Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3b7ff46035ed9f57e4dfe63666326eca4eec3148.roa
File:                     3b7ff46035ed9f57e4dfe63666326eca4eec3148.roa (raw, json)
Hash identifier:          VgxO5RGN4iDst4ntDyftCdPsNOB5pvrNHdUTBYO5i2w=
Subject key identifier:   13:E1:11:F6:B0:8F:08:DB:10:E2:A7:E9:33:F8:77:C0:AD:B9:ED:5D
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       12533B
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3b7ff46035ed9f57e4dfe63666326eca4eec3148.roa
Signing time:             Tue 25 Jul 2023 02:24:50 +0000
ROA not before:           Mon 24 Jul 2023 02:24:50 +0000
ROA not after:            Fri 25 Jul 2025 02:24:50 +0000
asID:                     264997
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200955 (0x12533b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jul 24 02:24:50 2023 GMT
            Not After : Jul 25 02:24:50 2025 GMT
        Subject: CN=3b7ff46035ed9f57e4dfe63666326eca4eec3148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:a3:84:d3:ff:64:6d:54:dd:18:54:6f:8e:
                    7c:20:5f:95:d2:b0:78:f4:c7:e9:b9:1e:2a:28:7b:
                    89:57:7f:4f:f1:15:fa:41:c5:74:09:82:28:54:60:
                    e7:c4:85:7f:c1:80:e3:48:f6:d5:84:af:4a:6a:bf:
                    7e:59:36:07:f5:70:65:81:3c:df:f7:59:ed:52:d9:
                    f8:1f:ca:91:09:a0:98:d5:7f:99:89:14:f5:0f:c2:
                    3b:ed:ac:bf:74:00:b3:70:46:d1:7c:2a:da:0f:97:
                    d9:9c:fb:2b:89:d7:b1:d9:f8:52:cf:f3:a7:01:91:
                    22:17:2e:c5:e2:78:77:df:4e:62:59:4f:b2:06:a9:
                    90:62:d6:5e:c1:73:dd:62:bc:3d:27:14:b4:e6:59:
                    2c:7f:8f:88:b2:9a:50:aa:af:21:57:5d:ca:54:6c:
                    48:13:98:d1:d6:97:39:8e:a4:3d:2f:05:28:5d:8d:
                    c1:22:81:20:f1:c4:22:d8:80:1d:34:ec:b1:f7:a7:
                    c3:57:1c:ce:3b:45:8d:5c:0b:fe:65:b2:f8:61:68:
                    93:97:79:ec:a0:01:81:c8:6d:3b:a8:30:73:27:2f:
                    18:9c:e4:60:99:29:bc:33:54:ef:6f:eb:7e:8c:c3:
                    40:b0:ef:13:4e:ad:6a:c4:fa:84:e3:ce:88:d3:b1:
                    f2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E1:11:F6:B0:8F:08:DB:10:E2:A7:E9:33:F8:77:C0:AD:B9:ED:5D
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3b7ff46035ed9f57e4dfe63666326eca4eec3148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:41:2e:6b:bd:a0:e2:bc:61:5d:fb:94:c5:fe:0f:31:8f:
         00:e0:14:e9:a9:20:d3:dd:17:0e:a6:cb:e9:96:3b:c6:81:12:
         3f:6d:71:92:67:88:1c:15:16:b2:ed:d5:29:4b:7b:df:4f:54:
         68:02:8d:42:75:5c:45:cc:d7:d9:6a:b8:e7:04:06:cf:bf:4c:
         c7:05:37:7d:6c:28:e4:3a:49:98:ce:57:74:39:15:c5:0a:df:
         d3:b9:71:6d:30:30:02:14:eb:e6:85:06:b3:05:0e:38:81:82:
         41:7c:c6:9f:84:07:e9:2a:5b:fd:91:6b:af:19:60:0d:60:e6:
         7c:c1:04:4b:2c:17:b3:a6:64:10:90:9d:c0:c3:45:e6:89:26:
         50:87:7d:69:f8:c6:16:6b:dd:ad:5f:39:dc:4c:8b:22:d3:3e:
         b7:3a:97:2d:41:cd:12:41:f2:7c:49:e8:f9:03:f5:56:c5:ac:
         47:6a:3d:5e:7a:69:b5:65:ef:d4:f7:90:b0:e8:dc:b3:ee:5d:
         9d:ae:85:a4:82:48:c0:36:4f:10:a2:c6:2b:bb:46:88:27:91:
         69:24:76:67:e0:66:0d:e9:15:50:c3:ac:2b:f5:da:3b:b5:e8:
         1a:59:8c:14:42:37:78:47:a8:3a:cc:77:40:b0:5c:26:f8:f9:
         9c:da:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-ams.rpki-client.org