Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/146f20e207e097f68e89e22ac950207bd3abeb9d.roa
File:                     146f20e207e097f68e89e22ac950207bd3abeb9d.roa (raw, json)
Hash identifier:          ybe56fuErcAFDoRfRt0zh/2tCVvn2wnRyV8iPEBjXWI=
Subject key identifier:   52:FB:0B:DE:EC:73:8D:BC:2B:73:BA:E4:58:63:CD:71:BB:01:9D:A7
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       22A81E
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/146f20e207e097f68e89e22ac950207bd3abeb9d.roa
Signing time:             Thu 22 Jun 2023 18:16:29 +0000
ROA not before:           Wed 21 Jun 2023 18:16:00 +0000
ROA not after:            Sun 22 Jun 2025 18:16:00 +0000
asID:                     27692
IP address blocks:        200.123.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271262 (0x22a81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jun 21 18:16:00 2023 GMT
            Not After : Jun 22 18:16:00 2025 GMT
        Subject: CN=146f20e207e097f68e89e22ac950207bd3abeb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9c:b3:dd:78:17:25:e8:14:e9:0b:44:69:9b:
                    67:9d:d8:ee:bb:45:a7:e2:26:43:a9:21:15:4b:d3:
                    59:09:32:03:77:fd:8c:fd:40:1d:9e:94:ac:ff:6e:
                    11:ba:71:1f:b6:cd:6f:b7:13:30:0b:27:f0:77:0b:
                    b6:f4:7b:50:96:52:e8:34:88:e3:28:23:f4:f9:a6:
                    a6:37:8a:2c:7f:00:f2:e1:a4:8d:fe:37:64:c5:64:
                    d1:5b:17:2a:cf:6f:98:4f:b0:90:e1:0c:5f:dd:0d:
                    3a:f2:47:fd:ff:d6:61:b7:34:bb:cd:46:55:8e:c0:
                    52:e2:8c:9b:10:49:c6:83:7d:98:08:0f:b4:a4:74:
                    4c:51:b4:ac:d2:0f:19:d7:ea:8d:d7:40:a1:46:70:
                    48:ec:57:69:12:38:3d:9d:70:d3:d2:96:46:8b:f3:
                    fd:9f:e8:b8:0d:1b:80:39:ff:75:2c:d9:ae:23:07:
                    bf:db:e8:ea:9a:80:be:00:6f:a1:10:e5:e8:96:dd:
                    5f:e9:f0:02:68:dc:de:46:2b:11:b7:90:8c:5a:7e:
                    32:5b:aa:ad:5e:88:46:4a:69:1b:ae:75:f7:c0:a8:
                    bf:4e:f8:a7:ba:1a:7f:53:8d:8f:39:95:1b:1d:81:
                    0e:e4:ab:ae:f3:84:0d:09:43:aa:c9:ef:46:a8:ca:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:0B:DE:EC:73:8D:BC:2B:73:BA:E4:58:63:CD:71:BB:01:9D:A7
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/146f20e207e097f68e89e22ac950207bd3abeb9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:ef:fc:23:32:66:b3:ad:6d:29:3c:ae:fc:25:f1:86:bf:
         c3:3b:d1:41:66:be:0b:03:eb:d1:ba:88:67:15:5b:9d:3d:79:
         20:c6:f2:02:88:72:f0:4a:8d:3d:bc:d1:bd:7c:88:81:e3:3b:
         40:af:80:c0:df:6f:7c:e4:02:ed:4f:b8:5f:52:99:87:1a:15:
         f5:2f:24:a5:c2:2e:8e:f8:32:5c:fb:79:3d:a5:12:52:6d:f7:
         18:6e:f5:be:23:4b:11:5a:17:09:2f:36:6a:b3:86:82:ee:93:
         7b:72:79:f5:47:c9:db:89:47:93:dc:e9:42:44:c5:8d:d6:9b:
         6b:6c:54:9c:38:15:1d:98:87:42:3b:88:81:d1:f8:8a:0c:1c:
         ba:89:69:f9:07:01:49:b0:2a:d2:d8:dd:04:3e:82:be:94:ae:
         79:c4:03:e9:c5:5e:0b:2f:1a:b0:4e:0e:3d:41:54:1e:36:1c:
         ff:9c:dd:b6:a0:25:2a:16:e3:73:c0:35:0d:dc:57:d1:9c:77:
         65:e3:05:6e:8a:cf:8b:77:06:22:72:bb:92:b4:be:53:9c:4d:
         d7:66:1f:8a:12:5c:8d:82:99:fb:ca:46:f5:31:1f:a3:92:37:
         e9:fa:09:1e:06:6b:70:86:5a:40:0a:ec:99:99:2f:df:eb:e1:
         18:f4:1f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org