Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/0c890c44f0abf73da44a74136bee8e6d3c15d404.roa
File:                     0c890c44f0abf73da44a74136bee8e6d3c15d404.roa (raw, json)
Hash identifier:          haQsULpYxzlwPRjgcJizhzn96HmmW9ZKjSDmtNDtVPQ=
Subject key identifier:   AC:85:0A:9F:B9:02:70:A2:77:63:61:F4:8C:EF:E4:14:58:9E:A7:06
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       11A0F6
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/0c890c44f0abf73da44a74136bee8e6d3c15d404.roa
Signing time:             Fri 30 Jun 2023 17:33:35 +0000
ROA not before:           Thu 29 Jun 2023 17:33:34 +0000
ROA not after:            Fri 30 Jun 2028 17:33:34 +0000
asID:                     18747
IP address blocks:        200.26.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155318 (0x11a0f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jun 29 17:33:34 2023 GMT
            Not After : Jun 30 17:33:34 2028 GMT
        Subject: CN=0c890c44f0abf73da44a74136bee8e6d3c15d404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:50:7e:29:b0:80:22:89:2d:b4:58:24:3e:
                    b6:86:d4:95:d8:c3:7d:b0:42:6d:bb:b4:a5:23:b8:
                    d0:82:8a:ee:0c:6f:40:f5:d8:d1:df:18:5e:e8:3f:
                    c5:ae:e2:22:d0:38:a2:a0:7b:78:7f:b5:ce:61:a9:
                    26:b1:f4:0b:4d:77:9b:02:14:58:ea:0b:25:58:18:
                    85:06:10:1c:ed:11:6d:b3:bf:24:7d:2d:d7:be:22:
                    9f:7d:ca:23:f7:22:b8:29:69:f0:68:b2:41:1d:fc:
                    f6:44:55:3b:3c:c9:42:3d:9d:46:60:a1:f3:3a:7a:
                    48:ce:07:53:2d:14:d4:bf:55:77:8a:9a:3e:bd:de:
                    16:c1:b3:b0:a5:8a:5f:47:7a:1e:22:c2:b2:ac:21:
                    03:7a:b1:a4:19:72:4b:cd:83:46:9d:c6:85:9b:00:
                    57:9b:99:25:92:3b:f7:28:2d:b5:7d:13:20:7d:22:
                    20:22:ca:20:de:04:83:5f:3c:05:56:07:63:82:32:
                    5c:43:63:e6:a1:fe:a3:45:b7:48:a3:de:48:3a:07:
                    77:f0:1c:52:e6:78:2a:2d:3c:21:1c:dd:d1:77:bf:
                    38:11:90:57:43:31:15:4c:78:ec:c7:62:38:a5:20:
                    96:f5:50:94:ff:e3:1b:bf:70:ed:25:fc:d1:f7:f6:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:0A:9F:B9:02:70:A2:77:63:61:F4:8C:EF:E4:14:58:9E:A7:06
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/0c890c44f0abf73da44a74136bee8e6d3c15d404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:26:18:79:6d:09:55:31:5d:3f:b1:7a:58:3d:8d:0f:44:
         42:96:98:07:67:1a:c1:26:c9:11:01:e5:15:23:6a:5a:f9:48:
         0f:23:e6:10:36:43:90:04:b8:5e:55:ae:fa:4a:84:3f:cc:e6:
         69:85:6f:a2:cc:e5:40:77:eb:7f:fb:27:86:68:45:c4:19:b3:
         bb:9c:9e:a5:a1:55:59:d6:b5:0a:4e:d4:20:f7:a5:24:a3:01:
         09:07:15:65:ca:67:d1:25:64:f6:2b:6a:a0:60:b7:95:ee:57:
         35:9b:09:80:84:a5:82:73:79:6d:b8:13:18:e1:e9:61:32:a4:
         0b:b7:9e:5f:4c:f8:ab:dc:4b:2f:c4:78:90:bf:9c:e8:ba:a3:
         9c:6c:aa:ff:6f:88:9e:dd:48:fc:7d:a1:bf:ec:3a:21:28:fe:
         3b:fc:ad:e0:b6:66:08:82:b8:c7:77:03:23:3c:9e:69:bf:ec:
         71:06:33:43:95:96:14:f9:10:b2:c8:a8:55:fc:af:b4:1b:30:
         08:54:2f:4f:5b:7e:40:d2:af:23:c4:8d:d6:8d:21:9c:93:e0:
         9e:bd:73:94:76:9e:77:af:41:03:b5:1b:27:f5:67:78:f8:9a:
         8e:93:31:02:16:29:f2:bd:db:db:85:68:2e:72:b7:63:8f:48:
         a6:2a:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org