7a:e5:54:
         fa:01:78:6a:09:7b:84:ae:ce:eb:5f:7c:f6:8e:30:87:ca:58:
         77:50:05:a7:47:d4:9a:34:a4:66:f7:b7:59:69:49:7f:58:05:
         02:72:f1:cc:eb:ee:a4:76:46:d0:85:67:43:11:b7:7f:53:2a:
         ae:93:ae:fe:dd:1e:89:04:6c:0e:a6:50:1b:43:41:18:c7:11:
         4e:22:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org