Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/996257804f8e535b29d70ae01db9ae08929a5279.roa
File:                     996257804f8e535b29d70ae01db9ae08929a5279.roa (raw, json)
Hash identifier:          cGVYv62SQ5I2C85OEa5/kQXIv4zgC4LZefi1DgKv43M=
Subject key identifier:   63:4A:2C:D3:6D:3E:B3:15:1E:F2:CA:32:A6:DC:F4:04:E4:B0:80:10
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       111396
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/996257804f8e535b29d70ae01db9ae08929a5279.roa
Signing time:             Wed 12 Jul 2023 13:00:54 +0000
ROA not before:           Tue 11 Jul 2023 13:00:53 +0000
ROA not after:            Sat 12 Jul 2025 13:00:53 +0000
asID:                     264722
IP address blocks:        201.217.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119126 (0x111396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Jul 11 13:00:53 2023 GMT
            Not After : Jul 12 13:00:53 2025 GMT
        Subject: CN=996257804f8e535b29d70ae01db9ae08929a5279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:dd:9d:8d:46:8a:58:e2:fa:2b:93:df:df:
                    14:15:99:8c:61:a7:3c:e5:33:0c:b5:ac:e0:eb:dc:
                    75:0a:09:53:ee:9c:db:7f:57:f4:16:90:9b:d3:55:
                    30:64:53:ff:75:09:f5:44:96:30:14:8e:4f:a8:82:
                    9b:3e:ee:bf:f4:1a:49:85:8d:32:2e:f8:95:4f:dc:
                    02:8c:48:a1:55:b2:98:1b:78:c9:79:ca:f5:f5:2d:
                    87:8c:cd:6c:d7:c0:cf:3b:69:fe:1b:1e:89:da:07:
                    99:6d:a5:0e:03:9d:69:7b:b1:d4:d3:19:e3:53:8e:
                    37:82:34:d0:bb:d8:14:9f:bf:d4:55:ea:69:1c:5b:
                    08:35:a7:6a:75:49:9a:40:78:82:aa:ec:39:e1:9f:
                    5e:c0:b5:1b:73:73:23:ca:dd:69:4d:f3:8a:8d:f5:
                    1b:af:61:9d:a4:c5:05:35:fa:70:c4:32:ca:d0:7e:
                    7d:62:cb:ee:25:82:8d:2e:20:dc:f4:63:de:fb:6e:
                    ab:d1:33:fc:d0:1c:c1:97:0d:38:a5:7b:77:ed:d2:
                    ce:f1:73:a3:29:cd:02:36:12:32:c1:5c:09:9b:1a:
                    fd:47:9c:7e:b5:10:82:b9:9c:3d:26:db:9f:cd:82:
                    56:09:cc:db:3b:06:e3:32:f1:12:df:62:46:bf:c9:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:2C:D3:6D:3E:B3:15:1E:F2:CA:32:A6:DC:F4:04:E4:B0:80:10
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/996257804f8e535b29d70ae01db9ae08929a5279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:d5:3c:8e:12:89:14:97:b7:8c:54:cf:20:ba:9a:8d:48:
         2a:87:d0:c6:ac:dc:51:ff:47:c3:23:4c:ae:23:73:4e:d4:b3:
         b6:e5:8a:0c:65:df:68:e7:9e:f1:cf:67:7e:a5:34:90:9d:f8:
         bf:5d:58:a0:23:bf:a6:55:af:af:96:11:bd:83:56:eb:ed:44:
         65:01:6b:ae:ba:32:1c:4f:23:de:e0:04:8d:a3:1e:c2:ef:4b:
         8d:e5:7b:a9:a9:e0:08:f9:63:d2:42:f3:9b:a5:8a:7c:4d:ae:
         8a:62:44:02:b7:54:2b:8b:d7:b0:3b:64:29:91:d9:ab:28:24:
         f0:23:45:20:33:ee:7d:29:64:6d:aa:13:b4:22:43:b2:8e:3a:
         a2:63:11:33:93:58:c2:1e:8c:ae:0c:bc:43:5f:a5:0c:fe:b2:
         71:be:41:14:e1:97:22:ed:37:84:dd:3c:7e:d5:4a:72:bb:72:
         9a:39:d6:23:ba:48:73:b6:f6:b4:bd:02:ea:72:99:4d:97:c6:
         71:7e:62:d5:12:0d:05:e7:6a:ec:bf:06:c1:ca:3a:04:8b:3f:
         94:29:01:fb:02:44:24:19:59:17:40:36:58:81:7e:1f:4f:c0:
         35:68:ca:20:05:6c:8b:8b:98:32:0e:a6:17:f8:b9:6c:c1:9a:
         21:45:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org