Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/eafdbd3722f47abe9dba86bbe9fdd4a7a8cf1656.roa
File:                     eafdbd3722f47abe9dba86bbe9fdd4a7a8cf1656.roa (raw, json)
Hash identifier:          FfV9Rgu5GMF+n6ecCMb3YaMWQXCanYwKhhcgoxahNw8=
Subject key identifier:   25:36:07:D7:22:B4:2F:0F:B6:E0:48:4F:F2:4D:A1:42:5E:65:37:97
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       22490B
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/eafdbd3722f47abe9dba86bbe9fdd4a7a8cf1656.roa
Signing time:             Fri 14 Jul 2023 20:39:26 +0000
ROA not before:           Thu 13 Jul 2023 20:39:21 +0000
ROA not after:            Mon 14 Jul 2025 20:39:21 +0000
asID:                     267699
IP address blocks:        66.231.69.0/24 maxlen: 24
                          66.231.71.0/24 maxlen: 24
                          66.231.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246923 (0x22490b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Jul 13 20:39:21 2023 GMT
            Not After : Jul 14 20:39:21 2025 GMT
        Subject: CN=eafdbd3722f47abe9dba86bbe9fdd4a7a8cf1656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bd:56:07:bb:03:93:ae:88:22:5f:28:4b:ec:
                    9e:0d:17:4c:65:cd:c0:69:b4:d3:b2:74:f4:f9:de:
                    c3:4e:e5:50:b9:2f:7f:90:a2:33:95:ef:07:14:b5:
                    27:b4:68:08:31:bf:ce:b9:0b:e5:ec:cc:9f:81:c9:
                    a0:e9:c7:a2:b3:23:1e:f9:6e:c8:79:b9:ac:18:21:
                    61:f6:00:41:0b:a8:8e:54:b1:80:56:71:20:39:67:
                    8e:ac:93:cd:5c:47:3b:01:64:06:f6:08:fe:e7:06:
                    95:be:fc:ad:a0:7c:1e:4b:56:f2:98:b4:56:1c:71:
                    85:10:86:15:ea:f9:57:4e:5b:3d:dc:ad:e1:f5:16:
                    46:81:55:af:23:c6:45:4d:5d:55:e2:f6:88:59:da:
                    d2:5c:e0:cf:45:c6:d1:ce:51:2e:7d:e8:1e:84:6b:
                    8f:6a:d6:95:33:1f:0e:f1:9a:9d:61:b0:4a:74:9e:
                    a8:13:9f:b9:23:f6:68:ea:d9:5c:5f:0c:c0:41:d9:
                    40:74:4c:a1:f2:b6:75:c3:45:21:97:73:d4:75:9a:
                    21:e1:f3:a0:b0:03:51:b7:0e:19:c6:b6:2c:a6:47:
                    ad:43:1f:30:74:17:ca:74:d3:3f:f6:9c:98:1d:89:
                    fb:c2:bd:8f:e1:40:83:81:81:ff:51:f1:87:03:b1:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:36:07:D7:22:B4:2F:0F:B6:E0:48:4F:F2:4D:A1:42:5E:65:37:97
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/eafdbd3722f47abe9dba86bbe9fdd4a7a8cf1656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.69.0/24
                  66.231.71.0/24
                  66.231.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d1:88:01:8c:40:2d:d0:ff:07:db:f9:fa:63:d1:b3:b7:31:
         fa:e2:a2:5b:ad:13:9d:0b:30:86:1e:f2:65:7e:7d:74:92:0a:
         99:cb:1a:6e:1d:eb:f1:94:7f:e4:97:b2:18:62:3f:cb:17:27:
         78:1a:55:e4:28:f9:20:c5:fa:20:06:a9:fe:a3:20:70:67:e2:
         1a:e4:61:0b:3e:03:d7:14:3f:03:6f:2a:65:f0:38:b4:33:ad:
         2f:d0:d8:01:87:5b:17:5f:92:24:1d:49:e2:20:93:23:2d:77:
         a8:88:8b:b4:4d:c4:6f:11:a5:83:40:46:76:ce:17:87:78:a0:
         7a:78:f7:0b:54:a2:56:d1:d6:12:fa:45:a4:e8:5d:05:42:2f:
         fc:01:93:f3:f3:7c:39:7f:dd:c8:a4:49:ad:f3:44:44:49:1f:
         99:05:31:a2:cb:87:f0:bd:e1:5e:76:df:3f:b8:6f:22:63:21:
         05:d8:4d:e1:9b:a7:25:b3:45:de:1e:b9:86:82:70:69:7c:ff:
         d4:51:8f:3a:22:ae:2a:de:7a:02:00:48:c5:6c:62:79:bb:d6:
         6e:1e:f6:86:20:45:68:e5:87:ab:2f:55:2f:21:f3:73:f8:01:
         84:a8:86:fe:20:6b:3d:96:e9:46:46:85:21:c7:08:2f:1e:6b:
         80:49:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org