Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b982700c2b5e1408c7ac8eaca07aec0e83fb7c1e.roa
File:                     b982700c2b5e1408c7ac8eaca07aec0e83fb7c1e.roa (raw, json)
Hash identifier:          ZXzO2TDzkOIzXEY+ReG9i22ppcbKjPyD1TCGEVy/qws=
Subject key identifier:   23:28:9C:E6:EF:29:CF:EB:DD:A8:96:62:A2:83:9F:03:20:79:B6:47
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       27A23B
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b982700c2b5e1408c7ac8eaca07aec0e83fb7c1e.roa
Signing time:             Tue 30 Jan 2024 04:02:43 +0000
ROA not before:           Tue 30 Jan 2024 04:02:39 +0000
ROA not after:            Fri 30 Jan 2026 04:02:39 +0000
asID:                     27735
IP address blocks:        200.27.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597435 (0x27a23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jan 30 04:02:39 2024 GMT
            Not After : Jan 30 04:02:39 2026 GMT
        Subject: CN=b982700c2b5e1408c7ac8eaca07aec0e83fb7c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:80:b0:5d:13:97:36:18:53:de:24:02:8a:
                    16:fe:a0:09:4e:fe:39:c2:d0:03:1b:f3:5a:dc:2a:
                    88:bc:5a:cd:13:5b:e8:12:23:5e:10:e6:99:ba:40:
                    fb:e3:4b:1d:dc:4c:60:b6:3e:9b:10:15:b1:d6:e0:
                    83:1b:93:ac:c8:d1:e9:6a:b9:52:35:6e:8d:8a:b7:
                    75:43:e8:ae:a9:21:5f:b0:df:d9:8f:91:5a:a7:82:
                    b7:e5:bd:7d:52:b1:43:06:17:ba:e7:ad:6e:83:a6:
                    a5:b4:7e:20:ec:f6:50:b1:09:6b:f9:c5:80:c7:05:
                    1c:c0:04:96:73:ce:73:79:9c:0f:f7:a9:ba:e7:52:
                    8d:a3:a7:78:57:1a:c5:51:f3:4a:12:17:25:7f:73:
                    dc:31:9d:48:c1:a6:ba:1a:3c:f7:c8:28:85:5f:3c:
                    f4:a2:dd:b0:4d:c9:6b:55:db:35:8b:aa:05:82:ce:
                    51:ab:08:f3:b8:04:88:d3:f6:08:a6:f4:94:3d:21:
                    85:c6:7c:4b:0d:56:45:c4:3e:0f:02:0e:98:6c:1f:
                    2d:65:c3:dc:ab:35:8e:59:29:ed:2f:76:27:9b:ed:
                    39:3f:a8:8e:46:b7:73:b3:0e:ea:34:e7:b5:78:f8:
                    6a:4f:4c:93:73:de:58:42:a3:7d:80:e6:42:4c:c4:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:9C:E6:EF:29:CF:EB:DD:A8:96:62:A2:83:9F:03:20:79:B6:47
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/b982700c2b5e1408c7ac8eaca07aec0e83fb7c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:be:43:30:f2:2c:72:e2:07:66:8a:5e:08:91:d9:ce:1c:dc:
         d4:d2:3b:8e:47:3a:e3:9f:cd:4f:32:69:2a:f7:b2:b5:e8:11:
         43:89:38:94:f6:e6:be:dc:9a:c1:b1:6e:87:5d:f5:3c:50:d6:
         9c:cc:8e:a7:48:14:02:07:51:d8:57:cc:79:4a:39:bd:7a:de:
         53:fb:da:8d:a3:5d:fc:b7:8b:ca:48:b5:85:73:cb:90:6e:2e:
         d7:d5:83:46:66:c2:2d:e3:d2:04:ff:15:d8:4d:e3:34:98:26:
         a6:75:9a:03:70:4a:dc:4c:56:bd:d1:6b:53:2a:42:0f:a5:06:
         81:eb:4f:f2:d8:0b:9e:5f:a6:78:be:d6:f3:c4:2d:a7:5f:0a:
         79:15:3d:36:81:2a:0c:6b:22:67:54:cb:54:6e:b1:7e:62:5a:
         33:bc:c7:94:4b:3b:11:28:8a:1d:d6:56:48:d8:8c:69:f4:60:
         09:51:c6:df:ef:e8:c3:30:29:11:ee:4b:79:f3:2a:b3:44:72:
         0c:9b:9a:57:10:9f:77:8c:93:71:4a:9e:94:9c:6e:22:a4:a8:
         de:9f:21:49:37:e6:9f:f3:0a:e7:e3:c7:be:43:a0:05:81:c0:
         d1:7d:11:b2:13:a4:9c:33:1f:2f:3b:e7:51:5c:b4:76:50:be:
         ff:61:dd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org