Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/fb7a06688e6622a7a1dea50abdf950ce60feae98.roa
File:                     fb7a06688e6622a7a1dea50abdf950ce60feae98.roa (raw, json)
Hash identifier:          +a61HKHw+6TZ3DK53hp4fkfyCwIdXp9kfLqcWDM4Lpk=
Subject key identifier:   6D:15:0C:85:1E:A4:57:CA:A9:C0:A0:64:67:18:10:F0:13:72:4E:28
Certificate issuer:       /CN=14cccbd44c277091b395ba21d80e9bd47281ef92
Certificate serial:       08B4F4
Authority key identifier: 51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/fb7a06688e6622a7a1dea50abdf950ce60feae98.roa
Signing time:             Thu 18 May 2023 07:59:34 +0000
ROA not before:           Wed 17 May 2023 07:59:33 +0000
ROA not after:            Sun 18 May 2025 07:59:33 +0000
asID:                     201341
IP address blocks:        168.90.244.0/22 maxlen: 22
                          138.99.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570612 (0x8b4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cccbd44c277091b395ba21d80e9bd47281ef92
        Validity
            Not Before: May 17 07:59:33 2023 GMT
            Not After : May 18 07:59:33 2025 GMT
        Subject: CN=fb7a06688e6622a7a1dea50abdf950ce60feae98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:de:cf:3f:7d:27:a3:7e:fa:5e:55:e4:0e:
                    64:19:63:6a:ad:71:86:b4:ab:26:c5:23:94:2e:d6:
                    6e:8f:64:6b:40:37:56:5e:c6:b3:ae:f8:d9:83:2c:
                    ae:ed:54:aa:90:1a:22:35:27:93:04:0c:c0:ad:63:
                    2c:c4:f6:c7:64:55:18:8c:b8:d5:95:8c:48:90:72:
                    ac:81:58:e2:48:eb:a4:ac:73:29:b5:1c:8c:2f:74:
                    c4:af:c7:f8:b4:e0:be:92:8f:2c:d5:f0:4f:4f:e5:
                    07:f0:c3:2c:36:72:ea:95:83:bd:60:73:fd:15:ef:
                    eb:d8:6f:75:d9:c3:73:82:a6:4f:a0:85:48:58:9d:
                    dc:76:4f:85:41:32:4c:82:4e:ca:cd:31:5e:e9:13:
                    1a:6f:55:82:50:fa:47:bc:61:7d:84:93:d0:6b:51:
                    f0:90:4b:1f:ca:56:ca:85:c7:16:f2:92:f4:89:31:
                    01:73:be:f9:33:aa:07:d1:3d:52:c3:b8:be:db:5f:
                    29:3c:6d:e0:91:22:a0:39:4e:d0:1a:fd:ed:60:5c:
                    22:a1:e3:2f:e9:78:fa:29:e7:7d:0a:fc:b8:00:d7:
                    14:4a:fd:7c:15:69:de:8a:6f:87:6c:4a:29:7a:8d:
                    d7:0b:51:dc:da:fb:9b:65:a6:6d:2d:ad:e1:dc:f0:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:0C:85:1E:A4:57:CA:A9:C0:A0:64:67:18:10:F0:13:72:4E:28
            X509v3 Authority Key Identifier:
                keyid:51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/fb7a06688e6622a7a1dea50abdf950ce60feae98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/14cccbd44c277091b395ba21d80e9bd47281ef92.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.120.0/22
                  168.90.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:b7:b0:30:93:09:97:49:04:ce:c7:6f:0b:b8:f0:10:4d:
         e5:48:ef:6a:bf:dd:ed:11:b3:fa:27:33:03:40:c1:a8:1b:00:
         55:08:4e:8b:f7:8e:6e:2d:54:63:c1:fe:5a:ea:64:b1:7b:ef:
         2e:22:4b:ca:31:f1:25:08:80:c9:0a:f5:3b:f1:32:67:a5:50:
         19:a6:02:5a:73:80:f7:78:3c:69:90:cd:ad:62:24:e1:0f:dd:
         f1:c3:17:90:d7:c8:12:86:34:c5:8b:d4:c0:0a:63:fe:d0:97:
         9f:64:57:55:02:5e:1b:a0:ba:29:02:f1:2f:07:e4:cd:fc:f2:
         38:b6:80:7d:20:3f:69:cd:25:0e:57:77:21:34:bc:5d:07:3d:
         7a:fd:3b:72:55:44:e2:35:22:f9:73:8e:dc:7d:ee:0e:28:fb:
         e9:4c:84:c4:f8:96:9b:2f:4d:de:e0:9e:90:18:84:5d:32:32:
         f9:1c:3e:55:c8:6f:a3:f0:a3:ca:3c:0f:54:cd:55:d6:29:be:
         9e:1f:23:95:8a:d7:7b:0b:bc:61:56:7c:dc:25:98:9e:f9:7c:
         f0:84:6f:90:c8:27:ba:00:85:eb:2b:3a:14:bd:34:9d:37:9a:
         8a:53:56:3c:01:60:bf:12:74:64:23:4f:02:d0:47:ab:d6:aa:
         8a:67:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org