Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/09cd226c8eece830715f778a696e9c2dfc111878.roa
File:                     09cd226c8eece830715f778a696e9c2dfc111878.roa (raw, json)
Hash identifier:          r7kST3heDreghSbKVzgSSrTBZOiV/CVpvnv//8F+8Vs=
Subject key identifier:   F5:8F:20:DC:E1:7D:41:A1:E7:EB:45:28:EF:BC:58:3C:03:05:E8:AD
Certificate issuer:       /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial:       249397
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/09cd226c8eece830715f778a696e9c2dfc111878.roa
Signing time:             Tue 26 Dec 2023 19:34:20 +0000
ROA not before:           Tue 26 Dec 2023 19:34:20 +0000
ROA not after:            Fri 26 Dec 2025 19:34:20 +0000
asID:                     263684
IP address blocks:        200.115.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397079 (0x249397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
        Validity
            Not Before: Dec 26 19:34:20 2023 GMT
            Not After : Dec 26 19:34:20 2025 GMT
        Subject: CN=09cd226c8eece830715f778a696e9c2dfc111878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4c:53:75:0b:7e:01:2a:f3:68:16:33:05:78:
                    8a:33:38:af:3d:c1:a1:e4:9f:ad:ca:62:4d:4f:58:
                    66:f6:0e:ac:b4:96:48:3f:6f:c5:f5:50:cd:02:ae:
                    0a:a7:7b:ae:59:99:f0:3a:ca:6d:47:93:c9:41:2f:
                    b1:5f:41:44:0a:96:47:28:ae:ac:28:de:3a:ca:56:
                    76:81:42:7f:40:05:28:81:5c:39:64:63:11:8a:53:
                    56:35:d1:60:c0:b5:5b:ce:3e:da:29:71:92:4e:2b:
                    52:54:73:a3:87:bd:47:55:b7:dc:a7:0b:5f:41:d1:
                    a0:b9:ca:4d:7f:b0:42:dd:dc:3d:8d:14:59:b2:38:
                    f4:62:05:13:35:11:89:d5:69:8d:00:8d:28:e6:ce:
                    7b:64:e6:6b:e9:49:97:fc:d4:a2:1c:39:7d:fb:9b:
                    41:9a:30:04:ff:fe:a6:5a:dc:12:24:5f:63:55:8f:
                    4f:ff:08:51:ff:f1:1c:67:08:4b:5a:d9:63:e5:9e:
                    e3:7b:c1:6b:d1:a8:de:6e:f6:ec:43:f9:1a:bb:57:
                    65:bf:b4:4e:f7:99:ca:fe:d8:6c:74:79:3f:b1:03:
                    88:b0:b2:36:39:0e:5b:c5:bb:25:a3:53:44:bd:d7:
                    28:c7:a8:cf:c6:53:e6:74:0a:73:ee:ce:cf:b1:3e:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8F:20:DC:E1:7D:41:A1:E7:EB:45:28:EF:BC:58:3C:03:05:E8:AD
            X509v3 Authority Key Identifier:
                keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/09cd226c8eece830715f778a696e9c2dfc111878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:13:dc:5d:68:bc:5c:75:4c:60:43:46:89:56:de:6e:6b:30:
         fe:d7:08:8d:ea:1d:74:8f:36:a0:a7:15:a6:90:77:07:4b:68:
         66:97:44:40:60:d6:76:61:22:8b:d5:4c:a0:94:b0:10:e0:9a:
         bd:09:07:f6:5f:2f:5d:3a:d0:58:53:0e:4e:74:c3:8b:7f:4f:
         40:55:07:f8:08:8b:bd:b3:63:c8:5e:cd:13:ec:bf:5b:35:8e:
         2b:02:db:36:21:42:34:22:e3:fb:17:ec:77:40:a4:f7:e9:ef:
         a2:f9:46:1e:8e:9d:dc:29:a9:57:bf:a6:80:c5:14:02:34:10:
         9c:b8:78:4a:ed:d2:ac:e9:ee:4a:5c:74:d3:ec:36:b1:cf:e5:
         11:30:c5:b9:e4:9c:0f:0b:ba:0e:59:a2:59:76:c0:8d:90:43:
         a5:07:7a:be:08:11:33:a4:e9:1f:1a:ff:64:7f:22:5a:fe:4d:
         56:76:86:a8:19:39:7f:11:b7:a2:e5:ff:79:7a:80:70:d1:11:
         25:1d:13:03:04:ac:36:2b:4d:1d:54:e7:bf:7d:da:c2:ca:2e:
         0d:85:6f:b0:60:bf:a1:f9:98:23:7b:7d:66:69:95:7b:01:6e:
         6e:67:55:d1:7f:a7:6c:7a:5a:f7:5e:42:42:a8:66:db:e9:d4:
         1e:be:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org