Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0b26831c9c6ab6406ab194690e4df366b8e18ef6.roa
File:                     0b26831c9c6ab6406ab194690e4df366b8e18ef6.roa (raw, json)
Hash identifier:          7Wn9HmmTb5Ibw4zHm6ch48eCixY4FD4L1vUoLHjNeJU=
Subject key identifier:   34:26:36:86:D5:AF:DB:EA:BB:F1:2C:93:0A:9A:E6:03:A7:16:21:37
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       048E39
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0b26831c9c6ab6406ab194690e4df366b8e18ef6.roa
Signing time:             Tue 18 Jul 2023 19:38:37 +0000
ROA not before:           Mon 17 Jul 2023 19:38:37 +0000
ROA not after:            Fri 18 Jul 2025 19:38:37 +0000
asID:                     7004
IP address blocks:        200.28.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298553 (0x48e39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 17 19:38:37 2023 GMT
            Not After : Jul 18 19:38:37 2025 GMT
        Subject: CN=0b26831c9c6ab6406ab194690e4df366b8e18ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8b:84:75:e0:49:1e:11:47:ff:92:d1:53:4f:
                    da:11:c4:58:b1:10:32:ba:8c:97:23:2a:13:82:27:
                    82:ba:99:0e:73:66:c3:eb:c4:4a:8d:ce:78:b5:ff:
                    1e:93:32:02:dc:8e:32:d5:0d:79:cb:27:ff:9b:ce:
                    20:70:fd:b7:64:6c:f2:cc:e0:81:b6:8e:98:78:e0:
                    9e:9b:6e:5e:00:f4:15:8f:3b:7d:94:eb:18:86:1d:
                    c5:c9:1e:9e:7d:02:28:07:91:55:80:e1:9e:36:ed:
                    79:a1:14:6c:43:75:ba:85:09:6d:aa:3b:3b:3b:4c:
                    9e:1d:f3:97:0b:67:1c:44:ab:7c:93:51:6b:de:fb:
                    3b:ac:be:72:2e:98:4d:b0:ef:78:08:9e:e7:de:e8:
                    65:22:e4:5d:9f:5d:ba:dd:fa:aa:00:26:f0:06:01:
                    cf:28:c5:72:46:4c:3d:87:fa:b6:1f:c5:80:23:e3:
                    45:07:a4:5d:e5:1f:c3:1d:73:cb:21:00:cf:49:68:
                    45:93:bb:b0:59:14:1f:13:f7:e5:58:a1:66:f0:60:
                    45:94:a5:70:16:9a:dc:82:2d:7f:94:ed:eb:5d:46:
                    50:14:80:a6:00:a0:e6:45:73:8a:df:c8:cd:c0:9a:
                    25:8d:15:a0:26:0d:be:03:96:88:09:87:e1:b7:06:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:26:36:86:D5:AF:DB:EA:BB:F1:2C:93:0A:9A:E6:03:A7:16:21:37
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0b26831c9c6ab6406ab194690e4df366b8e18ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.28.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:79:1c:f0:49:94:de:f1:0a:ca:d7:19:84:b7:7b:15:84:
         07:b4:b7:6f:e5:46:d6:19:d3:09:b3:77:35:b3:b5:27:0c:4f:
         ec:48:31:b9:3f:d9:20:07:c0:1b:14:b8:db:e1:d6:4d:bd:6a:
         8f:f0:1d:a4:92:5c:c7:2c:a8:f0:66:fb:1a:31:a4:83:fb:c9:
         99:24:52:e7:be:21:1a:60:9e:ec:0c:20:65:3f:d3:1e:31:ae:
         23:1e:f9:3b:23:2b:fb:a2:b4:3b:4d:76:81:26:0c:3a:28:e3:
         2f:29:c5:3e:31:53:13:91:f5:af:ce:67:ab:ea:cd:16:ca:59:
         08:7a:cb:f8:2f:30:28:6b:40:3b:06:d2:a3:4e:99:b2:1e:fb:
         3e:67:f5:1f:6f:c4:92:97:31:60:ad:90:64:2d:23:42:e6:7f:
         62:a7:b4:2c:97:29:ba:a3:17:85:38:d6:c8:b7:9c:96:66:9b:
         f1:31:97:bd:93:07:5b:87:c3:9b:61:da:f5:45:b9:11:cd:6d:
         ff:f0:48:c7:75:7b:8e:13:bd:00:95:14:4a:95:b6:8a:8e:2a:
         f6:ad:a5:4e:d7:02:0e:70:48:6b:85:82:d5:fd:22:4b:e9:73:
         05:c7:7c:59:05:d3:f4:83:46:0f:d1:53:9c:3d:9a:a7:8f:e6:
         8c:2e:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org