Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c6aa1403b02a00efa986685247bb762b14540d34.roa
File:                     c6aa1403b02a00efa986685247bb762b14540d34.roa (raw, json)
Hash identifier:          5WWgJiiWIvmi/kkgH2aJhWqJw8VwpB4xae2br2h++Xw=
Subject key identifier:   6A:1E:27:87:05:BA:53:33:D9:94:13:CE:E8:FB:55:B1:42:A3:44:EC
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       223BC2
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c6aa1403b02a00efa986685247bb762b14540d34.roa
Signing time:             Fri 14 Jul 2023 20:39:23 +0000
ROA not before:           Thu 13 Jul 2023 20:39:21 +0000
ROA not after:            Mon 14 Jul 2025 20:39:21 +0000
asID:                     271936
IP address blocks:        66.231.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2243522 (0x223bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Jul 13 20:39:21 2023 GMT
            Not After : Jul 14 20:39:21 2025 GMT
        Subject: CN=c6aa1403b02a00efa986685247bb762b14540d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:5c:a2:f2:1a:30:db:b0:1d:09:68:16:de:
                    86:8d:10:e7:83:78:90:04:95:08:4d:4f:45:00:64:
                    7d:d0:76:fb:72:fd:59:76:90:82:ec:14:3f:48:5f:
                    ec:66:a1:b5:0c:08:e1:a3:30:5c:3c:a3:4e:65:f0:
                    85:63:dc:4d:01:7d:38:c8:97:6d:01:e5:34:07:fb:
                    d4:25:1e:cf:31:aa:33:ca:a3:e7:e9:28:ab:38:42:
                    fc:ec:80:f8:0a:5f:b4:cc:40:a4:4e:32:2b:c4:70:
                    0f:8d:6f:e6:53:18:1e:70:51:f3:57:7c:ac:95:82:
                    bd:32:b1:9b:52:4f:12:70:ff:2c:1e:bc:8b:01:6b:
                    3e:35:2e:b0:6e:3f:a4:a0:e0:10:9d:48:fd:82:43:
                    19:2b:06:26:1a:3c:9d:92:f0:78:d4:15:91:34:89:
                    87:bd:67:0c:16:c1:22:2d:81:c6:c0:f3:e2:21:cf:
                    dc:df:0a:60:24:79:4b:0a:59:90:9f:d7:75:62:91:
                    3d:23:b5:a2:c0:8a:8e:13:d2:94:d0:42:3e:92:49:
                    4a:f8:8e:0c:ce:ad:66:f5:12:5b:12:6d:a8:c1:ac:
                    ac:ea:15:20:e1:1f:1b:78:ba:ec:05:c9:98:0f:b2:
                    02:97:56:d4:8b:54:ac:dd:83:39:ef:9b:f1:90:80:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1E:27:87:05:BA:53:33:D9:94:13:CE:E8:FB:55:B1:42:A3:44:EC
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c6aa1403b02a00efa986685247bb762b14540d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:a3:e4:5b:47:76:77:fd:2f:9a:19:39:e0:60:b9:ab:8f:
         f2:45:d5:33:16:b5:4a:71:c8:ff:70:8f:08:13:c6:dd:60:a3:
         a3:7a:f5:ce:9c:54:f2:80:21:04:c4:ed:d8:11:e3:e1:80:d8:
         fb:e1:e3:c5:37:b9:31:71:44:c8:75:9b:f0:c4:03:d2:f9:49:
         ca:ab:e3:e3:c0:e9:b4:59:52:56:62:46:a2:ec:2c:16:93:bb:
         eb:b9:66:94:cc:c7:aa:ac:f0:eb:e9:dc:42:54:bc:a1:fa:41:
         9c:63:57:66:0b:b8:2f:ac:66:2d:f9:51:96:42:50:57:5e:41:
         9f:21:30:2b:86:ba:e4:ec:1e:52:93:62:7d:91:9e:c2:f8:2a:
         b6:3e:75:ee:c0:87:cf:28:4f:fb:71:3d:82:66:4d:0d:45:ff:
         91:e0:24:1a:a4:42:dc:0b:7e:a3:b8:50:77:05:53:43:9d:ef:
         68:a7:14:de:ca:6a:f3:64:f6:7f:b7:fd:23:d8:14:d4:ac:54:
         fb:ef:bc:0f:8c:13:19:5d:ad:aa:b2:a1:ac:cc:0a:c3:a9:e2:
         9b:4d:eb:9c:7f:1e:0e:1f:f0:1d:f6:34:ca:fa:9d:b6:8c:cb:
         5a:f7:b5:e0:ce:63:8a:09:36:f0:5f:9c:e8:69:29:db:d3:0f:
         7b:13:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org