Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1d9e8127a4f322d4116edfa6c40b916eb343ef3b.roa
File:                     1d9e8127a4f322d4116edfa6c40b916eb343ef3b.roa (raw, json)
Hash identifier:          JTFL6YwATi1mmVTjeLGzlHvCCLrP/29GdpwCI+vfutI=
Subject key identifier:   C1:23:44:04:F1:87:E3:B7:75:9E:5C:8F:73:90:AD:0D:30:01:59:89
Certificate issuer:       /CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
Certificate serial:       28FDEB
Authority key identifier: 7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1d9e8127a4f322d4116edfa6c40b916eb343ef3b.roa
Signing time:             Thu 29 Feb 2024 01:31:50 +0000
ROA not before:           Thu 29 Feb 2024 01:31:39 +0000
ROA not after:            Thu 01 Mar 2029 01:31:39 +0000
asID:                     61468
IP address blocks:        201.159.220.0/22 maxlen: 24
                          190.15.128.0/20 maxlen: 24
                          143.255.248.0/22 maxlen: 24
                          2800:68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2686443 (0x28fdeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
        Validity
            Not Before: Feb 29 01:31:39 2024 GMT
            Not After : Mar  1 01:31:39 2029 GMT
        Subject: CN=1d9e8127a4f322d4116edfa6c40b916eb343ef3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:89:af:4b:fa:ec:b2:54:00:37:5f:cc:92:
                    5c:f6:37:5f:ca:3b:2b:48:46:bd:f0:1c:6c:b5:2f:
                    55:70:b7:61:3f:3e:68:76:3c:34:b4:75:12:08:37:
                    58:c3:42:de:af:8a:07:c4:81:0a:8e:f2:30:87:44:
                    ad:f4:ee:96:0e:3d:98:dd:a0:17:7d:0e:bf:f6:8f:
                    53:2a:31:66:40:6e:99:f3:fb:33:06:42:5e:95:a2:
                    1e:eb:ac:cc:84:3e:aa:51:5a:28:26:2c:60:9d:5d:
                    28:f9:8d:4c:70:34:61:77:68:61:91:de:d0:96:8e:
                    cd:c8:3b:3a:4e:44:2a:cf:d4:c5:88:8e:cb:bb:37:
                    2a:fc:9e:43:bd:78:4a:12:84:af:0d:df:22:b3:3a:
                    5c:8f:bd:08:ef:13:25:ed:c9:5f:89:27:85:08:f8:
                    2f:f7:bd:36:e3:4a:4b:53:e6:89:62:a1:47:b2:fc:
                    b5:49:e0:8e:39:b0:e9:c1:6b:2c:f7:c2:0a:5f:02:
                    f4:88:92:73:4b:94:97:76:dd:e5:21:cd:ed:3b:6a:
                    c8:42:11:3a:70:38:c0:d4:c7:ee:64:24:af:45:ec:
                    41:22:9c:ea:73:53:8d:e0:9d:52:4e:b2:3e:10:89:
                    e8:70:39:58:7f:43:98:c5:64:94:0e:30:72:6f:07:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:23:44:04:F1:87:E3:B7:75:9E:5C:8F:73:90:AD:0D:30:01:59:89
            X509v3 Authority Key Identifier:
                keyid:7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1d9e8127a4f322d4116edfa6c40b916eb343ef3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.248.0/22
                  190.15.128.0/20
                  201.159.220.0/22
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:f7:69:b7:ae:a4:2d:ab:ba:d5:c7:51:27:12:d5:59:15:
         ec:b0:8e:0e:24:6c:63:f7:f0:2f:fa:5c:5c:3f:dd:ef:92:dc:
         a8:57:da:3e:13:fe:36:92:1c:24:82:40:40:c7:26:84:54:27:
         84:7b:9f:92:24:c1:ba:ac:ab:ba:d9:ad:8d:3b:6a:3e:6d:43:
         51:82:0f:77:38:76:7a:2d:01:f1:03:8a:0a:4b:76:f8:96:f7:
         94:29:f0:ee:42:2d:dc:bc:94:68:c7:f5:03:89:87:3b:e3:00:
         d2:45:14:f7:24:3d:81:a1:22:48:bc:b8:c4:86:a3:a4:0c:ba:
         19:7a:7e:bc:19:4b:49:74:46:87:dc:04:07:64:e8:5e:79:ba:
         44:79:52:ae:a6:68:85:7b:c4:86:20:86:d7:31:a5:e6:cb:a0:
         55:1e:62:fc:d2:06:f2:e2:80:c3:b9:73:68:00:40:11:64:10:
         f2:66:3b:3d:26:f1:af:b4:e0:69:8b:01:f2:91:26:ce:c2:a1:
         f6:1a:82:18:12:19:47:ac:60:dc:46:56:2e:72:c2:83:15:d6:
         b4:44:48:4c:8e:fe:e8:31:cb:68:48:c4:e8:4b:ab:c9:3a:89:
         d2:92:ac:a3:2c:3b:ac:3f:a6:c8:bc:39:39:d1:bf:85:b3:e6:
         00:57:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org