Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/9cdb83668821ea36bd254787944e46643580dd95.roa
File:                     9cdb83668821ea36bd254787944e46643580dd95.roa (raw, json)
Hash identifier:          Bsi+WrjqBI1EIFlV/bi82kLAZIprgV4mO/SXTVhCjWI=
Subject key identifier:   36:7A:62:2F:E6:A8:EA:D2:CB:EF:52:A4:84:30:86:37:CB:64:8E:A5
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       16B17D
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/9cdb83668821ea36bd254787944e46643580dd95.roa
Signing time:             Wed 10 Jan 2024 16:29:19 +0000
ROA not before:           Wed 10 Jan 2024 16:29:19 +0000
ROA not after:            Sat 10 Jan 2026 16:29:19 +0000
asID:                     834
IP address blocks:        200.26.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1487229 (0x16b17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jan 10 16:29:19 2024 GMT
            Not After : Jan 10 16:29:19 2026 GMT
        Subject: CN=9cdb83668821ea36bd254787944e46643580dd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3e:55:d7:70:53:fe:ca:76:5d:ce:a7:86:c3:
                    8d:87:a2:9c:7a:df:83:97:ac:a0:7c:97:b9:65:cc:
                    3c:3d:a4:2a:8e:af:c3:33:96:88:8b:39:01:14:31:
                    27:7e:9b:8f:1f:e2:5f:af:f5:07:c2:42:e8:c4:90:
                    e9:7c:a5:8b:40:bc:7c:c0:09:18:78:74:e3:11:5e:
                    e6:94:55:f3:4f:7b:97:08:63:60:6f:75:ee:d7:10:
                    79:ad:e0:bc:ed:b6:52:e1:14:90:80:2f:ba:62:89:
                    c9:aa:57:46:82:c0:dc:6d:0b:d1:3b:0e:83:97:45:
                    69:73:69:66:1f:7e:ee:7d:32:74:1b:ea:6c:27:eb:
                    62:29:3c:d6:51:be:f3:ce:51:32:d3:b8:ac:d3:42:
                    56:f4:b1:36:b7:23:83:e8:93:39:a7:d0:11:63:73:
                    69:db:a0:ff:e8:fc:0c:d9:01:8c:17:d7:5a:a0:a2:
                    56:87:b3:c6:8d:0f:8b:b3:fb:a7:35:b4:1c:4c:f5:
                    fc:87:e5:73:72:89:9e:29:52:bb:d3:2a:80:94:08:
                    6c:11:34:34:41:9c:85:a5:6e:3d:05:fc:0f:8f:63:
                    ff:f5:a2:3d:e9:6f:5f:fc:31:12:22:f2:d4:60:0b:
                    cc:9d:f3:9e:63:a6:2e:06:14:c6:1b:08:79:b5:df:
                    f0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:62:2F:E6:A8:EA:D2:CB:EF:52:A4:84:30:86:37:CB:64:8E:A5
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/9cdb83668821ea36bd254787944e46643580dd95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:52:b5:11:87:5c:c7:f5:51:63:d3:83:65:16:03:50:55:d1:
         2a:8f:28:95:00:33:e7:b6:ef:06:91:ed:34:19:9b:01:eb:36:
         3f:37:32:8b:3a:85:af:79:7f:f0:ae:8c:36:e4:b9:dd:79:8d:
         3c:d5:e2:6e:58:03:ea:3d:2c:2f:1b:bf:d9:17:32:6e:cb:d4:
         0b:aa:ff:4d:55:66:56:8e:78:7a:bb:52:f4:e4:23:e3:2e:2a:
         18:04:7b:42:0b:31:d2:a8:40:ab:1b:cd:40:fe:a5:72:5b:0a:
         c9:31:9a:03:2e:2b:77:be:8f:9d:d8:d1:7e:6b:be:c5:f7:9a:
         01:8e:ee:74:94:f7:b2:96:82:13:10:9d:8c:26:a1:3b:fd:bc:
         d5:c3:38:c6:cb:77:5f:56:33:dd:8d:2a:b8:f6:26:ed:a9:4f:
         0f:c0:c4:1c:4a:5e:e0:2d:79:73:41:cf:2b:b7:34:89:4d:11:
         20:77:12:39:e8:57:35:db:b6:df:f8:6d:93:ec:ab:84:e0:63:
         89:56:53:41:77:c9:de:b3:b5:da:46:5e:e2:3a:49:22:a0:e7:
         55:a5:6e:66:7d:7c:3b:0d:59:73:f4:10:a5:80:e7:e0:e7:85:
         39:07:57:37:8d:ca:7e:ef:e9:94:b9:00:10:fc:f5:32:d0:e1:
         96:93:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org