Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/11350db79c5576318a633adeaa3e0915f48eb19a.roa
File:                     11350db79c5576318a633adeaa3e0915f48eb19a.roa (raw, json)
Hash identifier:          iTOMDqG6NK461wKj6BNcPPaHfDPUOCg+By1wWJbRFJw=
Subject key identifier:   08:65:4F:6C:3A:E0:E9:59:3D:C1:F9:C8:E9:85:F7:CD:1C:5C:F2:F4
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       18F5FE
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/11350db79c5576318a633adeaa3e0915f48eb19a.roa
Signing time:             Thu 11 Apr 2024 02:11:53 +0000
ROA not before:           Thu 11 Apr 2024 02:11:53 +0000
ROA not after:            Sat 11 Apr 2026 02:11:53 +0000
asID:                     834
IP address blocks:        200.26.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635838 (0x18f5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Apr 11 02:11:53 2024 GMT
            Not After : Apr 11 02:11:53 2026 GMT
        Subject: CN=11350db79c5576318a633adeaa3e0915f48eb19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:39:0b:3a:07:b0:91:45:cd:06:63:01:94:
                    af:07:ce:e4:13:f2:12:3c:d5:08:f5:73:f6:57:ac:
                    47:54:23:38:55:2c:81:05:af:41:7b:0f:03:ba:8d:
                    60:9b:46:8c:56:ae:f2:28:dc:96:a0:06:62:bc:27:
                    62:16:bd:7d:07:e5:6d:8e:80:da:fd:fa:4b:52:c0:
                    57:98:87:91:28:e5:a6:49:97:db:cf:22:12:46:b7:
                    5f:b7:62:f1:5b:9b:e0:85:7e:8f:ba:50:1b:48:f3:
                    dc:92:f1:81:3f:2b:6c:23:c9:2a:b9:d3:3d:0c:ce:
                    71:89:8f:12:b1:d2:95:75:43:74:3f:14:b0:c3:fe:
                    67:ff:11:93:ff:55:33:fd:62:41:47:35:17:c4:c6:
                    c1:42:10:07:56:96:6a:1f:ef:0e:c1:2b:d8:23:fd:
                    2a:1b:1a:24:ea:20:de:24:03:ec:1a:85:e8:0a:69:
                    47:ad:52:61:da:50:94:42:91:a8:74:af:26:fb:9f:
                    5b:13:c2:60:73:52:6f:af:ca:b9:ea:ea:2d:b2:0f:
                    d9:6f:89:1d:b3:3f:2e:d2:43:a0:72:32:e8:e3:07:
                    f7:f2:75:03:01:b5:01:22:c1:9a:3d:f3:98:e2:82:
                    80:14:e3:6b:2c:28:a9:1b:d9:8d:81:73:f9:d0:5c:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:65:4F:6C:3A:E0:E9:59:3D:C1:F9:C8:E9:85:F7:CD:1C:5C:F2:F4
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/11350db79c5576318a633adeaa3e0915f48eb19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:b1:fd:e5:20:d0:6b:52:68:23:96:f4:f2:8e:60:92:21:
         63:91:55:70:89:31:ab:2f:16:ce:d1:67:9e:df:d9:bb:aa:c5:
         9c:37:7f:0c:9f:43:8a:91:de:d6:4f:ea:e1:01:80:17:53:31:
         2f:1b:f8:91:92:b1:8d:f5:4a:1a:f7:1b:26:3a:ee:c7:1f:19:
         e0:96:94:21:7f:61:b2:ba:f3:5e:f4:95:48:30:87:2b:e1:5e:
         99:ab:ce:a7:33:51:e7:2f:9b:18:6a:24:28:df:22:56:9e:b2:
         c8:40:ea:4f:62:c8:35:76:43:24:a0:98:29:0b:af:84:32:3c:
         c0:3b:fc:2a:0c:7e:27:0f:0b:ca:a3:45:2b:76:d0:4f:11:e1:
         d6:46:6c:96:19:dd:57:2e:f9:7f:95:7a:63:11:69:5b:ce:9f:
         34:cd:e4:df:24:df:de:b4:a6:1e:1d:33:fd:67:3a:8f:81:55:
         f7:ca:33:04:bc:4c:81:70:67:e1:20:a8:bc:3b:87:4d:71:8e:
         8d:f4:1d:9e:fb:24:01:a3:e8:e0:2d:69:f1:42:6d:c2:b8:12:
         9d:5e:60:05:cb:ae:55:d0:7e:5c:75:70:6a:6e:f6:b1:b4:9f:
         27:b3:1c:f7:15:a5:7b:31:38:b1:09:45:f3:79:b7:03:35:3a:
         ed:44:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org