Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/6abf86efaa8d7e8fd33d809e9c3799fb71b75209.roa
File:                     6abf86efaa8d7e8fd33d809e9c3799fb71b75209.roa (raw, json)
Hash identifier:          1Z2+frlzz2OyhIyCFdGmu/GDtyzGp7xlS3iy01xjBuM=
Subject key identifier:   AE:00:F1:CD:B1:78:C9:3B:8F:55:68:41:30:C8:53:CA:7E:4D:D7:41
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       048C7D
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/6abf86efaa8d7e8fd33d809e9c3799fb71b75209.roa
Signing time:             Tue 18 Jul 2023 19:11:27 +0000
ROA not before:           Mon 17 Jul 2023 19:11:27 +0000
ROA not after:            Fri 18 Jul 2025 19:11:27 +0000
asID:                     7418
IP address blocks:        200.10.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298109 (0x48c7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 17 19:11:27 2023 GMT
            Not After : Jul 18 19:11:27 2025 GMT
        Subject: CN=6abf86efaa8d7e8fd33d809e9c3799fb71b75209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:8e:a1:07:ef:8e:c8:e9:38:07:a8:04:45:
                    50:6d:7c:cc:12:83:0b:9c:2f:a8:12:65:20:db:5c:
                    56:1b:99:65:21:f2:d8:72:d3:d3:93:3d:d6:ce:fd:
                    1b:01:fe:23:ca:a4:28:f1:0b:12:28:29:54:06:83:
                    9a:16:34:5d:55:36:3f:38:0f:dc:12:88:9f:31:7c:
                    64:b6:1a:4a:05:0b:11:34:06:8f:26:40:bc:fc:62:
                    0d:6e:e2:41:5f:e8:ab:d2:1a:fe:c9:31:72:31:8b:
                    05:3f:c4:c6:45:38:d8:80:7f:91:b4:51:c0:77:55:
                    5e:ee:31:d7:3b:ab:63:e3:1d:fb:9e:7e:82:cc:f2:
                    42:0e:02:54:ee:dd:6f:99:d1:e8:f8:1e:ef:99:49:
                    3c:5f:a0:40:f4:61:13:d1:22:1b:01:e6:67:b5:df:
                    b5:d6:7b:63:8c:e6:a4:f1:4d:84:e5:d8:40:b1:00:
                    88:c2:70:d0:5b:d3:6e:1b:13:48:04:e4:5c:64:f6:
                    a5:92:4f:f2:9a:f6:61:0a:ab:6d:b4:11:36:54:cc:
                    9b:31:8f:ac:de:88:1e:22:fe:04:77:33:23:c0:74:
                    13:77:c1:24:fe:6b:a7:c8:96:7e:73:f2:6f:c7:81:
                    16:4b:20:16:b6:ac:aa:0b:6b:e5:57:16:3b:6c:13:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:00:F1:CD:B1:78:C9:3B:8F:55:68:41:30:C8:53:CA:7E:4D:D7:41
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/6abf86efaa8d7e8fd33d809e9c3799fb71b75209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:2b:44:42:24:63:a1:75:81:03:2a:8c:f8:90:fd:fd:7e:bf:
         2e:73:5a:d7:71:8f:f4:e5:ca:21:a7:a4:cf:c7:c2:93:a2:df:
         1d:fb:75:1a:18:c8:46:b2:c4:23:54:e4:45:07:08:90:f3:a3:
         1a:3f:ad:88:e7:0e:19:94:d3:d4:d3:39:08:a4:e6:54:8e:98:
         fc:c5:60:9d:07:e5:13:b6:71:db:6c:97:43:dd:fc:b1:20:74:
         c3:94:48:25:28:f1:29:55:b0:85:e9:66:18:82:72:4b:6f:ef:
         b3:82:ae:cd:88:cb:84:f1:64:0a:25:8d:9d:58:25:94:ea:b2:
         2a:69:98:92:b2:7d:fd:4c:5b:b7:3d:48:ac:9f:2b:eb:54:4d:
         29:79:7b:84:61:9b:49:de:87:9c:37:21:6d:79:d8:82:61:75:
         4a:e1:26:34:55:cd:e8:04:f3:2d:d1:8e:47:a0:e2:4b:34:a7:
         87:66:0c:90:32:6a:c3:a2:b6:ee:80:e0:63:f2:6d:39:b5:8a:
         43:82:38:ca:d5:8a:e9:ef:77:4d:e2:ae:a9:cd:fb:74:0a:fa:
         e5:fa:21:83:d2:79:da:fe:75:60:d9:bd:f3:88:76:90:7b:36:
         b4:db:fc:30:b5:05:9e:b3:2e:38:13:97:d4:3c:05:70:35:2e:
         94:78:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org