Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0c45da3dfb777c8c7ce21a3307520379bb3e1653.roa
File:                     0c45da3dfb777c8c7ce21a3307520379bb3e1653.roa (raw, json)
Hash identifier:          qFLsuFbgRLRHzhmG9ELlZ3Bwa6vZzcD5pTplu3OH1EY=
Subject key identifier:   92:C0:E4:07:3F:66:00:58:16:E7:E1:26:39:6B:0A:85:AF:F8:F4:57
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       04019B
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0c45da3dfb777c8c7ce21a3307520379bb3e1653.roa
Signing time:             Wed 12 Jul 2023 15:00:49 +0000
ROA not before:           Tue 11 Jul 2023 15:00:49 +0000
ROA not after:            Sat 12 Jul 2025 15:00:49 +0000
asID:                     16629
IP address blocks:        200.112.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262555 (0x4019b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:00:49 2023 GMT
            Not After : Jul 12 15:00:49 2025 GMT
        Subject: CN=0c45da3dfb777c8c7ce21a3307520379bb3e1653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:ef:5c:f2:00:a4:33:a5:92:03:bd:c2:89:
                    d4:98:d2:10:b2:06:9a:25:f3:ad:6c:ee:3b:7c:c9:
                    ac:a0:bc:50:03:60:a2:d5:07:cf:f0:71:68:59:27:
                    44:fd:6c:c8:b0:e9:5f:79:44:2f:79:bc:d1:e3:7c:
                    6a:f5:aa:23:08:3b:61:30:5d:46:47:16:4b:02:ba:
                    c6:13:ba:43:50:2e:20:f2:e7:79:10:ac:de:3f:69:
                    4e:96:f1:ff:9e:96:36:b2:0f:ba:fc:3f:c2:c2:80:
                    96:82:39:77:bc:b0:d3:e4:12:7c:5e:8b:e8:9e:d8:
                    b4:a0:b1:43:20:4e:66:ff:60:80:26:27:7c:ad:fe:
                    0b:46:32:e5:4b:ec:60:2b:f8:11:58:4c:e3:6b:f3:
                    52:1a:3c:83:7a:4c:94:83:3c:2e:24:e9:eb:f3:3c:
                    04:39:51:cb:6b:fb:8a:f5:88:e0:96:2d:f1:66:1f:
                    3f:f6:43:40:57:f7:82:58:30:72:c9:f9:10:9e:49:
                    f1:2f:36:d6:69:4e:ff:bf:a6:a9:62:8f:24:16:cb:
                    f9:dd:7e:81:f3:33:ee:0f:4a:a3:f5:19:50:80:26:
                    4c:cb:87:c0:91:9f:51:e5:18:6c:de:82:fa:3c:76:
                    33:b9:ae:d3:6a:7a:9b:03:b4:0c:c0:be:22:a0:de:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:E4:07:3F:66:00:58:16:E7:E1:26:39:6B:0A:85:AF:F8:F4:57
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0c45da3dfb777c8c7ce21a3307520379bb3e1653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:8d:0e:db:70:a0:86:be:9c:a0:ab:21:c0:b1:cd:a7:64:
         12:85:26:47:66:96:00:67:20:d8:ce:a7:dc:39:2d:34:aa:23:
         cc:23:1b:2a:35:9d:6f:87:e5:34:72:03:ba:8f:b6:8b:2a:a6:
         d0:88:55:1b:a9:60:48:43:88:82:ee:f5:2a:88:69:17:0b:e0:
         0c:c5:6c:7c:c5:cb:52:a2:73:ed:80:f1:a9:51:e6:19:fd:3a:
         be:9b:6d:64:0e:13:49:09:9a:ef:b6:c3:af:ec:b0:a6:4b:d4:
         22:d0:da:50:d6:d1:c7:61:09:ea:4c:68:17:73:1c:32:ce:27:
         bd:4e:a0:13:40:05:68:aa:6a:46:d4:43:73:65:dc:97:7e:da:
         41:59:24:47:84:8b:12:de:80:e6:9e:ea:c8:6b:21:cb:11:d5:
         79:d8:07:41:8a:6c:5c:4e:fe:fd:fd:ac:64:55:41:91:6b:93:
         68:72:fa:70:cf:80:8e:41:6c:a2:84:27:44:4c:cf:70:86:04:
         9e:14:69:15:d3:66:64:24:fe:e3:45:ef:e0:12:b6:25:45:e1:
         25:10:ed:7f:42:13:9f:96:cc:ec:5f:77:2a:d2:5b:7f:d4:62:
         1d:2a:9c:97:2b:24:75:3c:b7:c0:9b:9f:0e:18:35:7e:4f:cc:
         ad:01:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org