Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/c62761a7a1211542208d700c16770b61fa4754d6.roa
File:                     c62761a7a1211542208d700c16770b61fa4754d6.roa (raw, json)
Hash identifier:          vPOAGDNTVQv1+7BchyHYP5UhiaXQ1d+9cDFl5n2OcgA=
Subject key identifier:   06:4A:8F:69:46:09:E6:E1:00:FB:84:1E:0C:E9:60:6F:DE:D6:D0:B1
Certificate issuer:       /CN=d136d4512330eb81fb319acf25ade2d4a9466d72
Certificate serial:       0CF091
Authority key identifier: BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/c62761a7a1211542208d700c16770b61fa4754d6.roa
Signing time:             Mon 04 Sep 2023 14:32:29 +0000
ROA not before:           Sun 03 Sep 2023 14:32:29 +0000
ROA not after:            Thu 04 Sep 2025 14:32:29 +0000
asID:                     272026
IP address blocks:        177.11.254.0/23 maxlen: 23
                          167.250.236.0/23 maxlen: 23
                          2803:6510::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848017 (0xcf091)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d136d4512330eb81fb319acf25ade2d4a9466d72
        Validity
            Not Before: Sep  3 14:32:29 2023 GMT
            Not After : Sep  4 14:32:29 2025 GMT
        Subject: CN=c62761a7a1211542208d700c16770b61fa4754d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:2c:9e:57:f1:1e:98:fe:ea:74:a6:ce:2c:
                    e6:08:4f:b8:80:eb:25:88:3c:3b:4f:28:4c:23:62:
                    eb:93:61:dd:69:2d:c6:d6:5d:9c:6b:a0:07:28:4c:
                    04:30:47:95:85:bc:87:e0:71:e0:ff:02:88:70:39:
                    5e:69:39:c9:4e:0b:09:b4:e5:f0:97:b6:18:58:6b:
                    a0:b6:2a:04:4a:33:22:ef:c0:6c:4f:e0:13:4d:a2:
                    91:0a:87:06:07:74:2c:c2:b7:3a:07:41:22:07:8c:
                    20:8f:80:5b:cb:85:b7:c7:9f:89:79:22:51:c0:2f:
                    ce:23:96:76:4b:f9:59:a0:26:8e:d3:25:ad:07:e5:
                    42:3d:55:60:d0:3f:36:ce:77:82:6f:90:9c:b7:c9:
                    11:1e:3b:7d:a8:20:a8:22:da:d9:77:0f:4c:b6:b5:
                    96:8d:55:f1:a9:e3:06:6e:9b:d1:05:94:77:fb:1c:
                    c0:a5:e6:4c:b3:9e:1c:88:b2:88:d4:1f:03:9d:4f:
                    52:42:c1:b6:0b:c9:43:91:d9:cb:e5:c9:8e:e3:67:
                    f1:68:87:59:35:ee:e0:24:aa:1f:97:f3:ec:12:72:
                    cc:de:ba:c0:fc:78:8b:39:f8:14:3a:21:71:df:0d:
                    2e:e3:de:91:85:cb:c4:01:c4:7f:43:54:d5:9a:eb:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4A:8F:69:46:09:E6:E1:00:FB:84:1E:0C:E9:60:6F:DE:D6:D0:B1
            X509v3 Authority Key Identifier:
                keyid:BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/c62761a7a1211542208d700c16770b61fa4754d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/d136d4512330eb81fb319acf25ade2d4a9466d72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.236.0/23
                  177.11.254.0/23
                IPv6:
                  2803:6510::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:11:4a:71:8a:1d:75:b3:a2:3a:0f:5a:9d:ea:74:88:1a:81:
         cc:6b:1f:e1:21:b8:df:67:4c:78:60:4d:26:b9:04:c5:d3:86:
         4f:62:19:44:8f:a9:1f:fe:ee:d6:d6:35:61:77:03:76:26:3a:
         28:93:4e:39:93:94:c5:ba:0f:bd:0a:e6:43:58:15:5d:6c:ae:
         49:5e:08:c9:88:fe:9b:33:56:51:99:08:c7:f6:c5:12:a5:8c:
         83:4f:b8:84:d6:ed:f4:ed:8b:d8:0b:f7:43:2e:dc:2d:23:68:
         6b:99:88:bd:3f:02:cc:e9:60:66:03:e4:9d:23:ff:d3:a0:06:
         c8:ed:fd:fe:0e:3b:a7:20:e8:fe:4f:1e:fa:b0:e1:67:a5:f5:
         37:64:7b:38:dd:0e:08:02:37:8d:d8:98:d3:5d:ba:ee:8b:26:
         47:0a:d1:ba:6e:30:b4:54:d6:4a:9d:00:a4:9f:16:6a:d8:2a:
         5b:31:5f:5a:a7:44:20:da:7b:e2:ef:21:ff:0d:ce:e4:1d:20:
         73:9d:35:6b:13:5a:06:ed:87:b4:3e:32:12:d6:e0:e6:20:88:
         4f:94:1d:bc:67:4e:5b:32:43:ee:e0:63:c2:00:e8:d4:54:14:
         c0:70:a7:84:52:c9:fd:55:6f:d2:64:cf:5c:55:e3:e2:b2:f7:
         0b:f8:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org