Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/267dec49b8af9071e1761fe46cdc0cb9e0046e2d.roa
File:                     267dec49b8af9071e1761fe46cdc0cb9e0046e2d.roa (raw, json)
Hash identifier:          ZGDmn2M7pyxZdyjfLEJOapfdZK6cINdB6tcOACLWKag=
Subject key identifier:   F8:A6:CA:AE:25:6C:BD:74:67:3C:C1:54:BD:4A:7E:2A:44:C7:CD:F2
Certificate issuer:       /CN=7c048592d36e70d9897ab1b5d210b9deda4621c5
Certificate serial:       0252D7
Authority key identifier: 00:53:0C:2C:42:3F:10:C4:D2:32:EB:5E:63:FF:8B:1E:97:E1:AE:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c048592d36e70d9897ab1b5d210b9deda4621c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/267dec49b8af9071e1761fe46cdc0cb9e0046e2d.roa
Signing time:             Mon 03 Jul 2023 20:24:21 +0000
ROA not before:           Sun 02 Jul 2023 20:24:20 +0000
ROA not after:            Thu 03 Jul 2025 20:24:20 +0000
asID:                     264631
IP address blocks:        143.202.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152279 (0x252d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c048592d36e70d9897ab1b5d210b9deda4621c5
        Validity
            Not Before: Jul  2 20:24:20 2023 GMT
            Not After : Jul  3 20:24:20 2025 GMT
        Subject: CN=267dec49b8af9071e1761fe46cdc0cb9e0046e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ed:02:c7:13:61:48:4a:90:36:c7:c3:fd:b4:
                    1b:46:e8:ed:77:c8:a4:11:87:d2:34:07:28:28:0c:
                    1f:b4:17:da:44:d9:a7:51:b0:56:53:f8:0c:f8:53:
                    16:51:a8:7d:84:df:5e:51:b3:16:fc:9c:70:01:de:
                    1f:3b:9f:76:85:a3:8f:a5:ec:e4:06:d5:57:35:fc:
                    7b:b1:3c:6d:d3:fa:0d:b6:9b:cd:c0:69:2f:60:a4:
                    bd:4c:7a:58:5d:94:3f:f6:ff:36:9e:26:fe:ee:3f:
                    b1:c1:58:b4:dd:a9:70:55:e4:e6:fa:2d:76:5b:10:
                    59:ef:a5:54:41:8b:19:04:1f:35:45:1a:e0:32:69:
                    1e:37:76:c5:a7:01:7b:4b:2c:b6:fc:75:62:09:9c:
                    2f:c8:49:d5:55:89:20:17:01:07:52:e3:43:66:5a:
                    2c:26:d6:87:03:5d:49:be:61:31:a7:ce:c6:fd:83:
                    78:e7:98:df:53:c6:5e:45:74:8d:1e:2d:9c:54:0f:
                    36:fa:5e:21:7d:54:71:c0:b8:a6:19:12:e6:d5:e0:
                    4e:9e:a4:c4:25:b1:6d:fd:20:6e:4c:f3:bd:40:6f:
                    5e:0e:fc:0d:03:a7:b9:0b:e4:67:0e:db:88:75:77:
                    c8:c2:a3:0f:25:e7:44:04:0c:d1:94:96:60:ff:80:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A6:CA:AE:25:6C:BD:74:67:3C:C1:54:BD:4A:7E:2A:44:C7:CD:F2
            X509v3 Authority Key Identifier:
                keyid:00:53:0C:2C:42:3F:10:C4:D2:32:EB:5E:63:FF:8B:1E:97:E1:AE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c048592d36e70d9897ab1b5d210b9deda4621c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/267dec49b8af9071e1761fe46cdc0cb9e0046e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/7c048592d36e70d9897ab1b5d210b9deda4621c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:84:8a:a7:30:65:24:43:d6:47:91:a0:58:bb:6d:21:cf:38:
         35:9d:ed:f6:02:16:e1:0c:39:fa:dd:2c:b5:56:fa:68:bc:a2:
         1c:fa:13:34:5f:aa:f8:79:03:3f:ea:0b:a6:7e:37:72:61:3e:
         f4:98:75:8d:da:66:6e:d8:8f:c8:a1:fc:3e:3a:bc:d7:51:65:
         29:a2:af:40:06:b2:f6:21:72:dc:69:b5:d1:57:ad:91:a7:ad:
         38:f7:7b:98:96:c0:21:54:33:bc:43:fd:99:76:76:f4:04:40:
         72:c4:1a:e2:c6:0c:2b:98:7c:29:d0:21:60:95:37:78:5f:0f:
         f1:be:97:59:ed:07:0d:95:69:5c:b0:ad:14:d8:06:ac:83:16:
         ec:26:7a:f1:25:9b:8f:5e:ca:c2:cf:85:2d:e3:3e:6c:cf:90:
         e9:ff:80:d4:2a:36:87:19:45:3b:7e:3d:31:45:b2:d4:c2:74:
         8f:c7:81:68:67:10:8e:d6:d9:3f:62:03:d5:b0:23:3e:ee:08:
         71:d8:bb:2e:31:06:9f:f1:6b:86:fe:df:11:eb:94:7a:5e:8b:
         7c:62:6f:72:9d:28:8a:fb:94:a8:be:92:78:6e:cc:bd:d2:2d:
         63:98:a8:85:d6:75:21:d2:91:96:44:6f:08:8e:de:f9:6b:03:
         63:47:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org