Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/87693e91a6ba782d6eba86cbb013b68061954465.roa
File:                     87693e91a6ba782d6eba86cbb013b68061954465.roa (raw, json)
Hash identifier:          yx+9NjSDlqwr1X6xWFu1BkvwvTAxpRw1/c7lQs1boLM=
Subject key identifier:   B2:08:79:9C:2B:A3:C6:DF:CF:34:D6:61:29:48:73:79:57:AD:06:F0
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03C730
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/87693e91a6ba782d6eba86cbb013b68061954465.roa
Signing time:             Tue 11 Jul 2023 13:26:12 +0000
ROA not before:           Mon 10 Jul 2023 13:26:11 +0000
ROA not after:            Fri 11 Jul 2025 13:26:11 +0000
asID:                     7418
IP address blocks:        200.29.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247600 (0x3c730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:26:11 2023 GMT
            Not After : Jul 11 13:26:11 2025 GMT
        Subject: CN=87693e91a6ba782d6eba86cbb013b68061954465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:8c:db:41:61:03:51:15:be:08:75:0e:9d:
                    ba:da:c6:b7:14:14:f7:35:b8:7a:cb:42:47:9b:8f:
                    77:0a:0a:c6:2e:58:18:66:35:92:60:80:63:f5:1c:
                    0b:ec:92:6e:da:d6:b0:f2:3d:17:a7:4e:30:8d:6e:
                    14:7b:6c:d5:df:98:57:1b:54:10:34:e9:87:be:55:
                    8b:42:9e:c1:67:67:f3:39:c1:e7:6c:42:6b:ad:7a:
                    48:02:10:d6:1a:45:ba:37:bb:1c:61:54:68:32:1a:
                    ed:ec:bd:fd:d8:0c:5b:b9:1f:4c:58:64:42:14:b8:
                    49:d8:e2:b9:b9:f6:10:e9:b7:76:41:82:7d:9b:90:
                    0e:5c:1a:08:07:ed:19:62:bd:d8:a7:ea:ea:24:63:
                    52:fd:68:e8:5f:a0:f7:5f:71:07:40:a2:4f:a3:eb:
                    67:14:7a:41:17:5a:64:33:d0:e1:af:72:50:f9:64:
                    e4:f7:1f:62:4b:e7:ec:81:85:56:98:04:aa:d4:7e:
                    5c:e8:ea:6f:8e:b6:f3:30:ce:20:e4:94:14:13:4b:
                    e0:2d:d3:63:c7:ba:46:54:9e:49:33:f0:a5:93:5d:
                    15:06:de:bf:23:73:9c:db:fe:41:3c:f8:df:a5:f7:
                    51:a3:45:d8:b7:0d:f9:c2:c2:57:d5:0e:08:4c:9a:
                    55:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:08:79:9C:2B:A3:C6:DF:CF:34:D6:61:29:48:73:79:57:AD:06:F0
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/87693e91a6ba782d6eba86cbb013b68061954465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:46:39:4a:0e:a9:f9:e4:e4:af:af:8b:3b:a9:72:bd:1d:c9:
         42:4a:b9:f6:51:7f:7b:d5:36:13:76:92:7d:ad:24:58:23:b7:
         38:c5:ae:f5:6f:78:ca:66:0c:cf:76:3e:cc:8d:b9:f0:69:f9:
         10:70:fd:ee:a3:70:ba:c4:8b:1a:13:59:01:0c:b7:2b:f5:67:
         28:84:1f:e3:7f:3d:3b:57:7a:69:cf:4e:db:a4:bd:62:52:23:
         52:58:28:a6:cd:6d:d7:45:3d:06:6a:b3:ab:7a:38:27:99:a1:
         97:8e:19:a9:e4:4e:b5:2c:bb:1a:c2:ae:0f:f7:a4:33:f7:db:
         6b:46:96:95:30:2c:5d:8b:bd:88:5d:98:55:24:c9:86:1a:1a:
         cc:0d:98:df:27:15:28:99:42:4c:1a:2a:5e:34:b4:39:78:b5:
         c2:a1:75:01:f7:2c:ed:63:b6:1a:64:cc:2e:72:2a:23:fc:98:
         19:0c:c6:ab:8a:4e:7a:b2:94:12:a9:3a:ed:4d:4e:d8:e5:5c:
         ec:62:60:4d:03:23:d1:92:af:9a:db:34:40:fd:42:18:85:24:
         7f:78:3b:20:a6:b3:8f:6f:25:97:37:97:9a:e7:0a:84:95:d6:
         28:b9:ce:80:41:bb:18:ad:0d:05:78:8f:66:24:a9:7a:e9:22:
         16:de:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org