Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c25f4f771dd9da8a3918f3158906c8cc01f25b1.roa
File:                     2c25f4f771dd9da8a3918f3158906c8cc01f25b1.roa (raw, json)
Hash identifier:          o3ZAl4m+nk17K0dmvlWpZZGla/zdyrOptFJSNtYKvEk=
Subject key identifier:   21:EA:C9:D5:45:F6:8E:D8:82:C2:9D:5A:7F:B2:49:F2:F4:28:A9:70
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03D881
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c25f4f771dd9da8a3918f3158906c8cc01f25b1.roa
Signing time:             Tue 11 Jul 2023 13:28:57 +0000
ROA not before:           Mon 10 Jul 2023 13:28:57 +0000
ROA not after:            Fri 11 Jul 2025 13:28:57 +0000
asID:                     7418
IP address blocks:        200.29.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252033 (0x3d881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:28:57 2023 GMT
            Not After : Jul 11 13:28:57 2025 GMT
        Subject: CN=2c25f4f771dd9da8a3918f3158906c8cc01f25b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:9c:e4:db:bc:f8:8a:38:a5:8a:25:a7:1f:
                    46:17:d0:32:a4:31:4f:5c:28:8a:20:0f:d0:7d:fa:
                    ea:b1:e7:ff:9c:1e:d4:73:bd:84:b0:51:d8:e8:b2:
                    63:55:c9:82:6b:e1:d6:62:bc:47:28:ab:3c:cb:3e:
                    33:86:12:2e:ab:13:18:a5:3e:3f:77:ba:d2:b1:03:
                    66:b9:43:04:81:76:74:9e:02:d6:2f:3b:bf:63:e8:
                    d1:f0:38:7a:24:cb:2f:72:80:bf:3d:b1:5e:db:aa:
                    5b:2f:67:28:33:85:e8:c7:42:34:51:e6:56:7c:8f:
                    2b:a3:e7:f8:11:12:59:25:1f:e2:90:25:c9:ee:08:
                    e3:3c:31:1a:f8:98:af:b3:c1:aa:26:43:72:0b:c7:
                    e8:e2:49:ba:73:58:3c:8b:bc:f6:42:64:5d:d7:da:
                    6b:6d:03:44:69:83:8b:77:dc:3e:0f:fe:57:fe:4b:
                    47:4a:d9:4b:8e:fc:5a:aa:ad:58:38:0e:8b:90:ed:
                    7e:a9:d7:00:77:08:63:30:e1:4e:93:0e:dc:0f:ed:
                    cf:ae:19:8f:1d:d7:c8:f0:ef:8f:56:ad:26:b7:34:
                    6f:4f:6a:2b:c1:b7:64:31:7b:9f:8a:4c:f3:1b:76:
                    6d:8b:0c:e4:2d:ee:03:3a:60:fa:e2:66:fb:47:8e:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EA:C9:D5:45:F6:8E:D8:82:C2:9D:5A:7F:B2:49:F2:F4:28:A9:70
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/2c25f4f771dd9da8a3918f3158906c8cc01f25b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:86:b5:7e:5d:59:32:a3:0f:99:60:29:b0:ff:41:69:bc:67:
         4a:16:32:48:2a:b8:f3:4b:83:f8:8d:32:12:2f:eb:e8:37:76:
         9b:95:70:2c:9a:96:83:ad:ea:6a:6b:11:ee:cd:48:72:a8:1f:
         b4:29:29:20:2a:6b:e7:90:2a:fd:8f:48:39:8d:bf:d8:d0:92:
         4d:d0:a2:41:ce:5b:eb:be:a9:6b:e1:9a:b3:7a:00:5a:e3:0e:
         ba:14:12:07:09:22:02:7d:23:a6:e2:b3:0b:df:87:11:38:dc:
         fd:25:c1:ac:06:84:b0:c8:15:88:fb:61:69:0b:95:48:5d:3b:
         8f:13:1d:e0:dd:a1:2d:49:b4:e8:0d:a8:12:5b:49:e5:72:1e:
         4e:5c:d7:47:da:d8:40:d5:8f:62:4d:d7:76:d5:9d:65:02:ab:
         80:19:a5:29:5d:d4:d9:c6:82:3c:1e:10:aa:b5:eb:f8:d1:53:
         cf:8f:e4:c7:26:f9:f1:4e:2f:44:71:18:e1:10:a3:64:cf:09:
         99:9f:c3:9f:59:2f:19:f5:d4:c9:7f:3d:d7:d4:5f:00:fe:44:
         6e:93:d7:d7:16:58:e8:df:e7:ba:94:cc:bb:e2:e7:4a:64:67:
         64:68:94:0f:d7:db:1a:60:90:f6:02:c4:d6:78:99:97:f2:db:
         ca:1e:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org