Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/946d6cd5f0ddcb4927d4e00c87bf1f42d23a6f51.roa
File:                     946d6cd5f0ddcb4927d4e00c87bf1f42d23a6f51.roa (raw, json)
Hash identifier:          2XMG06gHh0Vkfevw8V+TehKP3Kkv0uduL+o3z3Pipw4=
Subject key identifier:   18:81:13:40:F4:82:BE:AF:A8:58:39:1B:3D:BC:4F:52:82:38:19:0D
Certificate issuer:       /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial:       06B89C
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/946d6cd5f0ddcb4927d4e00c87bf1f42d23a6f51.roa
Signing time:             Sat 06 Aug 2022 01:14:55 +0000
ROA not before:           Fri 05 Aug 2022 22:56:17 +0000
ROA not after:            Mon 05 Aug 2024 22:56:17 +0000
asID:                     27932
IP address blocks:        200.52.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440476 (0x6b89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
        Validity
            Not Before: Aug  5 22:56:17 2022 GMT
            Not After : Aug  5 22:56:17 2024 GMT
        Subject: CN=946d6cd5f0ddcb4927d4e00c87bf1f42d23a6f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:67:4c:aa:82:47:3e:36:f6:4f:eb:a2:71:
                    c3:48:b4:33:44:5c:8b:bb:90:ce:c1:85:94:83:2c:
                    9d:63:e6:34:e9:ca:db:43:1d:44:53:75:84:96:bb:
                    a7:de:3b:15:21:ff:2c:fb:f9:31:fb:ee:70:b6:d5:
                    3c:c5:6e:59:7e:81:f2:e6:50:01:16:d8:e7:0e:d9:
                    ee:88:65:4e:e6:33:ba:b0:59:d8:0d:cc:0e:b7:23:
                    b5:c9:3f:f1:cf:08:72:ae:53:4a:ea:8b:0f:29:be:
                    32:da:42:2e:d5:d2:d5:72:23:12:21:4b:ae:2e:69:
                    24:54:00:51:4f:0d:88:b6:a2:b4:76:3a:b5:8b:ab:
                    51:c4:50:e4:d2:23:ee:01:bf:bb:5d:5b:51:01:49:
                    24:e6:1e:84:c6:25:86:93:b3:d3:8e:50:f2:91:9f:
                    39:aa:57:4e:32:2d:f9:c6:09:72:bf:6c:67:a5:d8:
                    c2:e9:41:fb:cc:38:b4:ca:7c:f1:48:49:d3:8d:32:
                    26:8a:d7:d5:ac:83:21:63:a6:48:45:2c:24:f3:91:
                    c5:77:56:23:1d:f6:e3:82:0d:11:36:93:dc:1e:34:
                    87:8d:c1:f3:7f:2c:14:07:4a:f9:1d:12:01:d8:f8:
                    37:ff:fe:23:50:45:72:43:8b:34:84:b7:62:bf:2a:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:81:13:40:F4:82:BE:AF:A8:58:39:1B:3D:BC:4F:52:82:38:19:0D
            X509v3 Authority Key Identifier:
                keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/946d6cd5f0ddcb4927d4e00c87bf1f42d23a6f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:9b:cb:2a:a3:94:68:c9:e9:98:45:b5:6e:00:27:5e:ec:cc:
         d7:b7:35:07:48:e3:8b:3e:2a:8b:e3:36:39:6f:bb:0c:23:17:
         af:fe:ce:84:f3:70:89:ae:c2:17:2b:bc:af:c0:4d:47:be:b4:
         d7:d0:f4:a5:3c:09:51:64:9f:90:2f:2b:26:8f:6e:51:c6:cc:
         aa:c8:ef:73:65:a8:4f:1c:00:ac:6a:2c:d2:a9:c4:32:0f:c9:
         94:0c:40:70:9c:2c:a7:ce:1b:d1:0d:33:88:8e:6c:59:39:7c:
         20:e0:f3:a4:08:ab:51:92:38:6e:c8:5a:c6:55:8b:17:1b:b1:
         fd:21:37:41:60:b1:db:0c:36:f2:6f:cd:fb:95:91:36:2a:12:
         7a:a6:2a:88:07:e7:da:09:3d:58:90:63:cd:88:d5:e4:0d:90:
         7d:ee:d7:d1:dc:b8:17:f1:4c:04:4a:0c:76:a2:ff:e7:da:cd:
         2a:e9:7f:c7:68:f2:31:63:0d:f8:78:92:ec:7c:0e:5a:d0:dc:
         41:51:a9:dc:23:2d:21:4f:6a:65:ff:51:3f:49:23:aa:4c:d6:
         d0:02:7c:49:f7:bc:b3:d3:c7:1f:84:60:90:29:66:2e:fb:0a:
         77:c6:4c:ed:3c:bc:df:58:c9:8a:0a:c7:f2:d3:e1:c2:be:ec:
         16:85:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org