Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/cc0f74e51c31a7366c1121c2263d9ca976c79bd1.roa
File:                     cc0f74e51c31a7366c1121c2263d9ca976c79bd1.roa (raw, json)
Hash identifier:          vWQYDxAIN/yCZGLfwGBU0YQRMVgI2eDrUTTii8mbdiQ=
Subject key identifier:   57:20:6B:9B:B5:D8:17:EF:D4:D2:5D:36:26:88:E8:D8:82:3D:F8:07
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03AED6
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/cc0f74e51c31a7366c1121c2263d9ca976c79bd1.roa
Signing time:             Tue 11 Jul 2023 13:12:29 +0000
ROA not before:           Mon 10 Jul 2023 13:12:29 +0000
ROA not after:            Fri 11 Jul 2025 13:12:29 +0000
asID:                     7418
IP address blocks:        200.10.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241366 (0x3aed6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:12:29 2023 GMT
            Not After : Jul 11 13:12:29 2025 GMT
        Subject: CN=cc0f74e51c31a7366c1121c2263d9ca976c79bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7b:3e:05:3d:d4:ec:00:72:66:cf:de:ad:26:
                    21:84:95:dc:5e:5b:f4:45:d3:6d:de:4b:df:26:90:
                    1c:22:6f:e3:74:98:89:91:5a:52:69:68:58:43:bd:
                    f0:ae:ca:41:cd:3b:e4:cf:7f:33:86:d0:6f:b5:db:
                    d3:bf:5e:4c:f4:5c:e6:5a:71:1b:2e:1e:52:df:dd:
                    d5:4c:29:79:ae:3b:d7:73:4e:69:83:71:06:90:f6:
                    fb:52:24:3f:17:d9:be:b0:e6:2e:c0:bd:95:ca:4b:
                    72:ed:9d:06:af:e9:65:00:3e:a6:2c:c0:7e:b2:ee:
                    d9:75:60:ee:c3:83:72:81:a5:9d:8c:5a:70:8e:38:
                    22:8f:c0:0f:b1:35:b2:f4:f2:85:24:7b:f9:e3:74:
                    82:2d:ca:78:1e:f3:c9:b0:0d:34:f6:2f:c5:b8:2d:
                    5d:6e:01:77:e1:6a:28:93:73:17:ca:ae:36:64:55:
                    72:5b:01:ac:3d:19:01:2b:c1:a0:21:85:d8:23:e5:
                    0c:36:98:5b:f1:69:05:eb:05:5b:3e:a5:d4:da:63:
                    79:d0:98:fe:62:da:eb:97:e8:05:71:25:a2:41:1e:
                    57:c8:b2:54:e4:46:f5:22:1a:2d:8a:7f:6d:fd:c9:
                    4a:c9:6b:90:3a:b8:b8:92:61:0e:b0:59:a8:b7:cc:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:6B:9B:B5:D8:17:EF:D4:D2:5D:36:26:88:E8:D8:82:3D:F8:07
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/cc0f74e51c31a7366c1121c2263d9ca976c79bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:60:e0:16:ad:e4:24:0a:43:84:6f:0e:0d:80:33:b0:da:a0:
         ec:88:31:b7:7c:4b:87:8d:5a:0a:5b:44:9f:9c:ec:a8:7b:da:
         f5:7e:35:6e:55:f4:a1:18:c6:e1:bc:e8:18:f6:14:c9:b9:17:
         38:d9:00:5c:fa:53:f6:c3:0e:a8:66:20:02:0e:4f:ff:5d:e9:
         63:5d:64:fb:64:3b:23:a7:b9:0b:d9:19:b7:68:89:d3:2d:4e:
         f5:09:e0:0f:4b:57:0d:9c:05:74:4d:f3:21:92:13:1d:7a:19:
         a7:08:2b:1a:89:a6:c8:c1:fc:d9:5b:07:12:44:b3:bc:26:e7:
         9d:65:7a:4f:eb:7d:26:60:5e:d2:f1:50:be:a1:f1:d8:c3:04:
         b2:c2:ad:18:2e:d5:c5:92:a8:28:36:3b:0f:e6:ee:f5:09:f4:
         27:e5:f4:32:9e:55:cf:4d:2c:67:68:7b:10:21:be:6b:51:83:
         7b:dd:fa:93:84:d5:26:87:a4:00:6a:b5:ab:76:c9:ef:11:9c:
         53:be:8e:4b:f2:e5:7f:70:55:c5:ee:0c:ad:09:c8:fb:c9:c6:
         c7:db:cb:3b:d0:a4:76:be:9c:f0:c9:71:5c:69:9e:27:7e:6c:
         6b:be:65:12:6f:ac:6f:67:dc:ae:c5:52:ed:a6:24:6a:b5:60:
         f2:ea:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org