Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0eafac68fbf7dfb71dd462e4c198aae15b81f5a6.roa
File:                     0eafac68fbf7dfb71dd462e4c198aae15b81f5a6.roa (raw, json)
Hash identifier:          1kgKqv1SqPpE2cOmbGSCatUslSI6ksFN7ZvWbAIh5U0=
Subject key identifier:   6D:A1:50:4D:32:31:1E:33:E2:4D:DF:18:58:9C:39:D2:D8:B0:6B:DE
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03F069
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0eafac68fbf7dfb71dd462e4c198aae15b81f5a6.roa
Signing time:             Tue 11 Jul 2023 17:36:53 +0000
ROA not before:           Mon 10 Jul 2023 17:36:53 +0000
ROA not after:            Fri 11 Jul 2025 17:36:53 +0000
asID:                     7418
IP address blocks:        200.50.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258153 (0x3f069)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 17:36:53 2023 GMT
            Not After : Jul 11 17:36:53 2025 GMT
        Subject: CN=0eafac68fbf7dfb71dd462e4c198aae15b81f5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:11:a9:dd:e8:92:cb:4e:18:78:56:64:7d:
                    9c:1d:64:d6:70:0b:47:86:ac:ca:3b:64:6e:5a:e6:
                    30:42:63:1e:9c:18:bd:65:8d:a6:e3:26:22:a6:d9:
                    c2:05:77:a5:3b:8b:e6:65:91:01:29:32:33:3b:57:
                    3b:a8:6c:be:e0:38:d3:af:d8:d9:b2:14:f6:bf:9e:
                    13:8d:61:62:85:5b:5e:16:44:04:7a:fd:f2:84:ce:
                    0f:26:a8:36:c0:4e:dd:f1:20:bf:58:71:18:25:38:
                    e9:6e:73:ae:3e:1c:f6:16:9d:9e:0e:5a:e5:47:d5:
                    6f:a6:71:da:3d:56:a2:4f:7b:da:9c:09:f1:c0:72:
                    28:bb:69:27:9c:fc:24:bb:5e:b3:ce:1e:61:90:a0:
                    23:39:d2:1c:6d:4f:6c:9c:73:39:83:86:0f:cc:90:
                    9a:7a:45:5d:d0:c3:d4:b4:43:6b:8d:57:e1:b3:80:
                    a2:1b:fc:6b:ef:5c:d8:65:4d:6e:4b:19:9a:66:20:
                    9d:bb:18:9f:a6:02:9f:e0:8f:80:6b:4b:b3:6a:fc:
                    ca:51:7d:43:4d:9b:0b:b2:06:52:8e:dc:1c:56:42:
                    77:d6:8d:58:00:65:a9:56:57:3c:b5:a2:db:fa:6f:
                    9f:76:fe:bc:ea:78:70:d5:43:6e:ac:ab:21:d2:e4:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A1:50:4D:32:31:1E:33:E2:4D:DF:18:58:9C:39:D2:D8:B0:6B:DE
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0eafac68fbf7dfb71dd462e4c198aae15b81f5a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:57:88:d0:2c:9d:5e:77:fa:1d:bf:49:d5:03:c8:8b:ce:0b:
         69:4b:0b:73:62:3c:a1:9a:9c:96:a8:0e:22:f5:ae:c0:fb:b3:
         a4:5c:a1:76:63:8a:97:7a:75:52:14:26:a0:89:88:59:23:53:
         85:2c:96:dc:ef:99:de:f8:18:f4:b5:98:87:3b:75:9f:7f:6e:
         00:76:9f:a5:a8:06:66:dc:1d:07:d8:b5:ae:65:a3:f3:33:44:
         bb:0f:76:30:4c:23:4e:bb:01:56:dd:f4:37:31:c6:49:62:cf:
         a5:2e:09:15:ca:b5:ad:d2:3e:b2:b4:4d:22:54:7e:ae:4e:d8:
         71:5d:13:c2:ba:32:63:54:b3:32:db:e4:f6:a4:85:a3:6e:a6:
         cf:d6:a0:ff:73:87:b9:b0:98:80:ca:cc:2f:46:ad:5d:df:67:
         ae:a1:0a:ff:2b:bf:e7:24:97:0a:0c:44:cc:f5:2d:95:28:c2:
         f5:d2:a7:74:a2:c2:6a:c8:ff:9a:8d:52:17:e8:19:27:c8:a2:
         71:7e:4d:c7:04:c3:04:33:c6:04:ab:76:1f:e4:69:69:dd:11:
         83:4d:c3:a8:87:67:91:36:32:42:94:07:e5:7d:26:be:c4:46:
         37:2c:b3:7e:35:8d:4b:bc:87:b1:4c:1f:81:f4:ae:f7:90:85:
         71:e9:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org