Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1345707c-e833-4dd2-853f-47078aa30574/c2e8d7a857e362a62a2b132f50c016c7ae267996.roa
File:                     c2e8d7a857e362a62a2b132f50c016c7ae267996.roa (raw, json)
Hash identifier:          vfiAprt1wb4sDmTnO1EXFVrmsTtUZseC9hB6zZNfE1s=
Subject key identifier:   DE:D3:49:67:D8:E3:F6:C9:7E:AA:EE:B0:20:84:C8:82:82:31:A1:2A
Certificate issuer:       /CN=7d296da44982f159e22bf21db5c81ab862e46c2a
Certificate serial:       2317F8
Authority key identifier: 74:34:0F:65:EE:18:D8:94:40:D5:15:24:43:B7:09:BD:3F:C0:3C:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d296da44982f159e22bf21db5c81ab862e46c2a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1345707c-e833-4dd2-853f-47078aa30574/c2e8d7a857e362a62a2b132f50c016c7ae267996.roa
Signing time:             Fri 08 Sep 2023 17:27:31 +0000
ROA not before:           Thu 07 Sep 2023 17:27:31 +0000
ROA not after:            Mon 08 Sep 2025 17:27:31 +0000
asID:                     14080
IP address blocks:        201.150.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2299896 (0x2317f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d296da44982f159e22bf21db5c81ab862e46c2a
        Validity
            Not Before: Sep  7 17:27:31 2023 GMT
            Not After : Sep  8 17:27:31 2025 GMT
        Subject: CN=c2e8d7a857e362a62a2b132f50c016c7ae267996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:cc:04:56:a2:12:8b:64:fb:4a:22:a4:8c:
                    17:96:1e:da:0a:ca:3a:29:1e:56:bc:b9:eb:bc:89:
                    1b:fe:40:87:01:fb:5e:6f:b6:23:50:ca:fe:bf:5b:
                    fd:7b:26:50:7d:cb:48:d9:15:92:9a:0b:86:97:c4:
                    a3:09:54:c4:29:df:8d:99:bc:25:3b:4b:b3:5b:df:
                    b5:d3:45:5c:4d:f2:f2:48:d9:29:3e:8c:c4:5c:9f:
                    a5:09:ee:ce:cf:b6:6c:53:91:ff:50:7c:7f:f7:11:
                    04:1e:c7:05:f5:11:71:c9:70:d7:e4:28:c6:3b:68:
                    d1:9a:9a:8e:2d:c4:07:07:85:d8:29:72:d3:45:59:
                    ba:44:fb:9f:d8:b1:60:c4:56:1a:30:b4:2b:28:61:
                    e9:37:02:0d:03:1c:01:3d:9c:13:c3:f7:75:d8:2d:
                    37:eb:a1:c0:53:ca:ee:1f:ee:83:72:5a:4f:7a:73:
                    a1:b5:5c:25:55:c8:0b:37:05:97:2b:8e:4d:5f:a3:
                    38:73:ab:04:87:9f:f8:5a:60:d9:6d:79:a3:75:18:
                    49:c5:80:d5:f1:18:9a:e6:02:d6:c9:12:60:f7:e6:
                    01:e1:e0:fd:92:50:f8:d5:d2:78:31:11:53:0d:8a:
                    35:39:2a:8f:a6:2e:c3:dc:17:d2:a5:4c:af:53:e2:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D3:49:67:D8:E3:F6:C9:7E:AA:EE:B0:20:84:C8:82:82:31:A1:2A
            X509v3 Authority Key Identifier:
                keyid:74:34:0F:65:EE:18:D8:94:40:D5:15:24:43:B7:09:BD:3F:C0:3C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d296da44982f159e22bf21db5c81ab862e46c2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1345707c-e833-4dd2-853f-47078aa30574/c2e8d7a857e362a62a2b132f50c016c7ae267996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1345707c-e833-4dd2-853f-47078aa30574/7d296da44982f159e22bf21db5c81ab862e46c2a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:d9:9c:0e:e1:23:b6:bd:27:d7:e4:40:82:90:55:a1:fd:
         d2:d1:ae:b1:ab:63:8b:02:12:c6:d0:52:7d:04:52:98:c5:a6:
         27:cb:cd:d3:55:3b:40:82:72:31:8a:60:8a:db:e6:8e:61:66:
         0a:3b:31:cb:d7:dd:7b:ec:62:6e:1a:66:0c:01:4a:96:67:6a:
         14:04:64:8f:9a:d8:67:aa:e2:04:06:d5:5d:11:90:93:f0:38:
         36:13:ee:d2:d5:95:6f:e2:22:4d:30:56:49:81:7e:c5:d1:84:
         ab:0f:68:a7:97:4a:b1:7d:c0:6e:99:c8:2a:80:3c:8f:b8:42:
         c9:bf:63:92:d2:bc:02:18:6a:91:c6:38:72:f4:ab:0f:ea:c4:
         8a:ad:3c:ca:79:4d:69:c8:1c:05:3a:e7:24:b8:95:13:15:93:
         f5:4e:ec:61:3f:22:ba:87:6d:f3:60:52:a8:e8:4e:54:f0:4d:
         5e:3c:4b:0a:03:e6:39:b5:75:13:c0:85:5b:73:2b:f1:8a:52:
         2e:3e:c3:95:7b:03:66:8e:12:a9:47:d4:8e:de:f6:38:cc:a9:
         aa:66:4f:25:5b:4f:86:10:ad:b9:29:ba:2f:b2:59:6f:06:02:
         3a:b9:8c:20:21:b2:58:11:33:59:2e:9f:99:96:6f:c3:20:49:
         40:12:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org