Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/2225cde6aa9f5cf29b289300d38a808cbdbfd845.roa
File:                     2225cde6aa9f5cf29b289300d38a808cbdbfd845.roa (raw, json)
Hash identifier:          gPpx1mbtIhqraaqXHGw8YUdl+sVTXUNl9YYuQ2t26mA=
Subject key identifier:   36:95:08:0C:C6:E4:06:F2:99:B9:05:31:F3:31:88:82:B4:28:C1:7C
Certificate issuer:       /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial:       07CD0D
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/2225cde6aa9f5cf29b289300d38a808cbdbfd845.roa
Signing time:             Wed 14 Sep 2022 23:13:43 +0000
ROA not before:           Fri 05 Aug 2022 22:56:17 +0000
ROA not after:            Mon 05 Aug 2024 22:56:17 +0000
asID:                     7087
IP address blocks:        200.52.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511245 (0x7cd0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
        Validity
            Not Before: Aug  5 22:56:17 2022 GMT
            Not After : Aug  5 22:56:17 2024 GMT
        Subject: CN=2225cde6aa9f5cf29b289300d38a808cbdbfd845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ac:79:56:4e:33:b7:f0:9a:ed:3d:bb:84:d2:
                    7f:4a:df:b0:28:1f:76:0a:bb:1c:b8:92:57:f3:39:
                    28:73:32:75:05:55:cf:6c:c4:7f:fc:3f:9b:59:2c:
                    a1:ab:71:ef:d1:7c:37:ed:1f:f5:a9:76:5b:64:4b:
                    db:88:fc:0e:6a:f4:13:cb:02:47:e1:dd:03:71:16:
                    ee:16:aa:5b:c0:c1:ac:1e:0e:99:86:e5:88:0c:a0:
                    05:0d:cf:e6:38:82:1b:28:c1:1f:8a:38:52:aa:e1:
                    d7:e4:71:6a:4a:dd:0e:23:51:8a:fd:c6:0e:10:e2:
                    42:89:b6:06:a8:61:59:58:95:23:0d:e1:90:4e:85:
                    f5:fe:57:32:d4:ed:45:4e:03:48:4c:d0:24:26:f1:
                    35:c5:3f:6c:bb:8e:06:b6:3b:bc:27:d9:8d:a0:82:
                    5a:99:85:a5:35:7f:d9:57:c1:d7:ef:4d:91:84:db:
                    7d:97:19:9f:53:dd:e9:8f:d4:89:20:c7:8f:61:cb:
                    43:b4:79:f4:71:b2:ec:4a:ca:42:3b:3e:7e:d6:05:
                    7a:4e:8a:27:d0:a1:f4:5c:2c:78:91:ab:af:c1:30:
                    cf:08:97:9e:17:62:ac:dc:15:70:c8:24:eb:49:fd:
                    ac:20:28:92:50:ea:fb:c6:87:ef:4c:8d:02:c1:cc:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:95:08:0C:C6:E4:06:F2:99:B9:05:31:F3:31:88:82:B4:28:C1:7C
            X509v3 Authority Key Identifier:
                keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/2225cde6aa9f5cf29b289300d38a808cbdbfd845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:61:ba:40:15:03:45:cd:a1:6f:53:c0:c1:04:d3:3a:c1:
         bf:ef:ea:e5:97:ea:73:5a:36:f7:be:04:25:f1:28:69:5f:95:
         9e:91:29:de:57:d3:bf:16:e3:72:0c:ba:87:58:f4:1e:90:9c:
         74:8f:c6:1e:36:b4:6a:af:95:2d:09:0d:f4:5a:0e:33:6d:62:
         cf:76:54:e1:b8:d4:8e:6c:f7:a0:24:ec:47:44:15:92:b5:97:
         b1:58:02:aa:74:98:1e:0f:a0:78:b0:9e:21:e5:3e:90:95:35:
         51:87:dd:8e:76:ab:84:f6:6a:0c:f2:5d:6b:6a:44:60:cf:3c:
         74:39:21:a0:ce:18:b2:b4:7d:b4:a2:91:eb:e1:1d:f8:cc:d6:
         95:e6:78:e2:44:ba:17:a7:d9:d8:d8:fb:7f:8f:04:fc:dd:6d:
         ff:73:e7:b8:17:7e:39:b1:11:96:3f:c1:e4:75:d3:47:b9:b5:
         51:78:0d:6f:2c:8e:8c:cd:13:83:cd:58:7a:03:9f:96:4a:16:
         38:15:a1:22:90:c6:f1:79:6a:9e:24:2e:05:28:45:0f:19:3a:
         81:95:59:3e:69:7c:42:73:a2:f1:cb:9b:7b:06:3d:a0:94:8d:
         6c:3a:9a:64:e8:55:d9:b9:14:dc:55:49:d8:30:1f:43:9e:ce:
         c7:8b:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org