Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/fc7cc407bfca4b111e558f3cc3d3199fd47ee893.roa
File:                     fc7cc407bfca4b111e558f3cc3d3199fd47ee893.roa (raw, json)
Hash identifier:          pCGFsuZvWXNAohfz7GqoK4VsqypcVzzFLSnAF1FotnY=
Subject key identifier:   50:20:2F:EC:76:B2:38:B7:02:9C:F6:B3:5A:75:23:ED:6B:21:DE:7B
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       040ED5
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/fc7cc407bfca4b111e558f3cc3d3199fd47ee893.roa
Signing time:             Wed 12 Jul 2023 15:02:49 +0000
ROA not before:           Tue 11 Jul 2023 15:02:49 +0000
ROA not after:            Sat 12 Jul 2025 15:02:49 +0000
asID:                     16629
IP address blocks:        200.112.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265941 (0x40ed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:02:49 2023 GMT
            Not After : Jul 12 15:02:49 2025 GMT
        Subject: CN=fc7cc407bfca4b111e558f3cc3d3199fd47ee893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:86:0f:a2:38:92:e7:5c:fc:83:a0:82:63:
                    d1:62:15:9c:8c:56:99:62:b9:9f:06:ca:bc:bb:5b:
                    10:ba:a9:fa:a8:18:f6:c3:ff:cb:59:e0:52:68:2e:
                    b5:ab:a6:a5:1c:74:98:b1:f7:92:3a:12:cd:62:54:
                    82:c9:f2:cf:36:27:96:54:2f:f7:2a:0b:13:16:dc:
                    a8:73:82:ad:db:3c:5b:cb:ad:66:73:a8:e3:38:a7:
                    53:59:89:70:fe:b3:5e:b9:0e:a8:86:9b:ba:2c:d7:
                    b6:b0:51:11:9c:c1:8e:25:9e:52:2c:16:29:98:81:
                    5b:23:5f:bd:4b:35:52:0b:c2:01:91:97:a0:68:51:
                    6f:3c:64:14:d0:0e:44:3a:25:fa:19:63:35:0d:bd:
                    18:cc:12:d5:7f:4e:e5:ca:87:3f:be:7a:fb:45:f8:
                    64:21:a2:97:45:4f:b4:7d:ea:81:95:0c:d7:07:f3:
                    38:fb:dd:35:9e:64:11:85:aa:e6:11:5c:92:4f:d2:
                    cd:2c:0a:fa:d6:75:34:9a:6b:1c:6d:d2:da:16:96:
                    45:53:b7:c7:89:38:51:61:ed:6c:5d:d6:e1:80:4f:
                    ff:d7:9a:1a:64:0f:f2:e0:5c:69:1b:35:3a:db:52:
                    74:9c:42:68:47:3b:9f:58:d5:d0:ea:07:5c:69:2c:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:20:2F:EC:76:B2:38:B7:02:9C:F6:B3:5A:75:23:ED:6B:21:DE:7B
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/fc7cc407bfca4b111e558f3cc3d3199fd47ee893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:18:f1:a0:74:2e:f0:7c:55:d2:85:74:7a:59:fb:12:8c:7f:
         48:9a:74:b0:1e:af:53:f1:1f:bd:86:9e:22:28:98:1c:3d:bb:
         4c:52:fd:7e:59:2d:8f:1b:3f:24:4c:94:55:c9:46:71:88:ec:
         80:5a:77:48:59:04:ae:16:6a:d9:af:84:c1:a7:d0:8f:3d:8a:
         f9:37:8b:d3:18:71:2d:b0:a9:3a:aa:99:fe:47:78:1d:69:11:
         ca:a4:a1:37:71:d1:24:a9:7b:15:fb:fc:08:7c:8c:9d:cb:9d:
         04:a5:1c:c6:1d:08:05:6e:d0:c5:2d:91:96:0b:63:05:bc:f1:
         1f:67:ed:62:1b:f4:a3:c2:77:bd:7a:c0:95:cc:40:16:6d:1d:
         1b:dc:ce:81:0d:1c:63:b8:c8:13:18:27:b0:e7:17:e8:2b:5c:
         64:62:50:bf:bb:53:ab:06:19:e6:eb:01:46:4b:ab:b3:04:2e:
         eb:7f:ab:1e:36:e1:57:af:7c:a1:4c:27:46:a6:87:f6:23:d5:
         d1:72:0a:49:a3:50:2e:a0:63:b0:ec:b4:58:73:d9:d3:b5:7c:
         87:fd:2c:82:9c:16:e4:ef:fe:5d:9a:00:1d:9a:05:79:69:a9:
         19:f9:b5:37:52:77:36:0a:35:84:50:e8:1f:ce:46:87:93:0b:
         73:cb:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org