Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c5112e018bedd65a561681673a641102a6cc8138.roa
File:                     c5112e018bedd65a561681673a641102a6cc8138.roa (raw, json)
Hash identifier:          87g80HGor1w6wNCztkhjQ00nEMZHTOLRcfvWmSHASoQ=
Subject key identifier:   34:88:F3:D9:7E:30:EC:2C:40:C6:EE:72:D0:3A:5C:10:09:64:48:56
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       22537D
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c5112e018bedd65a561681673a641102a6cc8138.roa
Signing time:             Fri 14 Jul 2023 20:39:30 +0000
ROA not before:           Thu 13 Jul 2023 20:39:21 +0000
ROA not after:            Mon 14 Jul 2025 20:39:21 +0000
asID:                     23246
IP address blocks:        66.231.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249597 (0x22537d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Jul 13 20:39:21 2023 GMT
            Not After : Jul 14 20:39:21 2025 GMT
        Subject: CN=c5112e018bedd65a561681673a641102a6cc8138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:e6:14:f8:e5:83:ef:0c:d4:07:20:f3:7e:
                    76:00:36:37:a3:b6:f2:fe:fb:12:a7:6e:6f:ed:a5:
                    9c:cd:fe:4d:ea:cc:18:86:74:32:07:f0:f2:f4:08:
                    d2:b3:4e:bf:69:e7:03:8e:c0:bc:09:ef:a1:7b:41:
                    b5:f5:6b:14:73:b3:9e:bb:26:2b:a3:a6:41:b3:ce:
                    fa:ee:40:e6:cc:19:c9:0e:6e:d4:a0:e6:60:e9:9d:
                    cf:db:36:f2:43:57:b2:b9:1b:66:24:17:6f:10:da:
                    bd:5b:f6:f4:27:a4:89:99:b1:6b:a0:49:5e:43:9c:
                    bb:e7:12:ea:08:c2:76:e7:69:27:a7:81:b9:46:2c:
                    fc:82:41:d1:a4:0e:ec:59:e1:2e:99:73:c9:26:85:
                    e0:3f:55:a3:f3:e4:1c:94:77:7c:e1:ba:95:b2:06:
                    77:37:f9:7e:55:88:3c:53:14:06:12:11:94:49:f3:
                    0c:52:3b:35:45:2c:36:4f:29:01:68:68:a9:b6:39:
                    6b:da:15:d8:e8:19:bd:98:ed:76:e3:da:32:35:41:
                    6e:39:f6:4e:ab:03:98:52:31:ef:2c:3f:ed:b6:f8:
                    53:90:1e:a4:ed:da:e5:b2:c7:1f:a9:bd:28:80:52:
                    08:6f:d0:e8:9b:37:fc:45:d6:ab:cb:79:d7:83:b6:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:88:F3:D9:7E:30:EC:2C:40:C6:EE:72:D0:3A:5C:10:09:64:48:56
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c5112e018bedd65a561681673a641102a6cc8138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:b0:da:2f:e5:df:93:41:6f:09:95:63:01:34:ea:15:cf:79:
         5d:31:60:1b:d0:46:71:e7:8f:b8:ec:e6:cb:8a:92:d9:67:16:
         9c:86:e1:32:6e:06:bf:b3:2b:eb:89:04:4b:2d:b4:cc:be:e5:
         e5:7f:fb:5d:cb:7a:c7:9b:53:28:13:b5:cc:c0:2d:f8:18:a2:
         ef:ce:23:de:d1:5d:a6:05:f3:65:94:f6:9b:39:49:af:ed:af:
         82:21:6c:67:ba:82:ff:aa:c8:42:19:fe:2c:44:23:21:f4:aa:
         31:3c:7b:55:c8:d1:f1:82:f7:58:49:b5:21:85:1e:57:9e:df:
         b0:47:eb:3b:4f:3a:91:11:96:4f:50:29:b7:98:84:33:c0:68:
         db:d4:4b:e9:64:cb:37:ed:b7:92:03:a8:68:60:68:40:4c:2c:
         a9:14:62:31:d5:ad:f2:3f:cf:30:35:12:05:c1:78:7b:33:0d:
         a1:13:91:c8:c1:5d:7a:52:0a:97:54:bd:85:28:48:f8:c7:6c:
         47:8d:9e:d5:f8:97:03:b5:8a:6b:de:7a:5e:ad:d0:03:fa:ea:
         31:34:c4:0b:07:2c:b6:e1:75:1f:0d:69:48:a6:64:0a:4c:85:
         0b:08:9a:be:70:de:63:72:4d:d1:98:a9:49:44:5c:1b:8f:33:
         f2:73:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org