Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/dafbda422b8b98d230eb4a596fee0fb67f2d62b9.roa
File:                     dafbda422b8b98d230eb4a596fee0fb67f2d62b9.roa (raw, json)
Hash identifier:          mW7JeLux7u56R0o+GywstsvjAj/ylB7opAe9zTAbIu8=
Subject key identifier:   D0:C2:B7:99:16:67:F8:A3:AE:A3:C1:57:48:1D:12:D9:55:A9:D0:E2
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       11AC75
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/dafbda422b8b98d230eb4a596fee0fb67f2d62b9.roa
Signing time:             Fri 30 Jun 2023 17:33:37 +0000
ROA not before:           Thu 29 Jun 2023 17:33:34 +0000
ROA not after:            Fri 30 Jun 2028 17:33:34 +0000
asID:                     61317
IP address blocks:        200.26.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158261 (0x11ac75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jun 29 17:33:34 2023 GMT
            Not After : Jun 30 17:33:34 2028 GMT
        Subject: CN=dafbda422b8b98d230eb4a596fee0fb67f2d62b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f5:2e:90:91:7d:79:67:7e:4d:bc:06:84:d2:
                    b3:30:09:d5:7d:b8:7c:c6:8f:02:b2:d2:aa:ea:df:
                    be:4e:68:b5:8b:d1:e6:47:c7:3c:47:87:1a:a6:fb:
                    37:a7:d2:fe:07:38:c9:7f:1f:d2:c5:ae:86:30:f1:
                    1e:78:7d:9b:60:74:2e:ff:a9:10:b2:d7:c0:56:70:
                    f5:61:2b:83:2a:79:e4:9e:3b:3f:27:a6:c5:3d:10:
                    37:e6:9c:00:bb:8c:33:fa:2d:27:e6:bc:9a:25:65:
                    e4:c7:77:57:d8:23:50:a9:13:18:80:d7:db:43:4d:
                    d8:34:97:fe:5d:83:fd:c3:d2:c8:5f:df:77:e7:2e:
                    db:13:4f:e0:cf:a9:6d:3a:d6:9c:44:17:2b:ee:ba:
                    88:93:72:cb:7e:bf:f4:a8:aa:18:46:f8:cc:11:d8:
                    5e:b2:2e:b2:de:b3:1c:9c:5c:ca:0b:f3:b1:ef:2b:
                    c1:76:8e:c1:e6:95:ca:91:c1:e3:0b:e3:e7:43:24:
                    7b:5f:d2:0e:de:e6:89:89:0a:22:dc:65:9c:5c:3c:
                    a4:68:26:bd:4f:77:b1:c2:07:1a:0f:c1:b8:6e:dd:
                    51:8e:d1:71:ec:d9:de:19:fb:fc:96:a0:32:a9:ff:
                    cb:47:fd:11:3c:1f:d8:10:c8:73:5e:b8:35:9f:28:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C2:B7:99:16:67:F8:A3:AE:A3:C1:57:48:1D:12:D9:55:A9:D0:E2
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/dafbda422b8b98d230eb4a596fee0fb67f2d62b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:ab:92:77:6f:35:1c:db:5a:17:56:02:f1:db:2f:d5:52:
         65:9a:1a:47:ea:66:d4:8e:aa:af:0d:20:08:ac:59:8a:2d:18:
         a7:6f:a4:dd:6d:1f:0f:36:c4:4b:55:3f:c0:d3:38:3c:15:9d:
         48:cd:f0:91:47:38:27:f0:18:de:0e:e4:87:7f:5e:20:54:4e:
         ad:83:9b:cf:32:db:92:14:4e:04:81:93:7f:0b:ef:60:6c:ac:
         81:a9:fc:5d:ca:3b:de:98:49:d6:ce:57:06:f2:8a:45:c5:22:
         34:9b:40:0f:84:1c:88:95:dd:df:77:bb:5a:b1:43:28:96:6b:
         bd:26:06:6e:26:ab:2e:39:3c:ff:4d:e3:e3:10:6c:b4:8c:63:
         e9:c8:c8:40:1e:ce:27:76:05:f4:4c:0a:2b:3e:4e:cc:89:8f:
         e7:34:20:75:d3:6b:a4:34:40:88:92:11:14:7c:b2:7f:7c:20:
         a4:2c:73:a7:46:64:99:13:31:d8:33:60:d5:c2:fc:e6:25:58:
         7c:35:44:4c:8c:76:d7:b4:6f:34:93:26:25:36:fe:12:a5:d1:
         f8:c1:41:21:da:00:4b:12:6c:93:32:a0:81:c0:7d:e3:05:78:
         a8:f7:ba:9b:8b:6f:7d:38:4b:ca:65:9b:de:02:ca:9b:da:c2:
         38:ba:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org