Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/fac7b788d1bd67ad52c3c58f04dfa1e33f262bea.roa
File:                     fac7b788d1bd67ad52c3c58f04dfa1e33f262bea.roa (raw, json)
Hash identifier:          UxX9jbDu5RIFJcGR1Dj6rgU82FPdip3GRNlPTw2CYb4=
Subject key identifier:   E0:FC:18:91:0B:70:CF:52:CD:4F:BE:76:B7:F2:84:0B:BB:E0:C2:33
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       048184
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/fac7b788d1bd67ad52c3c58f04dfa1e33f262bea.roa
Signing time:             Tue 18 Jul 2023 18:47:42 +0000
ROA not before:           Mon 17 Jul 2023 18:47:42 +0000
ROA not after:            Fri 18 Jul 2025 18:47:42 +0000
asID:                     16629
IP address blocks:        200.28.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295300 (0x48184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 17 18:47:42 2023 GMT
            Not After : Jul 18 18:47:42 2025 GMT
        Subject: CN=fac7b788d1bd67ad52c3c58f04dfa1e33f262bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f0:29:84:1d:68:c9:ec:c7:7d:7a:45:14:ca:
                    e3:46:01:b2:e5:f2:ad:c8:dd:4b:5f:90:c8:b0:28:
                    83:8c:11:d8:0d:38:6e:ce:29:d5:b1:bd:0b:6d:ef:
                    18:cd:4c:e8:b3:f8:4e:27:e3:69:8c:ad:6a:36:44:
                    2e:4a:b1:0e:6b:f4:72:b1:b0:e1:a5:d8:8c:f5:24:
                    2e:7f:7d:a4:ee:51:ca:b9:6a:f7:03:f0:11:fa:29:
                    e9:ed:10:60:15:59:99:1f:c1:0b:ee:86:5c:ba:c1:
                    ab:80:47:9d:9c:b5:9d:20:78:35:dd:20:e8:1f:84:
                    9f:77:46:6b:ef:df:e0:5b:bb:8a:15:f5:11:28:cc:
                    cb:c3:78:e4:52:8f:14:7d:56:0a:07:96:2e:7e:f6:
                    a6:9b:bd:e8:70:15:88:a1:6d:11:56:1e:22:97:f3:
                    28:b1:b5:18:84:3d:e6:4e:d0:49:de:2a:9f:2d:c1:
                    3d:17:22:e4:64:47:2d:d6:51:6f:96:83:61:f8:b7:
                    81:16:d9:e3:e6:d5:d5:d4:39:4c:49:7d:a1:af:73:
                    86:85:1c:2b:5d:c3:35:d9:d8:06:21:0b:a1:06:ec:
                    31:9a:bb:44:8f:5e:d6:50:44:b6:b1:36:89:3c:de:
                    c0:15:2f:1f:38:c3:a7:fb:a4:4c:99:26:ee:e7:66:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FC:18:91:0B:70:CF:52:CD:4F:BE:76:B7:F2:84:0B:BB:E0:C2:33
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/fac7b788d1bd67ad52c3c58f04dfa1e33f262bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:b6:71:ed:cc:8c:7d:33:2b:5b:72:6d:9b:74:e1:7e:57:
         d7:ce:52:87:22:41:cb:c0:99:fb:b8:17:51:f3:45:9d:19:65:
         ba:55:30:94:47:13:7f:1d:b2:1a:6c:40:89:b9:cf:88:c1:2d:
         8c:c9:be:85:a8:aa:96:4b:c6:7b:b9:a7:c2:3a:22:2a:b0:bc:
         3e:fe:c3:41:90:99:70:4a:45:88:93:93:e9:44:ac:26:44:ef:
         a7:74:56:e9:b7:6e:32:84:36:e2:92:57:31:5b:77:30:65:1f:
         4e:de:ed:cd:2f:30:da:12:29:e3:63:0f:cb:d6:d8:0f:1a:ec:
         23:14:0d:18:35:b8:dc:65:54:7c:07:58:a5:93:95:3b:e9:ae:
         32:48:3f:4c:ff:93:62:d5:8d:50:d5:e0:dc:62:e3:a5:9a:da:
         6c:17:ab:5a:a2:2c:70:b7:48:b8:ec:39:fc:74:f5:4c:bb:ef:
         8b:37:65:61:b9:c9:99:84:1d:a5:23:e9:82:c7:36:0c:79:25:
         ec:14:a5:80:da:97:84:66:92:6a:e4:bc:14:73:35:df:b7:54:
         97:b5:65:b0:8d:be:b4:e3:f0:8a:79:68:ab:18:08:47:8b:69:
         ab:32:7b:11:78:18:0b:b5:06:0f:55:88:f6:8f:f0:ec:c1:42:
         fa:bc:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org