Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e302e302f31392d3139203d3e2034323434.roa
File:                     3230372e3234392e302e302f31392d3139203d3e2034323434.roa (raw, json)
Hash identifier:          92b2ZJLboIqjqO4RQcSiD8Be7SBA/dG5yXO5cDZTyNU=
Subject key identifier:   6C:8C:43:3E:DC:79:A6:3B:01:70:A4:32:A9:77:DB:33:60:70:0C:1A
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       7E095BF3770D40CBA4A32E1C886F95C363FF7DD5
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e302e302f31392d3139203d3e2034323434.roa
Signing time:             Tue 30 Jul 2024 16:50:00 +0000
ROA not before:           Tue 30 Jul 2024 16:45:00 +0000
ROA not after:            Tue 29 Jul 2025 16:50:00 +0000
asID:                     4244
IP address blocks:        207.249.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:09:5b:f3:77:0d:40:cb:a4:a3:2e:1c:88:6f:95:c3:63:ff:7d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:00 2024 GMT
            Not After : Jul 29 16:50:00 2025 GMT
        Subject: CN=6C8C433EDC79A63B0170A432A977DB3360700C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:87:01:16:a0:bf:9c:2f:d4:76:b3:7c:f2:
                    71:f1:11:0b:18:31:7e:35:88:1d:59:92:32:38:d9:
                    2c:23:69:3e:38:14:70:e2:f2:f4:cb:87:81:9e:ea:
                    c1:a8:e8:d1:03:b0:16:2a:2a:78:aa:07:bc:c3:c5:
                    60:d0:7f:32:f8:bc:3c:c4:4b:b1:1f:99:73:1b:00:
                    8b:84:bb:90:c0:38:54:a0:a2:32:a2:1a:13:93:10:
                    a3:35:4f:c6:67:5c:0c:39:a6:82:06:5f:8b:4b:45:
                    26:61:f1:a5:fe:eb:f7:d9:89:1c:28:c0:5e:fb:58:
                    71:09:aa:38:d8:e0:fe:c4:4e:4d:31:f8:d4:ad:0f:
                    72:84:6e:bc:b1:26:cf:00:34:7e:0c:09:c2:20:57:
                    2b:fb:e2:1e:64:91:e7:2c:ce:0e:78:48:f1:63:8b:
                    6c:cd:88:fd:54:4c:b3:70:f6:5f:30:08:86:57:27:
                    32:ff:6f:19:23:62:9a:e7:1c:3e:89:e0:34:5a:35:
                    5c:71:43:c2:b4:fc:e2:0e:90:ea:c6:bd:c6:72:58:
                    78:74:7d:00:bb:14:c3:1a:18:7a:00:db:9f:5a:80:
                    d2:3f:86:c8:bc:ee:f0:48:99:ad:8b:95:e0:dc:7b:
                    69:54:8a:0d:41:f4:57:c0:d8:e8:ac:0e:66:6c:42:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8C:43:3E:DC:79:A6:3B:01:70:A4:32:A9:77:DB:33:60:70:0C:1A
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e302e302f31392d3139203d3e2034323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.249.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:df:07:bc:ce:de:a8:31:5c:83:91:93:89:05:85:fd:96:
         7b:af:4a:1f:e5:5e:fc:06:22:0b:73:f5:38:2a:b9:be:12:86:
         9b:33:a4:c8:38:3f:68:27:f2:60:10:f2:e8:f0:8b:14:47:1c:
         f2:53:27:db:74:4c:50:91:09:49:2f:f1:69:f7:b5:a5:b3:2f:
         df:21:21:88:28:7e:ee:4b:19:b9:d3:00:ff:43:cd:bb:72:cd:
         ab:6b:36:71:02:02:ef:fd:45:3f:96:a1:c3:4a:75:ed:61:f1:
         30:fd:ef:ee:5f:a9:4f:da:a1:5f:c4:2b:65:18:78:a5:6b:13:
         54:c9:0a:ec:ed:d7:4b:5a:e8:a7:97:9e:d1:6a:16:69:1a:e3:
         38:ab:12:62:df:88:51:1a:6d:55:65:b2:93:38:0e:bf:e7:cb:
         b7:d8:d3:48:46:83:b6:5f:af:44:68:d3:69:61:93:72:c5:30:
         38:4d:7f:1a:7a:f0:6a:ce:73:8b:a3:9f:dd:c7:7e:cf:20:8e:
         55:0d:41:2f:7d:13:9b:03:e5:6c:6b:37:22:d3:17:60:0f:56:
         32:8d:ca:db:da:80:97:02:ea:c2:f3:ca:6a:84:07:0b:f3:ad:
         42:19:5f:64:3d:7a:64:5d:bd:68:b3:91:27:d7:80:03:aa:8e:
         8d:34:8b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 23:31:19 2024 by rpki-client on console-fra.rpki-client.org