Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/015e9c4aeccb057b839435cafd35c02c5e5cb9f3.roa
File:                     015e9c4aeccb057b839435cafd35c02c5e5cb9f3.roa (raw, json)
Hash identifier:          +9JPYte49urUJJjPexVoZ/yhRqQxl+mefZRmylq723I=
Subject key identifier:   95:76:5F:81:9F:EB:94:15:99:5E:36:F6:DA:24:58:35:7A:3F:28:67
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       14B184
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/015e9c4aeccb057b839435cafd35c02c5e5cb9f3.roa
Signing time:             Mon 23 Oct 2023 11:39:29 +0000
ROA not before:           Mon 23 Oct 2023 11:39:29 +0000
ROA not after:            Thu 23 Oct 2025 11:39:29 +0000
asID:                     62390
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356164 (0x14b184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Oct 23 11:39:29 2023 GMT
            Not After : Oct 23 11:39:29 2025 GMT
        Subject: CN=015e9c4aeccb057b839435cafd35c02c5e5cb9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:e0:d0:92:4f:70:83:5a:a0:f5:eb:a9:80:
                    c3:ad:5f:86:35:d5:94:4a:aa:2f:49:7b:47:54:2b:
                    26:ac:38:2e:a3:8f:59:22:4a:e0:ab:98:d4:68:46:
                    fc:eb:62:9c:04:47:f4:69:33:1a:10:46:5f:ee:81:
                    03:00:ca:38:31:0d:c6:71:3a:4c:1f:2a:ed:b4:d0:
                    7e:6d:cf:e0:66:f3:d6:a1:3c:87:8b:ab:ff:3b:83:
                    f6:80:7e:63:04:dd:ce:ff:4d:60:fd:2d:c4:21:ce:
                    8f:01:4e:81:4b:d4:16:f5:ab:ae:67:30:67:ff:58:
                    13:64:a8:3c:9d:cc:05:18:18:e7:f1:cf:a7:ba:67:
                    f4:0b:7a:26:0c:54:46:02:8f:65:4b:66:13:04:4e:
                    98:6d:53:d0:3f:73:47:18:16:35:ad:3b:c8:b4:2d:
                    3f:b1:ff:3b:03:8f:bf:ed:ce:de:e1:39:27:31:96:
                    b4:e1:ce:dd:80:33:cf:1c:38:d9:bc:56:c8:f4:c1:
                    6c:d9:9a:48:5b:1d:89:fb:73:09:ee:41:5b:36:34:
                    13:84:03:b5:5e:64:30:ce:f0:d0:0c:ed:5c:52:e1:
                    d9:8f:2b:4a:76:06:ef:cf:69:12:e7:8e:ad:27:cf:
                    6c:c6:5d:85:08:ad:32:e2:31:30:fe:c5:72:95:95:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:76:5F:81:9F:EB:94:15:99:5E:36:F6:DA:24:58:35:7A:3F:28:67
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/015e9c4aeccb057b839435cafd35c02c5e5cb9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c1:dc:78:3a:99:b3:50:0a:7a:d8:34:f3:43:c2:a5:e6:1d:
         f9:bb:51:a8:cb:5e:21:f3:d6:c1:f7:77:a8:b6:43:d6:d9:95:
         bc:c0:5a:3e:ce:f9:76:4c:ba:7d:14:53:33:97:20:69:31:3e:
         ce:76:b4:0e:97:2a:2d:1a:ec:cf:17:19:80:2a:9f:9b:e8:e3:
         0d:96:16:89:5b:bb:38:1d:c3:d7:c5:bf:2d:f4:76:77:5d:fb:
         54:da:38:2c:53:1e:bb:09:00:2f:77:31:7f:6b:95:4a:16:2c:
         be:dc:4b:10:e7:20:bf:86:a8:97:2a:53:f0:8a:d6:7d:33:a7:
         e0:1f:7a:b4:95:8e:ca:9d:d8:fc:4d:80:64:7b:73:53:d4:de:
         dd:2b:4d:a3:c4:75:31:07:41:be:11:4c:c9:b1:08:27:ab:90:
         6e:51:19:c6:62:c5:c9:de:32:b9:c4:f7:33:3f:5a:a3:9a:94:
         b3:fd:59:45:74:1d:b2:19:fd:11:c1:c4:06:65:52:62:85:88:
         d9:8a:3e:d9:bd:f0:dd:cf:9e:2b:1a:c2:18:6a:15:3a:ec:89:
         fd:db:72:29:05:92:b4:75:7f:54:b0:40:41:e8:7a:c8:d2:11:
         97:27:a1:24:01:1e:94:8a:02:25:1b:92:4c:ed:ad:11:9a:4c:
         94:cb:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org