Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/2a2f851271bff701afbc6057921da014fe500aa6.roa
File:                     2a2f851271bff701afbc6057921da014fe500aa6.roa (raw, json)
Hash identifier:          LaPJUX5MV9zlLGymElxW5pDCEKOA+haLMBUuYkUmawU=
Subject key identifier:   8D:6E:D8:F2:6C:79:25:9A:1D:E9:CB:2A:06:D7:04:F9:C5:E0:45:95
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       0FA3B6
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/2a2f851271bff701afbc6057921da014fe500aa6.roa
Signing time:             Mon 17 Apr 2023 17:47:59 +0000
ROA not before:           Sun 16 Apr 2023 17:47:59 +0000
ROA not after:            Thu 17 Apr 2025 17:47:59 +0000
asID:                     834
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024950 (0xfa3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Apr 16 17:47:59 2023 GMT
            Not After : Apr 17 17:47:59 2025 GMT
        Subject: CN=2a2f851271bff701afbc6057921da014fe500aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:d6:03:bc:33:11:75:5c:0c:2d:10:dc:3f:
                    d3:52:b8:52:44:7d:96:4a:34:d8:80:0f:ff:09:e1:
                    c6:25:0f:ea:d4:29:2b:ac:b9:7b:ac:72:0f:fc:07:
                    eb:f2:42:bf:56:2a:d1:60:93:22:fe:44:c4:83:53:
                    d8:8d:85:44:87:86:b6:6a:3c:14:c8:4b:e0:50:b3:
                    a1:70:98:4d:c7:a3:ae:5c:f3:be:a4:8b:a7:a0:98:
                    49:b6:05:db:00:ab:2b:29:5a:1c:e8:4b:8c:c3:3f:
                    6e:c9:24:de:41:cc:17:b5:95:49:d7:42:22:fe:2d:
                    60:5c:cb:5b:cd:0d:a6:64:55:69:e9:b8:b5:70:37:
                    86:18:f0:0a:a2:1d:39:e7:c4:87:97:a8:58:0a:e4:
                    2b:a4:6b:9e:ff:2e:6a:d2:37:0b:86:03:c3:be:36:
                    26:39:22:7c:14:2d:95:b0:db:94:6b:37:fe:96:46:
                    f1:d5:eb:31:23:09:25:ec:0b:2a:b0:65:50:14:b8:
                    8f:0c:b9:67:ff:98:cb:dc:d3:89:de:5b:dc:b4:1b:
                    45:48:f1:eb:9e:0f:66:bb:21:bb:fd:62:07:d1:3f:
                    82:ae:75:be:4c:80:5d:91:c7:b8:20:52:bc:36:b5:
                    3e:f5:13:03:fd:fc:0f:f4:4a:1c:2c:af:cf:74:80:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6E:D8:F2:6C:79:25:9A:1D:E9:CB:2A:06:D7:04:F9:C5:E0:45:95
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/2a2f851271bff701afbc6057921da014fe500aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:6f:45:39:19:60:42:7e:da:45:17:c8:af:1c:9c:53:34:
         85:af:0d:6c:a2:c6:9b:93:08:92:db:0a:c7:5b:fe:4c:57:cc:
         d7:b4:c9:33:2b:40:f0:64:66:07:83:ff:d7:c6:51:4f:d7:43:
         8b:a7:33:b9:54:86:47:36:bc:b3:d0:1e:5f:0f:3e:f1:25:6d:
         1d:6b:f9:4a:0d:f1:5d:f1:0e:42:a4:66:e9:ec:f7:b8:7d:d7:
         c3:4a:2f:27:a0:13:47:e1:82:3a:c8:a5:d6:d3:19:91:e6:f2:
         b2:0f:71:ce:a0:5a:2d:b1:55:00:0e:f4:4f:13:eb:75:81:cb:
         3f:36:67:23:6a:d6:fe:00:cc:61:a1:a7:b6:1c:39:c0:7a:ef:
         87:57:f4:46:c1:2a:f3:11:2e:e4:de:7c:63:5d:ea:d1:1e:d3:
         76:b7:be:b8:0b:31:ff:ae:a6:3a:30:d5:75:f2:60:a2:19:1b:
         20:96:8d:1c:f4:f5:75:a3:d5:9a:bb:0f:20:ee:ef:6b:1a:00:
         73:fc:76:77:e1:ca:1b:b5:f1:97:f5:85:95:37:8c:19:a5:6d:
         16:7f:17:d8:09:64:18:e3:b4:a3:b1:96:81:48:7c:71:b7:c4:
         5d:6c:4b:4e:48:0c:49:ca:08:eb:3f:1b:be:be:b9:b8:52:d6:
         5c:5d:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org