Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3d6d39576a8dd47acacdac8ac4d0f7c3dfb2bd21.roa
File:                     3d6d39576a8dd47acacdac8ac4d0f7c3dfb2bd21.roa (raw, json)
Hash identifier:          oz7Egzf1F3DIktxYa+eT97jRm4PKSsm6s6ppT+5zQzQ=
Subject key identifier:   9E:ED:4D:EB:8A:12:B0:77:16:39:4A:8F:3F:05:8B:9E:E1:05:41:AD
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       0503A1
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3d6d39576a8dd47acacdac8ac4d0f7c3dfb2bd21.roa
Signing time:             Wed 02 Mar 2022 14:32:36 +0000
ROA not before:           Wed 02 Mar 2022 14:32:36 +0000
ROA not after:            Tue 02 Mar 2027 14:32:36 +0000
asID:                     49392
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328609 (0x503a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Mar  2 14:32:36 2022 GMT
            Not After : Mar  2 14:32:36 2027 GMT
        Subject: CN=3d6d39576a8dd47acacdac8ac4d0f7c3dfb2bd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:3f:f5:96:24:9e:07:52:c9:cd:5e:8a:55:
                    38:83:a4:48:3b:d5:ea:ba:f0:90:dc:c4:1e:20:a4:
                    8f:19:c6:15:80:d6:a6:52:7f:8d:e3:a5:cb:fa:de:
                    d4:34:d0:70:e2:3b:47:c0:70:c9:a2:fc:a3:01:73:
                    82:38:e9:12:cd:b7:fc:87:3f:69:f9:c3:4b:57:aa:
                    c6:08:ad:7b:6a:48:de:14:b1:a3:60:ca:c4:2e:a6:
                    da:34:0e:c4:c2:2a:dc:5b:40:06:50:89:e2:68:df:
                    0f:1b:40:b0:6b:22:f2:ec:ca:eb:3d:db:a7:d7:30:
                    de:ac:84:60:8b:db:c8:a1:8d:5c:1b:6d:36:6a:9f:
                    77:48:78:0e:c0:a3:fe:db:5e:40:47:70:a8:e8:9f:
                    f6:0c:e2:0b:19:8d:ee:70:3a:45:64:d5:83:1b:96:
                    04:a1:27:4d:42:9b:a6:5f:b2:d5:99:8e:8d:a0:2c:
                    7d:a7:61:a0:72:f4:0b:ec:b7:2b:58:98:ac:73:a9:
                    0b:b9:89:7f:1d:f7:2b:cd:6b:dd:74:96:92:3a:ba:
                    8e:fe:cf:4d:a4:37:73:17:96:5e:e4:b0:22:5d:c1:
                    51:e3:6e:9e:db:d0:f2:7a:9a:d0:94:3b:5d:bd:ca:
                    d0:70:7e:ee:f1:95:68:a8:8f:5b:5c:86:f1:0e:bd:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:ED:4D:EB:8A:12:B0:77:16:39:4A:8F:3F:05:8B:9E:E1:05:41:AD
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3d6d39576a8dd47acacdac8ac4d0f7c3dfb2bd21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:94:48:78:d7:42:d5:64:d1:3c:0f:6a:07:79:8d:39:26:
         67:ac:b0:8f:80:91:bf:5f:79:dd:55:04:48:8b:7b:9b:8c:bd:
         6d:10:c0:3e:26:c1:ff:9d:e4:2f:a9:e4:32:c0:29:7b:d9:50:
         2b:9d:b9:bf:ba:c3:90:f3:61:0a:cc:da:fd:cb:76:ee:51:b8:
         5c:a3:65:58:d9:9d:69:3a:39:27:ef:7a:2b:2b:13:db:43:bb:
         0a:df:ff:10:54:b2:37:10:c5:b2:be:84:38:42:c7:9e:cc:83:
         26:5a:6e:3b:b0:b2:57:28:bd:09:4d:ff:5f:4c:a1:da:68:db:
         ab:56:6b:17:46:60:1a:b4:0e:27:35:ea:9d:33:1f:c7:f1:92:
         5d:e0:64:6e:be:5e:9c:a7:1b:93:3b:29:98:5c:56:2a:d7:90:
         c0:82:12:d2:69:02:29:6a:cd:a9:c7:62:97:ba:5a:c3:c4:3c:
         02:e3:cb:8b:f3:8e:ad:27:48:be:e0:2f:9b:58:b8:66:25:3e:
         e9:da:cd:9f:dd:a8:64:2e:69:9b:42:ce:5f:f9:11:4d:bf:8d:
         ba:16:5d:01:0b:fa:63:dd:1e:b5:c6:58:cb:96:32:24:17:df:
         0b:e7:ef:52:5c:24:0b:a8:98:c9:af:bb:ce:fb:60:5b:ec:2b:
         56:64:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org