Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/eb15cec8a94ec2afd5766fd068ba010af0ac6cc4.roa
File:                     eb15cec8a94ec2afd5766fd068ba010af0ac6cc4.roa (raw, json)
Hash identifier:          tzPjZpj5NZaB2Cgx5sy2GYLyCC17RmZQi1AGMsbUJsw=
Subject key identifier:   B6:69:DE:26:1F:DE:E6:2C:BA:86:03:20:60:2E:41:A3:7B:58:3C:C7
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       06D837
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/eb15cec8a94ec2afd5766fd068ba010af0ac6cc4.roa
Signing time:             Sat 14 May 2022 13:23:01 +0000
ROA not before:           Sat 14 May 2022 03:00:00 +0000
ROA not after:            Tue 14 May 2024 03:00:00 +0000
asID:                     49392
IP address blocks:        200.26.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448567 (0x6d837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: May 14 03:00:00 2022 GMT
            Not After : May 14 03:00:00 2024 GMT
        Subject: CN=eb15cec8a94ec2afd5766fd068ba010af0ac6cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2f:a7:b1:54:64:d0:e8:7b:a7:f3:ff:39:56:
                    76:68:7b:52:c0:01:5c:4f:87:a7:b4:61:b6:4b:fe:
                    ba:16:a4:0c:98:98:60:b9:52:4e:0c:ca:f7:7e:e0:
                    32:3f:5b:4c:1b:78:35:8d:3d:b4:27:a5:81:df:ae:
                    a8:49:67:43:5b:d3:cd:6b:b7:6e:99:70:40:62:de:
                    4c:20:8f:36:51:36:68:41:3b:4f:ee:17:0b:26:82:
                    6d:1a:5a:70:cd:9a:3c:eb:b4:38:f7:aa:a5:8b:63:
                    ec:a7:fe:25:5f:83:56:f3:b7:51:64:49:69:59:24:
                    e9:9e:1b:fe:33:93:ac:52:49:40:1f:1a:34:0f:12:
                    d4:3c:90:ed:70:f3:61:43:74:4b:f6:a7:8f:17:61:
                    e7:f8:8f:53:e0:92:61:ce:ed:d5:e0:3a:6a:ec:17:
                    ed:1f:a8:6d:39:ec:4d:0c:84:2e:42:b5:a2:82:df:
                    24:cb:e0:e2:c1:b4:22:0f:69:72:7a:35:d5:95:f8:
                    30:20:41:33:84:83:f2:5d:1b:35:01:85:56:6f:f4:
                    15:42:44:c8:61:b8:eb:91:55:ac:55:ff:0a:ab:fc:
                    86:2a:34:38:4f:d4:a8:fc:cb:0e:73:10:f0:20:fb:
                    77:cc:79:c3:f9:36:16:cb:fb:31:55:ae:7c:23:80:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:DE:26:1F:DE:E6:2C:BA:86:03:20:60:2E:41:A3:7B:58:3C:C7
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/eb15cec8a94ec2afd5766fd068ba010af0ac6cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:07:b6:91:b1:ea:8b:0a:af:a4:a2:55:41:10:d4:dc:59:
         44:9e:4c:85:01:77:64:95:3d:99:4c:7f:17:fc:b5:db:a0:9d:
         50:fd:21:b7:b0:9e:3d:3d:c2:55:46:94:bb:2c:ca:ea:7f:32:
         09:6b:65:94:b8:ec:7a:40:3b:92:67:c3:2d:73:87:36:c5:fe:
         b4:67:7f:c7:87:09:2b:54:c7:47:3a:c1:be:33:39:8c:9b:e4:
         06:9f:eb:8b:7a:0c:53:ab:0b:f6:f5:53:9b:68:e6:fe:0b:30:
         3f:fd:7c:90:27:62:72:34:83:e9:51:a1:e6:e9:9b:0b:08:84:
         da:28:91:91:4a:cc:d7:4a:c7:c0:02:66:fd:ff:91:8d:c2:bb:
         bf:19:43:08:f1:f0:c6:1c:da:08:19:d5:e5:59:57:87:1f:4f:
         02:7e:fc:b5:ed:5f:7c:77:78:4f:03:cc:47:e5:b5:0b:63:b5:
         52:95:25:3a:23:4c:90:51:ce:1c:c0:e3:46:55:f8:bf:94:9a:
         da:c8:e5:32:08:26:3f:a4:b5:c7:c3:da:41:c3:5f:bc:62:4d:
         5c:d6:e3:66:a3:78:12:53:20:e3:48:f5:a6:12:d9:04:fe:27:
         6d:cf:9b:34:00:8d:2e:83:7a:52:ca:3c:b9:2b:18:f3:ba:5a:
         1d:cf:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org