Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/44f38fdbe854637e0c808f6b381ad1e9c0365343.roa
File:                     44f38fdbe854637e0c808f6b381ad1e9c0365343.roa (raw, json)
Hash identifier:          cmBIcu134+Rs0sCz/Tc1JJOq8s4i1lyjtu1fK3QS/Y0=
Subject key identifier:   09:5F:87:30:B9:B0:64:47:2E:43:C3:4D:44:01:AB:E1:DC:C4:E5:60
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       142FF8
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/44f38fdbe854637e0c808f6b381ad1e9c0365343.roa
Signing time:             Wed 04 Oct 2023 11:51:48 +0000
ROA not before:           Tue 03 Oct 2023 11:51:48 +0000
ROA not after:            Sat 04 Oct 2025 12:51:48 +0000
asID:                     211439
IP address blocks:        200.26.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323000 (0x142ff8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Oct  3 11:51:48 2023 GMT
            Not After : Oct  4 12:51:48 2025 GMT
        Subject: CN=44f38fdbe854637e0c808f6b381ad1e9c0365343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:c6:9e:b5:c3:9d:15:d5:4c:e2:ec:f4:43:
                    2c:46:62:31:cd:ec:81:0b:a1:d8:eb:30:32:58:8c:
                    0d:28:31:a0:3f:48:17:5b:29:88:10:a1:5a:9b:1a:
                    8e:78:02:5e:6f:3c:24:46:c4:3f:59:44:18:1b:1a:
                    1c:dd:e6:6d:bd:82:5f:bc:97:fa:bc:43:87:f9:6b:
                    ed:0f:98:9a:7f:f0:7b:b5:55:28:6f:10:74:09:b5:
                    1d:25:6e:50:ab:c5:4e:c3:b5:6a:1a:d7:67:14:80:
                    e7:cf:49:37:fd:64:80:a5:66:f1:42:c2:19:10:d7:
                    ec:a9:b9:1b:c8:c9:bd:fc:c4:e3:55:64:3a:ac:2b:
                    0b:0d:6c:f9:44:28:7e:b2:65:da:46:c3:a0:2d:94:
                    6a:23:db:94:5d:3a:a0:7f:84:19:3c:23:f1:ba:95:
                    f8:07:5f:b6:3a:f5:5a:81:aa:ab:82:a4:7e:0b:32:
                    d3:85:45:4a:9e:ab:1e:ba:72:77:5f:b2:03:0b:11:
                    1c:e6:0e:b6:60:21:e8:49:1a:81:30:53:10:df:ad:
                    61:70:81:48:26:a7:2a:96:fe:a7:49:68:da:be:8e:
                    8c:f8:b0:66:c1:5a:8b:27:7e:19:7c:b6:6a:23:b7:
                    55:ff:d9:9a:0d:85:9b:4d:d4:c7:ac:b8:60:ec:ff:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:87:30:B9:B0:64:47:2E:43:C3:4D:44:01:AB:E1:DC:C4:E5:60
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/44f38fdbe854637e0c808f6b381ad1e9c0365343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:6b:fc:b5:81:34:18:e9:8a:03:91:b6:e6:be:95:ad:44:
         43:c4:b7:91:c3:a9:ad:64:87:9b:20:2f:20:b1:46:d1:9d:9d:
         59:6e:8b:5e:92:4d:2c:27:c8:18:c6:fc:ca:69:12:57:74:1e:
         eb:d9:a8:86:6e:56:ac:db:54:8f:5d:8b:9f:ca:d4:d2:26:43:
         0a:88:51:f6:a3:43:1d:54:67:91:13:f1:cb:92:1b:58:08:d2:
         38:17:75:2a:fa:7a:5a:a0:f6:a5:49:19:aa:5a:41:cb:76:71:
         af:9d:d6:a8:09:38:16:06:6f:d1:34:26:3e:f6:9e:ca:cc:33:
         bb:ae:7e:b5:46:1a:a3:8c:cb:4b:e4:99:4a:7e:36:57:32:80:
         bb:e6:6a:33:12:49:e4:c1:93:5a:70:ff:39:ad:9d:c5:88:a2:
         99:90:0f:20:64:b9:47:1b:6c:d2:2b:64:72:8e:81:76:5e:92:
         7b:85:79:d7:4a:f1:08:e3:44:4c:e5:82:f2:b6:67:3c:b4:45:
         4d:10:dc:1a:22:45:1c:aa:49:27:e2:eb:73:e9:74:8d:6c:78:
         23:d7:0b:35:d3:a2:cb:dc:c8:f0:1c:b7:17:e3:4b:41:04:b3:
         2a:0e:3d:e8:9f:f0:e6:66:53:fe:be:21:e1:02:77:cb:5b:8e:
         e3:ff:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org