Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1345707c-e833-4dd2-853f-47078aa30574/628b452bc8f19833e1ce266bc0d1fd9926511e67.roa
File:                     628b452bc8f19833e1ce266bc0d1fd9926511e67.roa (raw, json)
Hash identifier:          2BfK7iFyyg739oH2DRFMTqvRfjc4UnlQn3lIf56NJMY=
Subject key identifier:   A1:D3:E5:DA:46:66:48:0B:61:DE:B5:23:05:04:3E:C8:6F:90:79:08
Certificate issuer:       /CN=7d296da44982f159e22bf21db5c81ab862e46c2a
Certificate serial:       0CC759
Authority key identifier: 74:34:0F:65:EE:18:D8:94:40:D5:15:24:43:B7:09:BD:3F:C0:3C:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d296da44982f159e22bf21db5c81ab862e46c2a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1345707c-e833-4dd2-853f-47078aa30574/628b452bc8f19833e1ce266bc0d1fd9926511e67.roa
Signing time:             Wed 24 Mar 2021 14:36:34 +0000
ROA not before:           Wed 24 Mar 2021 14:36:34 +0000
ROA not after:            Tue 24 Mar 2026 14:36:34 +0000
asID:                     14080
IP address blocks:        201.150.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837465 (0xcc759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d296da44982f159e22bf21db5c81ab862e46c2a
        Validity
            Not Before: Mar 24 14:36:34 2021 GMT
            Not After : Mar 24 14:36:34 2026 GMT
        Subject: CN=628b452bc8f19833e1ce266bc0d1fd9926511e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:16:43:2b:35:a1:1d:bf:26:55:35:b5:9e:
                    f8:70:66:79:23:0f:0b:75:5a:63:e5:b7:2a:b0:c0:
                    10:f7:9d:a2:df:81:60:63:98:de:4e:4e:b0:c2:8a:
                    9b:5f:e8:33:91:29:fe:38:36:57:17:6f:85:ce:eb:
                    44:fc:0d:ec:20:ab:7d:f5:6b:05:6e:24:28:99:b3:
                    89:98:d4:a0:93:4d:fd:25:a3:ac:40:75:7b:4a:5e:
                    00:79:19:58:8c:62:d9:d4:15:cb:3d:25:1d:3c:e6:
                    97:3f:e8:1f:10:24:d0:5b:d4:bb:6a:f4:57:09:91:
                    38:1e:31:73:14:0d:10:d7:0b:64:d3:fe:46:3b:d1:
                    42:4e:92:08:b9:81:e7:b8:24:ab:05:29:3f:0a:32:
                    47:91:f0:14:d6:3f:84:93:87:6d:25:ca:89:61:f3:
                    5f:35:70:58:a4:b2:d2:2d:0e:0e:47:9c:96:d9:09:
                    fc:7d:86:b0:f0:2f:73:25:14:46:15:a7:7c:fd:dd:
                    eb:55:8e:71:bd:be:c4:e4:f8:ca:f1:62:0f:a8:a7:
                    b9:ac:c5:6d:51:69:be:68:51:9b:e1:fc:3e:80:43:
                    4f:0b:2c:c6:f5:b4:c6:53:0f:3e:2c:d4:00:3b:ae:
                    90:d7:b8:54:08:cf:fa:8d:de:08:14:75:1b:91:4c:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D3:E5:DA:46:66:48:0B:61:DE:B5:23:05:04:3E:C8:6F:90:79:08
            X509v3 Authority Key Identifier:
                keyid:74:34:0F:65:EE:18:D8:94:40:D5:15:24:43:B7:09:BD:3F:C0:3C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d296da44982f159e22bf21db5c81ab862e46c2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1345707c-e833-4dd2-853f-47078aa30574/628b452bc8f19833e1ce266bc0d1fd9926511e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1345707c-e833-4dd2-853f-47078aa30574/7d296da44982f159e22bf21db5c81ab862e46c2a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:56:1e:a9:af:9d:66:a1:2f:11:11:e5:a4:10:74:ed:24:dd:
         3b:af:00:e7:d3:0f:14:60:61:2e:27:d0:10:c1:71:0d:a7:3c:
         1d:f0:10:9f:be:5e:f6:b7:ab:68:8a:82:a5:24:a3:c5:92:0b:
         83:02:51:82:45:52:2e:92:f4:0f:b7:b9:19:b8:f5:31:04:4f:
         9b:50:44:7f:8e:77:b2:b7:7b:6e:c4:1f:50:88:1d:ac:e4:a6:
         ec:fc:a7:c3:30:e9:cf:67:99:34:35:fa:cc:e6:50:5d:34:fe:
         db:62:52:d9:76:fa:d5:a7:b2:7b:4f:f3:97:2f:28:2a:2f:c8:
         6b:73:e1:3b:e0:14:08:f3:32:00:6b:8c:9e:3c:96:d8:45:f4:
         17:ec:13:f5:38:8d:00:73:85:d6:ef:c3:dd:d5:76:a7:c2:c5:
         41:81:45:6b:b8:42:4c:2d:fc:b1:ac:04:90:10:96:22:36:50:
         1f:40:f3:6d:50:ce:76:58:ff:7c:26:74:3c:e2:0c:4f:55:5f:
         0f:ba:e9:3a:85:be:82:e9:fb:f1:a1:d9:da:3d:63:58:e0:04:
         6c:e9:3a:15:b0:cd:09:53:29:e1:12:5f:92:ec:73:92:7a:54:
         88:a1:b4:49:c2:68:31:b4:93:f6:55:3b:74:6c:78:fa:80:09:
         52:2d:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org