Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/6cb85556ed4a96224897b0dd4e32752fce869840.roa
File:                     6cb85556ed4a96224897b0dd4e32752fce869840.roa (raw, json)
Hash identifier:          3s2tSvUXx2F9nCUziPENG2t7I9r4YSxdQon2KBPLmh0=
Subject key identifier:   E4:99:E9:EC:15:C9:CE:0F:BB:96:92:8C:F9:DA:47:55:BF:F3:24:AC
Certificate issuer:       /CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
Certificate serial:       0A6DD1
Authority key identifier: F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/6cb85556ed4a96224897b0dd4e32752fce869840.roa
Signing time:             Sat 12 Feb 2022 14:22:16 +0000
ROA not before:           Sat 12 Feb 2022 03:00:00 +0000
ROA not after:            Mon 12 Feb 2024 03:00:00 +0000
asID:                     271791
IP address blocks:        201.221.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683473 (0xa6dd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
        Validity
            Not Before: Feb 12 03:00:00 2022 GMT
            Not After : Feb 12 03:00:00 2024 GMT
        Subject: CN=6cb85556ed4a96224897b0dd4e32752fce869840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:e6:24:30:5d:32:9c:6a:8b:08:87:c9:12:
                    e5:b9:46:c5:b9:c0:56:39:42:62:ae:42:c6:cd:45:
                    e9:b0:83:ac:82:bd:fe:be:68:fe:21:42:29:5a:73:
                    ac:51:90:4a:3f:f4:40:0c:df:0c:4f:8e:67:05:12:
                    a9:88:d7:03:62:e9:dd:95:ba:48:74:ac:50:15:7d:
                    f6:30:3f:bd:9b:fe:8d:dc:09:e9:12:2b:90:19:d7:
                    85:53:e2:09:b1:4c:23:7d:70:86:b3:8e:c4:56:f4:
                    36:ee:bb:f3:67:80:5b:2f:25:26:b1:07:7d:1d:73:
                    c1:2f:c7:9d:ad:c2:3e:38:aa:18:35:9c:ef:ad:d4:
                    76:7a:67:b2:80:79:f2:a0:fb:be:e5:af:ce:cb:27:
                    38:0f:2f:58:9f:7f:0e:50:4c:c9:ac:fb:9e:90:10:
                    38:44:8a:2d:0f:74:7e:4f:51:4b:11:b9:d5:30:56:
                    b6:20:4b:d6:ce:45:dc:92:7b:c7:93:8c:28:32:b7:
                    ee:1d:71:a0:82:74:ec:8f:8d:10:9f:6f:a5:66:07:
                    ee:32:c6:8b:45:66:f1:b6:2f:8f:2e:bc:35:15:27:
                    96:cb:13:e1:4c:a0:06:90:6f:c9:53:be:96:b6:80:
                    9e:c1:37:36:d6:75:a6:5e:c4:f6:49:c7:82:a7:fb:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:99:E9:EC:15:C9:CE:0F:BB:96:92:8C:F9:DA:47:55:BF:F3:24:AC
            X509v3 Authority Key Identifier:
                keyid:F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/6cb85556ed4a96224897b0dd4e32752fce869840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:cd:4b:51:bd:b7:ac:f4:d2:0e:46:1d:32:96:c9:00:7e:
         bd:64:4a:be:6a:5f:ed:bd:22:14:04:01:99:e3:c0:19:e8:8d:
         88:24:16:60:71:0e:a2:b7:1b:28:e1:ea:60:96:9c:de:99:45:
         52:18:06:c2:00:ec:ab:fa:16:d1:b6:e6:1f:1f:e7:4e:71:71:
         b8:55:f2:23:37:cb:e5:84:97:85:d6:be:b5:00:87:5b:37:14:
         be:77:e8:f0:7e:f2:d8:06:58:de:47:2e:1b:f0:f6:ed:23:cc:
         74:69:7b:c7:fb:ea:40:d1:5d:67:ea:6e:c0:fb:f0:f5:17:b7:
         57:3b:39:3f:99:7e:0e:3b:39:51:f2:0a:a9:3d:f0:92:1d:df:
         ec:43:20:ad:da:b9:c1:60:72:5e:9b:5d:76:05:15:c5:5b:e7:
         6c:08:de:9c:7b:78:9f:fa:87:fc:af:ef:75:9d:e1:e9:56:c3:
         f6:e9:c1:cd:9e:a1:4a:f2:92:e3:48:f1:c8:00:49:b7:ad:a7:
         9b:42:c7:97:f7:4b:d0:80:18:d7:a8:62:53:92:e5:15:7c:7a:
         8e:4a:08:75:c3:32:d5:c3:b6:1d:b7:4b:d0:e3:c8:4c:09:c6:
         09:4a:93:0d:60:b5:03:dd:be:9e:45:7f:ad:f5:62:89:92:81:
         4d:32:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org