Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/63caec227565e4b768e8656b8e78877168eba026.roa
File:                     63caec227565e4b768e8656b8e78877168eba026.roa (raw, json)
Hash identifier:          q6YLiEy/1OiUqz+SPzKZmkWp4+rgyzpxTL3eDFz8cUE=
Subject key identifier:   7A:71:91:29:D1:38:19:A7:9F:57:C9:49:B6:FD:A3:6E:51:79:D2:E2
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03DB65
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/63caec227565e4b768e8656b8e78877168eba026.roa
Signing time:             Tue 11 Jul 2023 13:29:33 +0000
ROA not before:           Mon 10 Jul 2023 13:29:33 +0000
ROA not after:            Fri 11 Jul 2025 13:29:33 +0000
asID:                     7418
IP address blocks:        200.29.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252773 (0x3db65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:29:33 2023 GMT
            Not After : Jul 11 13:29:33 2025 GMT
        Subject: CN=63caec227565e4b768e8656b8e78877168eba026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:ac:fb:c7:22:c2:d7:54:4d:b2:a9:a9:34:
                    76:45:76:e5:e9:35:a7:09:ac:86:82:db:dd:87:64:
                    49:58:76:8b:c9:e5:7e:cf:85:11:91:13:e5:e0:0e:
                    f6:4b:2f:4d:1e:19:b9:69:e3:10:c4:75:ab:2a:bc:
                    d9:45:79:f6:5d:b7:b3:04:29:60:df:33:02:64:ac:
                    69:93:82:f0:6b:7d:4b:02:76:fd:18:88:f7:c3:f0:
                    45:8b:68:ad:1f:48:74:7e:72:2e:3a:ba:fd:d8:a5:
                    47:73:3e:b4:d7:39:34:b8:3f:4e:0b:06:d6:9e:af:
                    3f:99:df:cf:df:c1:71:fe:f3:55:6b:7e:46:79:47:
                    7d:30:fd:9d:af:33:e0:93:7f:d6:a0:34:1b:16:2d:
                    d5:d6:cd:0a:d3:b4:a1:78:9e:b0:9e:50:f5:29:dc:
                    db:7e:4b:81:83:21:a2:64:43:ca:76:d2:f7:38:ed:
                    93:1f:ad:4e:17:87:a8:b7:fe:85:31:a9:01:34:c2:
                    21:13:ad:a7:87:75:d7:20:5f:df:24:3d:f1:45:91:
                    3a:b7:e6:60:7e:b6:93:e6:d9:0d:95:32:37:1e:03:
                    04:cd:56:0f:02:85:3e:ba:a4:d6:f2:5d:28:c3:e1:
                    34:a4:6c:d2:21:6e:57:b2:bd:db:33:5b:98:c8:40:
                    8a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:71:91:29:D1:38:19:A7:9F:57:C9:49:B6:FD:A3:6E:51:79:D2:E2
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/63caec227565e4b768e8656b8e78877168eba026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:11:e7:ae:09:a1:b5:b6:9d:8d:a7:a3:cd:3f:6b:6e:34:
         c4:66:cc:ab:0e:77:9d:af:3c:e9:2e:d0:ca:de:68:2c:25:05:
         9a:36:3a:fe:85:d9:a0:16:54:7c:c0:4c:63:42:08:65:85:ce:
         1b:20:03:a2:ea:d5:66:62:31:bf:e2:f4:b5:54:ca:73:63:29:
         7d:6d:00:1e:70:a6:3f:a9:c1:42:a6:4e:b0:06:33:23:a9:03:
         f3:76:2c:8a:a0:63:d7:cf:8c:4f:9d:94:ca:c0:39:66:a2:cb:
         f3:98:75:42:0d:d8:04:f4:08:02:7e:36:db:dd:88:b6:20:17:
         3d:0f:37:ee:13:f5:cf:9b:d5:81:5d:9d:b9:77:60:93:82:27:
         75:b4:fe:46:57:9e:1a:b4:02:44:fb:23:29:10:20:be:cd:d5:
         0e:8f:dc:97:f2:64:0f:b1:2a:4a:98:9c:60:1e:83:28:f6:04:
         c4:8b:0a:a6:d2:6a:83:97:57:9f:a8:90:1c:75:14:67:04:97:
         1c:0a:da:f6:59:fe:29:04:04:ec:0a:bd:4b:04:c2:67:91:36:
         48:8a:91:91:24:c9:7d:01:05:f6:4f:f9:6a:13:ef:7a:44:ad:
         79:40:88:ff:8d:87:25:a4:d3:f7:8d:65:d7:2e:36:cd:36:92:
         c6:2a:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org