Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/789bcc52f2d5efb1e07a8830df747ee63e27df6d.roa
File:                     789bcc52f2d5efb1e07a8830df747ee63e27df6d.roa (raw, json)
Hash identifier:          7EHF5uAH6R/DQAIjff13oPJPm/Lh7eeeydnlax3AV50=
Subject key identifier:   75:43:B5:CE:11:17:93:8F:42:4B:C2:45:4D:C2:98:A6:7A:A5:80:E7
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       04B476
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/789bcc52f2d5efb1e07a8830df747ee63e27df6d.roa
Signing time:             Fri 18 Feb 2022 13:40:51 +0000
ROA not before:           Mon 13 Sep 2021 03:00:00 +0000
ROA not after:            Tue 13 Sep 2022 03:00:00 +0000
asID:                     271799
IP address blocks:        200.26.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308342 (0x4b476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Sep 13 03:00:00 2021 GMT
            Not After : Sep 13 03:00:00 2022 GMT
        Subject: CN=789bcc52f2d5efb1e07a8830df747ee63e27df6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:04:45:0b:e3:93:fc:f2:4d:d9:22:b3:7b:
                    ef:a5:44:2c:c1:74:23:d1:7c:f2:8a:39:87:dd:ff:
                    55:23:3c:95:b9:b2:91:8c:0a:0a:40:cc:d8:3f:ac:
                    1c:66:47:f8:1c:25:a1:f1:49:ee:50:c2:39:99:9a:
                    9e:eb:fc:58:e3:ce:63:71:32:18:31:7c:62:de:93:
                    61:bf:34:92:c6:fb:09:0c:a3:e1:5f:a2:b6:70:51:
                    94:cc:10:49:ed:df:b0:a3:dc:2f:22:1e:53:94:33:
                    29:bc:d8:0f:3e:86:76:46:91:23:a9:ed:7c:dd:ba:
                    07:fc:bf:8f:e3:21:60:6a:e6:be:c3:a9:16:7c:50:
                    a5:c5:5b:9a:b7:cd:61:9a:64:72:fa:d1:03:90:e1:
                    c9:43:a9:66:d4:b5:69:34:8a:c3:43:ad:bb:a3:bf:
                    56:21:73:33:8d:8b:a1:e3:e5:90:6e:fb:ba:a4:55:
                    1b:df:32:df:46:c8:1b:93:83:03:f2:aa:ed:6e:35:
                    d5:b0:65:62:c3:45:22:00:00:c8:fb:b0:ea:be:61:
                    52:45:27:a5:2c:32:d1:7d:d2:d0:d9:58:2f:c7:ef:
                    21:83:d7:eb:33:fb:d6:bb:2a:19:c5:bb:d9:51:88:
                    56:63:01:35:66:7d:66:27:1f:e1:c2:e5:a9:c6:39:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:43:B5:CE:11:17:93:8F:42:4B:C2:45:4D:C2:98:A6:7A:A5:80:E7
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/789bcc52f2d5efb1e07a8830df747ee63e27df6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:9f:37:f1:15:7f:b6:50:ac:b2:85:ef:df:57:0f:c3:74:d6:
         35:d2:dc:a3:90:6f:c7:aa:b0:53:c7:3a:52:3a:6b:97:7e:d3:
         dc:42:42:5b:d3:6e:f6:83:65:11:bb:3e:70:fe:47:d8:3e:4d:
         5c:cb:a3:39:9f:1b:aa:21:b6:5f:24:0d:0e:e0:2f:16:3c:a8:
         0b:1f:ab:d0:c7:ac:1e:b0:50:48:4b:49:ed:de:8f:db:44:6d:
         6d:1d:67:bf:79:ca:ee:a2:b3:a0:7a:fd:7a:b9:84:d8:34:41:
         b3:9e:94:0d:49:8a:4a:1f:2d:af:35:79:92:f0:45:69:86:15:
         7a:dd:6a:72:ee:13:a5:24:68:83:9b:3e:04:ac:ea:3d:dc:3b:
         72:ee:36:b0:18:cb:20:b1:71:1a:be:50:74:e7:6d:e0:54:d3:
         f2:85:e2:8e:3e:de:a5:21:08:54:a6:fd:56:64:40:77:67:29:
         d8:76:38:6b:cc:e6:e4:c2:4c:c2:0d:04:e1:d7:2c:2c:5d:9e:
         59:85:1c:a7:e5:0b:48:e2:9c:d8:22:14:66:4a:ef:54:ce:80:
         17:b8:bf:3d:dc:dd:31:bd:db:52:b5:30:ba:96:64:98:3a:b5:
         ce:2e:6a:7e:56:ba:49:7e:c0:2b:94:ea:19:27:64:64:7f:f0:
         56:17:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org