Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/bdcac3b66bf887dde4ba088a19f15ac0b3ef0041.roa
File:                     bdcac3b66bf887dde4ba088a19f15ac0b3ef0041.roa (raw, json)
Hash identifier:          BMaxQe8r0sIVzaggSmqXWXDr/SccIMaRYCa5xuscGtg=
Subject key identifier:   BC:EE:52:CE:F6:04:13:29:07:14:F8:92:D5:9F:8A:56:38:DC:EC:F2
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       0F31F7
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/bdcac3b66bf887dde4ba088a19f15ac0b3ef0041.roa
Signing time:             Tue 04 Apr 2023 02:40:19 +0000
ROA not before:           Mon 03 Apr 2023 02:39:33 +0000
ROA not after:            Fri 04 Apr 2025 02:39:33 +0000
asID:                     834
IP address blocks:        200.26.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995831 (0xf31f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Apr  3 02:39:33 2023 GMT
            Not After : Apr  4 02:39:33 2025 GMT
        Subject: CN=bdcac3b66bf887dde4ba088a19f15ac0b3ef0041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:e4:45:04:9b:20:e9:8d:5b:8b:d1:41:59:
                    bd:b0:d9:01:83:17:aa:68:d7:63:20:76:c2:ba:0d:
                    2b:ce:f1:d2:be:12:cb:c3:23:39:2c:d8:4e:2b:d2:
                    e7:bb:a9:e4:b9:b1:ab:36:92:ae:d4:0c:a1:da:29:
                    4e:b2:90:1b:88:d5:f6:09:2e:6f:eb:fa:ef:a8:40:
                    06:8b:22:fb:92:ae:94:16:a0:a2:2d:df:a4:4b:52:
                    c6:86:7f:de:05:1a:5b:04:eb:85:73:a0:f9:e2:ae:
                    5c:30:46:f2:a5:a6:a1:1f:06:3a:86:79:c4:18:fb:
                    8a:3b:d6:23:e2:8e:3d:2f:bd:be:50:1d:53:fa:6c:
                    7f:1a:0b:16:d7:31:e1:e4:b4:b4:89:cc:74:8c:cf:
                    24:b0:31:16:02:d3:08:e5:3c:86:25:14:f7:be:b5:
                    b6:ad:71:b0:d2:c1:84:5f:d3:b3:04:1f:e4:db:14:
                    f2:f1:40:34:e6:45:dd:a8:ab:57:0e:dd:d2:21:c2:
                    ee:b3:94:56:19:09:67:c6:28:a3:a6:1c:5e:9c:7d:
                    43:67:60:40:da:92:d7:e6:0a:c5:24:df:08:d4:28:
                    6b:10:49:91:c1:e0:db:ee:2e:3b:c8:79:fd:f3:35:
                    ae:0d:fc:da:ca:27:8a:b4:b3:91:4f:09:1b:db:49:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EE:52:CE:F6:04:13:29:07:14:F8:92:D5:9F:8A:56:38:DC:EC:F2
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/bdcac3b66bf887dde4ba088a19f15ac0b3ef0041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:48:42:0d:d2:e8:18:ee:eb:bf:5b:25:f2:fa:59:b6:5e:04:
         c1:32:fb:d6:76:3f:21:b9:63:78:ba:b8:c7:90:24:42:58:68:
         01:96:22:cc:36:5d:98:09:be:2c:13:df:e8:3e:df:fb:32:80:
         22:91:38:f4:22:cb:f0:5e:9a:f9:91:1a:98:b7:cf:8b:e8:aa:
         d7:8e:f5:ba:c6:38:27:cb:38:06:22:c0:5e:ff:95:21:c3:35:
         a1:3f:26:e0:e8:b4:ad:80:ec:5e:23:d1:30:ef:be:db:97:b7:
         6d:60:44:86:eb:6d:9f:e9:f0:2f:72:d3:37:70:87:cb:b2:56:
         e5:b6:77:a6:e1:72:49:ed:5d:fb:e1:6a:a1:d8:12:71:16:e5:
         08:d6:62:89:32:66:82:e4:49:82:30:47:35:9a:7e:0d:d9:8a:
         0d:1b:81:67:1b:be:7d:5b:dd:ef:6b:99:b4:63:8c:77:6f:11:
         9b:07:08:fc:7a:a2:9b:c7:f8:36:cc:cd:86:c4:72:dc:d6:66:
         78:40:d9:15:ab:2f:57:6a:4d:3e:22:af:08:ab:d5:c3:38:0b:
         3b:49:1b:b2:1e:de:24:61:bb:46:6f:97:69:34:e0:79:16:c8:
         30:41:33:5a:45:71:65:c5:44:76:a7:36:0d:da:af:94:67:3b:
         3c:52:83:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:51 2023 by rpki-client on console-ams.rpki-client.org