Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/667c9b43720caa3d43820c6cacaab21f92fef393.roa
File:                     667c9b43720caa3d43820c6cacaab21f92fef393.roa (raw, json)
Hash identifier:          HlmDCry+IorqSjVlq3EN8q/zA0mha4MLqljDZ7bxxc4=
Subject key identifier:   B3:30:62:59:F9:EB:58:F3:14:6B:AD:0F:BB:A0:6B:1A:71:9E:17:AF
Certificate issuer:       /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial:       059471
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/667c9b43720caa3d43820c6cacaab21f92fef393.roa
Signing time:             Fri 23 Feb 2024 06:39:44 +0000
ROA not before:           Fri 23 Feb 2024 06:39:44 +0000
ROA not after:            Mon 23 Feb 2026 06:39:44 +0000
asID:                     28541
IP address blocks:        201.159.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365681 (0x59471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
        Validity
            Not Before: Feb 23 06:39:44 2024 GMT
            Not After : Feb 23 06:39:44 2026 GMT
        Subject: CN=667c9b43720caa3d43820c6cacaab21f92fef393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:8d:69:35:53:8d:35:f3:6c:47:3d:30:e3:
                    43:8e:47:f0:d7:d4:23:7d:fa:83:f5:4d:ef:e4:3a:
                    0b:44:c1:83:c0:ff:ac:32:92:31:db:75:bc:9e:65:
                    5b:a2:21:01:c4:2b:53:cb:b8:ff:01:8f:e3:a4:d2:
                    d5:5d:03:5f:65:57:63:d5:31:0f:26:85:01:e7:7d:
                    ab:46:a1:16:f6:10:c3:6a:b1:fb:c7:ca:36:16:78:
                    4d:99:0b:d1:45:a2:d1:1a:53:08:8d:10:b8:59:08:
                    2b:6e:a4:4b:d0:fb:b3:63:07:e5:f3:f6:b0:7c:eb:
                    d0:09:5b:cc:d1:18:62:99:ab:67:8f:a7:71:a5:96:
                    ca:ce:3b:40:0f:e8:3c:7e:0f:fb:fc:d6:10:8a:5c:
                    ad:bd:45:d6:90:1a:f8:4a:b2:ac:68:83:a0:21:42:
                    94:3f:8a:f3:20:d7:38:b4:90:40:25:0d:34:38:90:
                    35:8b:e1:47:23:56:93:0e:62:4b:82:1e:3a:fe:58:
                    4b:50:14:05:7a:4f:61:08:0f:15:97:66:2a:73:e6:
                    17:3c:d3:79:82:00:65:89:85:10:ed:d1:97:dc:a7:
                    ba:b2:56:21:19:a3:c8:f8:7d:2e:1d:4b:6e:6a:5d:
                    96:e8:d4:05:06:ce:b3:f7:73:ed:0c:3e:31:3f:88:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:30:62:59:F9:EB:58:F3:14:6B:AD:0F:BB:A0:6B:1A:71:9E:17:AF
            X509v3 Authority Key Identifier:
                keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/667c9b43720caa3d43820c6cacaab21f92fef393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:59:6f:19:ea:15:3b:23:22:af:be:5b:2c:45:36:63:dc:29:
         fb:50:c5:f8:e9:87:7f:43:16:4f:d0:44:b7:d4:66:df:89:9c:
         16:74:b9:9d:ad:3d:1f:1e:f9:93:3d:da:b9:56:01:05:d1:68:
         58:c6:2e:2b:ac:3b:ee:b4:6a:f9:f7:0b:83:57:74:c0:c1:92:
         af:8b:0f:e8:bb:35:ff:7c:45:1a:ac:f2:07:78:54:a6:54:4b:
         0d:a2:7f:a0:5a:04:3e:66:e3:b4:e0:1a:c7:aa:82:2d:53:a9:
         fd:10:76:bf:f6:d6:cd:1e:2b:33:92:a4:6c:13:dd:6b:13:8e:
         88:79:71:f4:38:08:68:11:ca:83:31:62:bd:3b:f7:51:0c:48:
         e5:9b:6f:9c:42:48:31:5f:9a:55:75:98:cc:3e:40:3c:76:d4:
         86:40:8e:bf:68:2d:e9:a6:a8:33:2a:3e:96:40:d0:f4:6f:61:
         07:bc:97:b9:f0:fd:a4:ad:99:02:79:9c:9f:66:0a:c2:f7:3d:
         73:25:34:50:26:3e:50:2e:ca:27:7f:d2:40:17:84:f6:d5:75:
         f8:d1:a8:08:c7:e8:aa:52:6a:5e:fd:d5:98:15:3a:07:44:bb:
         06:84:89:24:66:94:3b:05:98:22:f8:38:4c:76:86:bf:6b:fc:
         6d:a4:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org