Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/c101b75cc9ee34e34349b6e22360b197a32cc393.roa
File:                     c101b75cc9ee34e34349b6e22360b197a32cc393.roa (raw, json)
Hash identifier:          ybQmzM/hG94pFMkEy+7lbmQEiEs5C7jxoc1FiQbv9LA=
Subject key identifier:   B2:33:F3:8F:46:00:2F:DA:D9:A1:B1:68:99:94:E6:B3:81:1B:B7:42
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       11AFC4
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/c101b75cc9ee34e34349b6e22360b197a32cc393.roa
Signing time:             Fri 30 Jun 2023 17:33:38 +0000
ROA not before:           Thu 29 Jun 2023 17:33:34 +0000
ROA not after:            Fri 30 Jun 2028 17:33:34 +0000
asID:                     211432
IP address blocks:        200.26.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159108 (0x11afc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jun 29 17:33:34 2023 GMT
            Not After : Jun 30 17:33:34 2028 GMT
        Subject: CN=c101b75cc9ee34e34349b6e22360b197a32cc393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:12:4e:ff:99:ac:3a:0f:5f:98:0e:08:34:
                    2c:9d:3c:df:ec:22:05:9c:32:33:1f:1b:d0:a2:67:
                    c8:b7:54:2c:4b:ba:45:38:3e:8e:cc:71:34:53:49:
                    99:f4:0b:8a:ac:a8:9f:ae:80:80:f2:56:8e:01:79:
                    47:69:0c:f8:9b:e2:0c:b0:90:b9:c1:4a:ed:61:ae:
                    8c:b5:cd:f9:6c:10:43:75:25:f1:a8:93:32:b0:1b:
                    86:22:3f:62:44:dc:1c:cd:16:13:09:4f:9a:4d:9a:
                    d1:4d:e3:96:f0:d4:80:41:fd:dc:c8:4b:38:f4:4c:
                    39:5b:d4:09:f4:b1:03:c0:6a:d6:bb:78:e8:a4:34:
                    9e:45:e0:e6:cf:48:c4:a1:bd:63:60:5a:e9:df:38:
                    64:29:f8:0f:0a:d8:71:2b:18:c4:de:a4:a6:ad:88:
                    b0:5f:bf:c4:b9:88:bc:47:89:56:b4:d4:46:f3:6f:
                    e4:a8:1b:75:42:ec:27:29:fa:4d:87:f4:98:87:8b:
                    19:f1:7e:6d:09:80:72:c0:de:af:a8:93:73:16:a8:
                    58:2a:aa:29:eb:90:3d:ab:1f:27:96:dd:e2:19:cb:
                    d1:9f:af:b4:3f:e9:8b:c9:c4:88:c9:55:1a:2a:8e:
                    55:52:95:90:e0:8e:cc:82:ef:40:6f:b3:60:d9:36:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:F3:8F:46:00:2F:DA:D9:A1:B1:68:99:94:E6:B3:81:1B:B7:42
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/c101b75cc9ee34e34349b6e22360b197a32cc393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a4:9b:58:0d:54:a9:93:a1:4e:f7:c8:96:65:8c:b2:45:29:
         16:c7:48:03:30:13:76:ca:f2:88:0c:dd:7a:16:b0:50:04:a0:
         9f:ce:87:a7:98:51:ce:c7:80:8d:ad:29:b2:81:b2:8e:61:a9:
         37:4c:15:96:57:cc:00:6e:77:f4:3c:a8:01:a4:bd:6e:38:96:
         d8:5e:f2:d4:e2:c9:d6:0c:3c:e8:52:ca:30:93:f4:cb:db:3e:
         62:62:73:6c:2e:b4:37:33:58:71:02:d1:69:d1:af:18:59:a0:
         a1:65:67:eb:6d:e0:e7:38:ee:11:c9:42:56:b9:0d:51:3e:98:
         17:4c:66:1a:51:22:bc:66:e7:fc:fa:17:f9:6c:9e:b3:5b:eb:
         5a:9f:cf:31:90:b7:55:e3:7e:1b:f9:8d:22:e8:ca:7e:a3:02:
         20:06:55:1a:f7:45:59:fb:c8:e0:45:e2:c0:fa:e5:61:5a:52:
         1c:a0:9e:3b:42:5d:4b:65:f0:f1:4f:ad:66:dc:74:c2:4c:f7:
         32:79:96:49:51:04:16:32:65:94:a8:78:de:af:8b:c9:84:be:
         15:fe:b4:af:69:61:da:05:70:a1:0a:7a:a2:c6:cc:a1:e3:ed:
         44:43:d8:70:8b:58:70:a6:d8:03:3f:af:72:c9:56:71:13:67:
         6e:e9:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org