Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/121c566a0b8bc3a4918dd5bf83612ffefe6b69ab.roa
File:                     121c566a0b8bc3a4918dd5bf83612ffefe6b69ab.roa (raw, json)
Hash identifier:          hFBkng9aqVsAe+htGuEWHWUrCf3C3unW240Sec2bTwc=
Subject key identifier:   AF:74:50:6C:0C:F7:3B:19:94:DC:CE:98:E8:EA:73:11:E1:28:B0:02
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       16C662
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/121c566a0b8bc3a4918dd5bf83612ffefe6b69ab.roa
Signing time:             Fri 12 Jan 2024 15:47:04 +0000
ROA not before:           Fri 12 Jan 2024 15:47:04 +0000
ROA not after:            Mon 12 Jan 2026 15:47:04 +0000
asID:                     269070
IP address blocks:        200.26.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492578 (0x16c662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jan 12 15:47:04 2024 GMT
            Not After : Jan 12 15:47:04 2026 GMT
        Subject: CN=121c566a0b8bc3a4918dd5bf83612ffefe6b69ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:0c:83:db:ee:61:8f:69:f1:12:ef:84:fc:
                    7a:5d:03:41:a3:c5:0b:04:84:1c:f3:47:64:5e:9e:
                    7b:9f:f3:4e:38:1e:b9:9f:ce:5f:28:cb:99:32:cf:
                    29:45:b6:ab:38:5e:da:fb:15:0c:8d:50:5d:45:b0:
                    1b:bf:57:48:2a:c5:fe:20:94:2b:e1:ee:30:61:66:
                    cd:2d:44:4a:f1:a9:ce:f5:e9:ff:e1:4a:4f:75:e2:
                    ef:22:1b:6b:dd:2f:f2:97:59:89:f6:d8:de:f5:44:
                    18:8b:c1:1a:9d:7a:b5:d9:c4:86:32:28:45:27:31:
                    c8:3e:a0:69:45:75:7e:fd:92:ca:98:5a:1d:7b:f5:
                    d0:61:60:c6:d4:0f:19:b3:82:2b:89:bf:de:d9:c7:
                    e8:10:06:55:c6:61:31:ba:59:6c:0c:e1:2d:ed:8d:
                    94:f3:64:5f:4e:b6:c4:53:fa:01:e5:d0:5f:78:7d:
                    a7:c4:bf:a1:fe:73:f5:7f:b1:26:0e:51:ca:c2:14:
                    36:5a:ee:0d:6e:2b:b6:87:4d:f0:8f:dc:9a:a5:a8:
                    10:c7:b6:2c:6c:80:2b:2b:d0:34:c2:5d:37:5f:92:
                    e9:d0:be:2e:33:e5:f0:84:93:ba:ae:1d:c4:5c:08:
                    8a:4d:f8:65:16:9d:a4:fc:8a:aa:4a:30:7e:e0:de:
                    de:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:74:50:6C:0C:F7:3B:19:94:DC:CE:98:E8:EA:73:11:E1:28:B0:02
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/121c566a0b8bc3a4918dd5bf83612ffefe6b69ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6f:f7:85:aa:e7:45:7c:d4:99:da:bd:94:1c:60:3a:95:00:
         61:21:64:92:22:be:27:57:b7:fe:d9:6d:99:e4:b3:e0:d8:bb:
         a7:9b:cd:17:5c:fc:12:9a:83:ea:e2:a3:94:56:6c:dd:90:07:
         50:45:37:69:57:d7:2b:f2:40:f1:d4:bf:86:ad:a5:5d:e8:5f:
         8c:20:82:a1:c4:a8:2d:e8:1c:cf:e0:ce:17:3d:1b:7f:2b:50:
         8e:0e:e6:90:01:51:b8:5c:58:22:21:c5:6a:e0:08:cc:32:4c:
         40:5b:18:37:f3:75:1c:ef:c6:3c:0f:0d:3c:64:9a:74:3e:2f:
         c2:a4:ea:0b:83:6c:b1:fa:4c:11:a4:9c:57:24:13:cd:38:da:
         84:e5:6c:3e:3f:79:f3:5e:ef:a9:c5:eb:3a:74:66:16:c2:51:
         81:d6:9c:32:ab:1b:dc:78:f1:0c:6e:d0:73:3f:b9:5d:6c:c6:
         0a:48:40:cc:10:51:4a:c6:98:58:37:11:e1:0a:73:8e:ca:f3:
         08:6f:ba:22:45:08:fc:63:89:06:7d:79:fb:24:50:18:ab:5a:
         ab:8f:c5:f5:80:71:11:07:30:31:b3:02:d2:c9:84:fa:31:64:
         06:a5:2b:06:16:69:7f:d2:2c:9c:8b:0b:a5:43:95:70:6f:c8:
         26:36:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org