Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f5622a14db656c2f7467b21df55e595a894eb3d5.roa
File:                     f5622a14db656c2f7467b21df55e595a894eb3d5.roa (raw, json)
Hash identifier:          fm9cWsi/DlCcOx53ZRjOUOvaFDMQ/GcNQ4bgWTCXkEU=
Subject key identifier:   82:F6:4E:C9:50:E5:7A:6B:06:2B:DE:52:5E:1A:7C:57:A6:3B:F9:83
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       047BBD
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f5622a14db656c2f7467b21df55e595a894eb3d5.roa
Signing time:             Tue 18 Jul 2023 18:46:54 +0000
ROA not before:           Mon 17 Jul 2023 18:46:53 +0000
ROA not after:            Fri 18 Jul 2025 18:46:53 +0000
asID:                     7418
IP address blocks:        200.28.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293821 (0x47bbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 17 18:46:53 2023 GMT
            Not After : Jul 18 18:46:53 2025 GMT
        Subject: CN=f5622a14db656c2f7467b21df55e595a894eb3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:28:fd:72:36:a7:6b:c7:35:cc:bf:26:d6:
                    ac:5e:a1:bb:2a:a5:8f:19:5c:6d:30:8e:1f:36:f0:
                    69:11:65:4e:a5:53:14:96:d7:9b:bd:b2:3d:96:7f:
                    cb:86:9b:05:42:28:0d:10:8f:78:ff:52:07:ef:e6:
                    46:27:3e:21:eb:fa:b5:08:bb:2c:35:61:4a:81:f5:
                    d2:1b:9b:e6:d3:69:e6:ef:97:c9:54:21:aa:f2:cc:
                    3b:2d:30:ef:aa:b1:67:b9:ff:8d:84:86:7d:8c:1d:
                    49:51:92:c6:19:90:bb:99:7e:fc:5d:1c:9c:a5:d0:
                    d1:a8:c7:f8:7a:21:8f:d8:0d:bc:ab:51:fb:c8:47:
                    19:21:9f:a6:e4:d5:bc:16:21:76:12:17:64:14:97:
                    b0:6f:26:69:07:cd:98:0a:18:18:ae:69:b4:6e:8e:
                    19:f0:49:2f:72:b5:5a:b0:8b:ae:39:db:02:e8:a0:
                    5f:59:64:21:f5:61:67:bd:8d:69:38:3a:22:ad:d3:
                    db:63:6c:6d:c4:41:c1:83:b3:b9:38:6e:4b:a1:2e:
                    df:3b:6b:88:a5:6a:a5:ed:55:b9:ba:bb:bd:90:ef:
                    01:e1:a2:00:22:08:4e:c7:2d:ca:b0:24:19:d6:fe:
                    74:48:cc:52:1d:8b:ab:23:33:16:20:73:6c:16:c8:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:4E:C9:50:E5:7A:6B:06:2B:DE:52:5E:1A:7C:57:A6:3B:F9:83
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f5622a14db656c2f7467b21df55e595a894eb3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:12:55:96:82:b2:d4:45:a8:44:36:1d:eb:04:05:6d:86:d2:
         05:cf:41:a9:e4:bd:da:c0:f0:d0:33:ec:c8:8b:32:30:58:1d:
         93:b5:92:7f:06:09:2f:97:a5:45:db:24:3d:f0:ec:84:e1:fd:
         7a:c6:37:81:e5:74:05:29:27:c4:1a:d7:de:0d:83:8f:5c:ba:
         4f:be:39:5a:ea:e9:e2:fb:04:64:86:35:cb:76:15:d7:1c:c2:
         cf:b1:f8:2f:e6:13:8b:57:67:87:af:71:9f:a7:2f:47:5e:e7:
         5a:de:3b:45:1c:53:1a:29:ce:44:17:5e:77:9d:95:5d:58:d6:
         f9:9f:6c:e6:7d:fd:43:b9:4b:2c:08:a7:4e:c8:fe:e1:08:f8:
         04:a2:4f:88:19:1f:d5:47:77:e9:23:b4:0b:a7:d1:75:f3:50:
         d0:d6:22:8b:f8:a1:f1:d8:a1:80:b0:a6:41:d9:91:de:28:3e:
         e0:d0:3e:34:50:21:a2:38:8e:32:c8:47:93:44:2f:3b:ba:c2:
         c6:5c:45:7e:59:5f:5c:bd:37:ce:3f:c4:10:29:63:31:7f:20:
         fe:49:f6:07:5a:3a:d5:c9:54:b3:75:91:b0:96:be:cf:a3:8e:
         4a:09:2b:35:ea:4d:07:52:cb:80:da:f4:54:e4:6b:a8:10:3b:
         d5:27:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org