Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/65f2b7fefed0f26ea9039c136d234ba3f1eadd29.roa
File:                     65f2b7fefed0f26ea9039c136d234ba3f1eadd29.roa (raw, json)
Hash identifier:          D6iI3I1CycIsDE8xlif+ihkkWyD+JacZn0vXcSZQOSs=
Subject key identifier:   B4:01:81:91:64:AD:D9:B0:53:39:09:19:D1:F5:C5:DF:CC:94:3E:63
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       0D620E
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/65f2b7fefed0f26ea9039c136d234ba3f1eadd29.roa
Signing time:             Wed 24 Mar 2021 14:38:08 +0000
ROA not before:           Wed 24 Mar 2021 14:38:07 +0000
ROA not after:            Tue 24 Mar 2026 14:38:07 +0000
asID:                     52301
IP address blocks:        200.26.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877070 (0xd620e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: Mar 24 14:38:07 2021 GMT
            Not After : Mar 24 14:38:07 2026 GMT
        Subject: CN=65f2b7fefed0f26ea9039c136d234ba3f1eadd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:47:39:07:4c:a6:cf:9a:5e:12:01:27:1d:aa:
                    9d:0c:35:92:81:13:0e:4e:3b:86:ba:3d:15:91:75:
                    6e:d0:a6:22:8b:38:5e:45:20:d4:95:de:d3:20:d1:
                    71:97:57:31:b9:5b:57:af:79:28:c5:61:ea:cf:8c:
                    50:ef:f5:bf:b3:2b:7a:48:6e:fb:70:c4:c2:52:9a:
                    c7:a0:f0:36:a1:21:31:a4:fe:f5:40:4e:85:1f:c1:
                    55:7d:ee:11:8d:46:47:81:6c:b7:b1:db:04:b3:3b:
                    d6:95:c7:8f:6b:0d:09:7b:f3:a0:4a:74:e3:61:b1:
                    c5:d3:e6:fd:7f:a4:63:37:66:73:59:e6:ca:40:52:
                    84:18:79:75:e1:fa:bc:06:11:3e:95:67:c2:64:dd:
                    5c:a1:ed:69:eb:86:b6:4a:eb:a0:c2:ed:e3:41:15:
                    0c:c9:9e:2e:25:e9:36:4e:f8:82:13:27:61:54:8c:
                    d5:f9:80:77:db:13:3e:ab:71:37:2b:66:31:43:17:
                    8a:36:47:f7:ac:5d:df:a4:a0:08:ed:c9:e3:e9:43:
                    4d:c8:6c:59:d0:39:cc:fc:d4:76:57:b8:4a:4a:20:
                    5f:28:70:4c:91:1e:a7:cd:c9:25:cb:17:87:f5:c0:
                    2a:a3:b1:97:10:f4:2f:90:fe:72:62:63:81:2d:3f:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:01:81:91:64:AD:D9:B0:53:39:09:19:D1:F5:C5:DF:CC:94:3E:63
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/65f2b7fefed0f26ea9039c136d234ba3f1eadd29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:d6:41:e2:42:9e:da:2f:ce:fd:70:94:24:40:09:8e:0d:
         ba:a7:0b:f9:10:8a:ba:53:db:cf:ff:1e:a9:7f:4a:b9:2c:11:
         d9:49:62:9a:2f:83:bb:77:fd:ce:3f:93:88:db:7e:aa:44:1a:
         03:fa:ac:c0:d3:89:ef:3f:95:fc:0b:75:e2:e9:98:31:4d:18:
         3e:09:a3:e1:00:2b:22:73:5a:fe:92:2b:dd:7c:d0:0a:7b:56:
         98:a2:df:05:21:52:a5:b9:be:56:9d:07:81:93:c4:e7:8a:b9:
         a6:db:f8:6e:11:b9:42:f5:7a:44:c6:e4:3f:be:0d:47:ec:c3:
         82:25:d1:9e:76:05:5e:bb:d7:8d:36:6b:d0:94:4d:b0:9f:15:
         89:70:cf:a6:95:61:a0:71:c7:58:22:4c:e2:b1:63:e0:bc:c5:
         9b:84:71:95:12:50:c9:50:af:79:40:f4:42:65:52:00:be:bb:
         03:78:21:6b:1e:dc:c1:6a:af:c7:c5:5b:45:b5:d9:c5:ff:51:
         c6:93:49:59:5a:9f:f1:b0:ee:63:7d:5f:f3:6c:53:02:eb:09:
         23:b9:b9:23:c3:98:5c:e0:af:7a:d8:17:66:f3:99:a2:08:0c:
         2d:06:8c:3a:f6:76:ee:00:98:cf:93:4e:fa:20:a5:16:31:19:
         7a:d9:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org