Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/45f03e8e11bff445005a5dbd5dc640ba1fad8c4e.roa
File:                     45f03e8e11bff445005a5dbd5dc640ba1fad8c4e.roa (raw, json)
Hash identifier:          roCCoBxt50EnRXtiMLKfcm8bDug667xpun3GB8xuQwE=
Subject key identifier:   77:EA:AD:40:1A:9C:D6:28:9E:50:7D:1F:33:AF:96:35:B4:74:03:D1
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       02CBD1
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/45f03e8e11bff445005a5dbd5dc640ba1fad8c4e.roa
Signing time:             Fri 03 Dec 2021 12:59:49 +0000
ROA not before:           Fri 03 Dec 2021 03:00:00 +0000
ROA not after:            Sun 03 Dec 2023 03:00:00 +0000
asID:                     25369
IP address blocks:        200.26.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183249 (0x2cbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Dec  3 03:00:00 2021 GMT
            Not After : Dec  3 03:00:00 2023 GMT
        Subject: CN=45f03e8e11bff445005a5dbd5dc640ba1fad8c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:38:da:ba:ba:95:c9:47:3f:19:87:14:ab:
                    73:6d:6d:cb:9c:f0:97:70:20:7d:fb:09:c3:93:e5:
                    44:65:d5:4d:9c:c3:e5:10:98:de:3c:be:7c:5a:b7:
                    0d:3e:31:e6:34:2c:13:74:41:0c:57:da:79:52:f0:
                    4b:33:20:46:fa:c3:56:44:4f:6f:b1:de:c1:95:7c:
                    6d:86:d1:75:ad:9e:8a:0c:18:c9:5a:b5:bb:17:5b:
                    2e:b2:fe:a0:30:c3:6d:12:df:d9:fe:b7:e2:7b:46:
                    3d:8b:25:2c:07:ae:e2:28:6b:c8:d3:b8:e6:5a:1c:
                    99:db:c1:f6:09:9c:c2:2f:97:60:fc:9d:50:82:56:
                    be:54:1a:ac:a6:d7:5b:a5:cf:15:70:89:f9:0c:a7:
                    3e:22:d0:dd:07:72:dd:69:1d:62:f8:f0:8b:eb:b8:
                    52:f2:09:d6:81:4b:75:d6:3f:e6:2e:05:3b:57:eb:
                    35:c1:83:86:36:8a:9d:c1:9d:f9:5b:c0:07:30:05:
                    3a:93:f7:e1:9f:38:4e:f1:b7:6e:f9:dd:c5:08:20:
                    42:f0:90:7a:62:fa:02:b4:f7:49:48:f4:aa:81:9c:
                    eb:96:a1:c6:ab:2e:a3:4b:0e:ec:d0:e5:06:48:6e:
                    40:cf:02:b7:df:2d:f0:b2:f5:8b:f6:a0:d9:bf:05:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EA:AD:40:1A:9C:D6:28:9E:50:7D:1F:33:AF:96:35:B4:74:03:D1
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/45f03e8e11bff445005a5dbd5dc640ba1fad8c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:53:07:e4:fb:e1:82:30:79:aa:53:7f:ff:2b:c9:3c:12:
         0d:d8:d9:3a:79:cb:a7:61:72:57:90:cc:b0:76:a4:ab:a0:ce:
         28:eb:d7:26:3f:da:6f:4f:34:a4:e9:26:b4:15:98:41:2e:55:
         7a:31:0b:d6:7f:2e:ac:d1:76:6e:59:c0:66:bf:56:69:84:ad:
         d0:e7:a2:c1:0f:2b:43:cc:6f:92:15:b1:d7:b8:4a:3d:b5:09:
         7a:e2:e0:5c:c7:3e:28:f2:c3:33:de:e4:02:2d:82:70:96:2f:
         6a:e2:0d:4e:2c:2e:39:c0:b0:4c:6b:17:2e:89:5a:8f:ac:91:
         a4:25:1c:fa:09:d3:9f:c7:93:b4:d1:a9:90:bb:4c:d0:2f:a5:
         57:70:ee:1f:70:cc:b1:e4:17:9c:65:d7:c0:35:2b:40:67:0a:
         f7:90:24:55:6f:1a:72:0b:b6:02:38:70:78:57:fb:3c:65:9b:
         3e:9d:21:a8:75:36:e9:15:26:7a:e7:ae:1d:64:3d:e7:90:af:
         a9:8a:d4:d6:90:be:8e:aa:e3:5f:31:fb:e6:6b:5c:39:c9:45:
         b1:71:63:5f:08:40:37:61:77:cb:63:a2:32:52:cb:aa:0d:d7:
         b6:c4:ae:c2:38:5d:da:bd:f3:b4:67:bc:17:87:98:28:31:90:
         17:17:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org