Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1bc43b0-bd5c-4506-bfa0-326fbc87d6aa/26d71845082daf9a8290fce4d6deaab6ba1c82e6.roa
File:                     26d71845082daf9a8290fce4d6deaab6ba1c82e6.roa (raw, json)
Hash identifier:          lYFgDw8lwrbLrtPqUO50OAkHmmWK+PBadTM71J4SUFA=
Subject key identifier:   26:9A:D5:18:5F:7C:79:17:56:B6:A4:FA:13:85:61:D2:28:05:2A:BC
Certificate issuer:       /CN=0980db64d3aa29b1d50e1e87f5788008443677bd
Certificate serial:       0414
Authority key identifier: DA:E2:9A:93:B4:C7:3A:32:5E:40:CE:72:B1:C0:FC:75:83:1A:FD:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0980db64d3aa29b1d50e1e87f5788008443677bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1bc43b0-bd5c-4506-bfa0-326fbc87d6aa/26d71845082daf9a8290fce4d6deaab6ba1c82e6.roa
Signing time:             Mon 26 Dec 2022 20:11:56 +0000
ROA not before:           Sun 25 Dec 2022 20:08:31 +0000
ROA not after:            Thu 26 Dec 2024 20:08:31 +0000
asID:                     7340
IP address blocks:        200.0.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044 (0x414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0980db64d3aa29b1d50e1e87f5788008443677bd
        Validity
            Not Before: Dec 25 20:08:31 2022 GMT
            Not After : Dec 26 20:08:31 2024 GMT
        Subject: CN=26d71845082daf9a8290fce4d6deaab6ba1c82e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:12:f7:82:06:44:5e:48:a6:3f:bc:5f:21:
                    6a:3c:d8:74:e2:2b:39:4b:5e:22:83:09:21:14:be:
                    e3:5b:72:a9:ae:66:94:74:f8:22:81:c1:8a:c8:61:
                    20:30:9f:6f:f4:37:4a:c4:4b:63:12:d8:d7:89:b9:
                    25:ba:c9:c5:71:5a:f6:28:cf:96:69:7a:46:20:cb:
                    b1:f3:b5:fa:d1:c6:0e:db:b0:3d:77:83:29:1a:cb:
                    4b:9a:b7:13:23:62:c2:f7:57:30:e2:75:92:24:bf:
                    6d:cb:b3:91:15:cd:74:79:3a:f5:80:d7:c4:24:30:
                    59:76:f8:bf:e9:a5:1d:c8:69:4a:ba:32:39:c2:2a:
                    dc:85:ec:85:b0:51:ca:8c:e7:c8:bd:76:d1:76:37:
                    25:cb:c7:44:5f:a2:60:f0:fe:33:18:e9:5a:d9:0f:
                    8e:db:3e:b7:ad:41:a8:af:da:63:bf:6f:e4:c8:02:
                    09:56:35:59:12:c6:12:fe:52:af:05:20:ff:b2:ae:
                    55:ab:b1:9c:08:90:da:e0:17:fa:4b:eb:a5:a3:c6:
                    0c:c5:bd:05:55:75:27:2d:e7:15:e2:77:e5:4d:b3:
                    91:89:73:a1:00:d4:be:32:b3:1e:2a:19:5a:eb:0d:
                    1b:d1:7a:82:89:15:07:ff:d6:da:b3:28:b8:06:2c:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:D5:18:5F:7C:79:17:56:B6:A4:FA:13:85:61:D2:28:05:2A:BC
            X509v3 Authority Key Identifier:
                keyid:DA:E2:9A:93:B4:C7:3A:32:5E:40:CE:72:B1:C0:FC:75:83:1A:FD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0980db64d3aa29b1d50e1e87f5788008443677bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1bc43b0-bd5c-4506-bfa0-326fbc87d6aa/26d71845082daf9a8290fce4d6deaab6ba1c82e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1bc43b0-bd5c-4506-bfa0-326fbc87d6aa/0980db64d3aa29b1d50e1e87f5788008443677bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:be:02:d5:2e:7b:e1:72:76:33:dc:c1:7a:2f:d3:0f:77:
         34:1d:d6:e7:79:d4:bf:35:7a:7f:ff:7f:de:56:45:e9:1a:a0:
         8d:29:f4:79:c8:39:81:80:26:28:6f:d0:de:60:00:b5:11:e9:
         dc:31:f4:56:7d:6d:b6:e5:26:5c:c7:da:a7:3f:90:54:18:9a:
         00:c0:aa:50:1b:2b:4a:23:4b:fb:0d:4c:a7:03:c6:41:44:12:
         fe:18:b9:27:44:b8:26:11:d4:22:3b:19:13:5d:ee:8f:b1:e6:
         7c:c4:db:67:39:20:df:e2:ac:db:38:23:4a:cc:c3:fb:fb:93:
         34:ba:c2:61:d5:61:21:6b:c2:dc:f9:b6:5d:ff:bb:85:75:18:
         b6:74:13:55:62:93:a2:04:87:fb:08:60:fa:7d:eb:a7:97:67:
         33:3a:8d:24:08:d3:3e:d9:a9:da:7d:2e:53:57:a0:c1:bc:2d:
         f2:11:c1:b0:f6:17:5a:1d:84:e2:a7:f3:56:12:42:3d:8c:c2:
         ac:2a:c4:5b:12:70:11:47:71:9b:86:6a:3e:b8:e8:98:54:ee:
         6f:2f:1c:d9:b7:57:30:22:81:1c:44:2c:17:31:85:3f:8a:52:
         de:d5:2c:0f:43:3d:02:e8:1e:a1:c3:62:f7:70:62:38:88:2c:
         94:4b:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org