Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/9df26974aeb2c6bc92f9f60046d2074034dd35ba.roa
File:                     9df26974aeb2c6bc92f9f60046d2074034dd35ba.roa (raw, json)
Hash identifier:          LW7qHmyTHf7wDVOiimN+zhVc5SQyNtaPjkGcw1j7F4w=
Subject key identifier:   13:C6:53:84:69:AB:E1:EE:11:19:BB:4B:25:27:0D:88:3D:2D:C5:8E
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03D451
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/9df26974aeb2c6bc92f9f60046d2074034dd35ba.roa
Signing time:             Tue 11 Jul 2023 13:28:12 +0000
ROA not before:           Mon 10 Jul 2023 13:28:12 +0000
ROA not after:            Fri 11 Jul 2025 13:28:12 +0000
asID:                     7418
IP address blocks:        200.29.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250961 (0x3d451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:28:12 2023 GMT
            Not After : Jul 11 13:28:12 2025 GMT
        Subject: CN=9df26974aeb2c6bc92f9f60046d2074034dd35ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:30:28:b7:c0:3b:9f:30:04:c3:39:e0:24:
                    1c:1a:95:39:f1:28:af:4b:fd:16:76:34:02:0d:7d:
                    bd:a2:36:14:bf:42:de:a4:dd:4e:27:bc:34:62:f9:
                    34:4f:01:5c:d7:c7:7f:a9:88:fa:41:98:3d:fd:e0:
                    96:14:b9:c3:56:f9:26:39:fc:b6:2d:4a:c2:d5:72:
                    e1:59:b1:fb:52:76:d3:90:7f:8f:2c:1d:96:c4:1e:
                    bd:0d:f8:af:4f:cd:b7:c5:64:5b:b4:3c:3e:91:42:
                    e4:77:09:91:49:6d:e5:55:33:b2:8e:62:e4:0c:a2:
                    5f:f8:d5:b3:64:ac:be:40:80:45:65:c7:fa:e1:07:
                    20:b2:5e:b2:ad:8d:77:50:9b:53:e9:90:e6:40:95:
                    d2:a9:38:c6:b8:d3:52:21:0d:6f:1e:97:8d:b3:28:
                    31:43:94:36:ac:34:7b:6b:00:c2:31:dc:c9:76:bb:
                    09:a6:f0:03:20:04:bd:0c:8c:45:fa:a6:9c:18:83:
                    53:1b:26:b6:28:17:0b:0a:d0:ef:47:fc:c6:b2:13:
                    b3:e2:9e:96:e7:cd:4f:b4:6d:ab:e1:e9:60:03:d1:
                    4c:6e:66:b7:d5:c9:2e:6a:26:60:09:48:e1:8f:34:
                    8f:03:b1:f2:b8:2f:41:dc:81:29:96:79:8f:77:8d:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:53:84:69:AB:E1:EE:11:19:BB:4B:25:27:0D:88:3D:2D:C5:8E
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/9df26974aeb2c6bc92f9f60046d2074034dd35ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:17:cc:68:f7:58:14:29:10:f7:ca:ed:11:36:a0:7b:e6:
         1e:1f:0e:6c:b2:c4:88:22:a0:d7:92:d9:b7:00:9d:a6:08:cc:
         dd:58:04:56:e5:dc:c0:fd:e6:5b:6f:96:4d:c9:f8:8a:4b:fa:
         f5:3e:26:79:b7:9f:48:5e:9a:25:a8:cd:d5:50:20:c5:8a:79:
         46:93:36:a5:38:5d:83:42:79:69:fb:17:93:37:c2:ea:a4:37:
         c2:98:7e:5a:c0:b5:da:c5:4d:d0:02:ed:48:dd:b9:22:45:78:
         9b:f1:52:41:12:29:de:90:94:53:1f:a4:1d:19:64:29:2a:af:
         21:3c:ff:1f:dd:89:88:21:00:c8:36:6c:95:88:3e:d1:fc:7c:
         54:fb:72:be:6a:6e:16:1e:4e:18:6e:26:4f:35:40:3e:1b:a7:
         e0:2e:12:32:3b:be:c9:14:74:e5:39:8d:66:82:59:43:56:70:
         7f:45:aa:6a:9d:6e:da:c2:9d:13:a6:b9:17:de:8d:52:0c:63:
         bc:ed:bb:0d:73:84:dd:8c:11:b0:89:e7:c6:a5:55:d5:61:39:
         50:dc:e9:26:62:af:d0:69:b3:4f:ea:ee:08:90:af:0c:4e:9e:
         4c:b8:39:38:d4:8e:1d:ed:d1:30:8a:98:4b:0f:d1:47:ce:4f:
         b2:21:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org