Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3a9cd29480d68e7f933e49f40afdcdcafb5f6c79.roa
File:                     3a9cd29480d68e7f933e49f40afdcdcafb5f6c79.roa (raw, json)
Hash identifier:          dgdhINtABsky20j13rQNA+6oCwRfGF/Ev4lfgHwN/dc=
Subject key identifier:   57:9F:38:C7:04:81:74:D1:48:28:C7:9A:B7:0B:78:C5:DF:23:39:AE
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       0FE972
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3a9cd29480d68e7f933e49f40afdcdcafb5f6c79.roa
Signing time:             Thu 27 Apr 2023 10:16:58 +0000
ROA not before:           Wed 26 Apr 2023 10:16:58 +0000
ROA not after:            Sun 27 Apr 2025 10:16:58 +0000
asID:                     174
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042802 (0xfe972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Apr 26 10:16:58 2023 GMT
            Not After : Apr 27 10:16:58 2025 GMT
        Subject: CN=3a9cd29480d68e7f933e49f40afdcdcafb5f6c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dd:19:59:3a:4f:b4:09:86:a3:b7:cd:f1:ef:
                    b4:38:06:98:4b:63:2e:c6:7b:0c:e9:8b:db:02:08:
                    63:ca:af:eb:fc:a6:61:ae:b0:44:fa:4e:80:5b:66:
                    74:5d:0e:4c:d3:0f:90:c9:9c:e0:87:ea:34:2d:00:
                    6b:24:4a:53:f3:9d:31:28:e8:48:92:b9:f5:c8:a4:
                    48:d6:00:0f:6b:84:d4:2a:ba:68:09:04:26:1b:6a:
                    99:6a:75:ef:d1:2d:27:1b:ac:a4:8f:1b:93:df:1b:
                    5b:05:b6:19:3c:a6:bc:67:59:4b:89:42:f0:68:57:
                    bf:f8:fe:39:d4:8a:bd:11:78:c6:77:1a:80:ff:40:
                    c1:fd:9c:98:4e:7d:85:34:a1:94:db:7c:71:42:b3:
                    a4:d4:44:76:4f:ea:19:52:d7:a9:d5:4b:3e:63:5a:
                    f8:f9:71:93:94:69:94:fe:65:33:ed:32:52:dc:92:
                    b0:a2:57:96:41:08:7d:7b:2c:85:5c:ba:6f:e1:8e:
                    53:01:d7:93:21:3a:d3:19:2f:2b:b3:7c:7e:82:2b:
                    99:00:09:90:d9:6a:56:c3:91:96:2f:14:3f:6b:a3:
                    5a:c4:69:70:40:a2:11:07:cb:2b:93:5b:4f:07:d1:
                    dd:b9:66:6e:dc:3c:13:59:46:07:be:cb:7e:36:8e:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9F:38:C7:04:81:74:D1:48:28:C7:9A:B7:0B:78:C5:DF:23:39:AE
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3a9cd29480d68e7f933e49f40afdcdcafb5f6c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:21:29:e4:98:8a:8a:88:5a:86:59:e0:bd:84:d5:3d:56:96:
         b2:0d:88:0c:2a:4e:36:34:e8:2e:3b:0c:c8:5e:ed:17:64:68:
         b6:e5:fd:11:f3:12:64:07:f3:70:61:1a:7c:a5:da:87:39:09:
         a5:cc:6a:90:e3:3a:3b:9e:26:01:f9:75:cf:32:78:9b:b2:62:
         40:71:50:b7:7b:d1:f2:d0:e6:1a:f4:4f:f4:ee:ca:52:ae:fb:
         8d:bf:36:75:02:4d:3d:b2:d9:82:7c:88:b0:c1:58:3f:b1:13:
         e2:46:5e:90:b0:71:cd:27:95:fe:72:c9:35:e6:f0:44:0d:a1:
         d6:eb:cb:61:95:e0:53:78:87:1f:4c:7a:93:2f:c8:67:f0:bc:
         38:27:13:71:82:0c:f9:2d:0d:54:42:82:5a:f1:e0:ab:a2:22:
         52:b5:f5:99:21:40:84:bf:69:ee:be:ef:ab:66:39:37:6f:46:
         b1:8f:b2:21:02:c4:c1:67:e3:37:18:8f:85:30:b0:74:4d:42:
         3f:34:af:67:e1:44:cb:d7:ae:1a:2a:bb:b1:34:7a:53:19:79:
         a6:c9:ac:6c:bf:ee:3d:2a:10:10:72:5b:67:45:ce:89:56:06:
         c8:d4:65:85:47:0b:1a:98:e0:17:82:0e:42:56:a2:69:86:34:
         5d:97:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org