Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/12ecc7a60954f3bf0f4df9850a62602245966433.roa
File:                     12ecc7a60954f3bf0f4df9850a62602245966433.roa (raw, json)
Hash identifier:          XK4SlNJIhBqKErHOo6VyvqSRQ8sJozU8fpcl7R4AXKU=
Subject key identifier:   CB:C5:1F:9E:E0:A4:E9:D2:81:84:70:D1:BE:F3:6D:DC:BF:E6:32:0D
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       044452
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/12ecc7a60954f3bf0f4df9850a62602245966433.roa
Signing time:             Wed 12 Jul 2023 15:13:28 +0000
ROA not before:           Tue 11 Jul 2023 15:13:28 +0000
ROA not after:            Sat 12 Jul 2025 15:13:28 +0000
asID:                     7418
IP address blocks:        201.246.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279634 (0x44452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:13:28 2023 GMT
            Not After : Jul 12 15:13:28 2025 GMT
        Subject: CN=12ecc7a60954f3bf0f4df9850a62602245966433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:f3:d9:de:bc:7f:72:76:09:fa:2d:68:42:
                    fb:d0:2c:0a:f6:f4:72:71:6b:f3:e1:a6:5e:31:1f:
                    18:de:b0:00:f3:a1:2e:34:3a:ff:77:7f:c4:ef:99:
                    5d:ab:65:35:42:82:07:52:f6:58:ec:5c:03:47:1b:
                    f1:c3:77:0d:82:e8:0a:7c:e4:1f:14:7a:fa:dd:00:
                    f6:35:89:ec:d7:f5:21:21:e8:8a:d0:54:c6:9a:bc:
                    05:fd:d8:0d:17:ab:44:81:75:7e:0c:a6:a5:12:9a:
                    0e:0f:4e:52:91:64:2f:05:9a:c7:dc:73:a9:f6:89:
                    ec:4e:04:c8:d1:37:5f:86:58:a5:5b:b9:a0:c2:68:
                    38:2d:ea:2e:d6:a4:f4:98:d0:fe:cd:3a:74:46:c9:
                    f8:ab:19:0f:fd:27:a7:17:ba:7b:46:c4:77:69:dd:
                    a6:35:a4:06:19:de:46:3d:13:99:00:9b:a7:a4:2b:
                    b9:29:34:32:e3:fe:58:2e:6f:e2:60:4c:e0:ea:d7:
                    3d:13:98:71:fc:1e:1a:5a:a7:89:2a:86:1c:e2:86:
                    b2:d0:a7:92:04:ea:eb:29:1a:17:1b:4c:da:a6:7e:
                    55:2e:46:8e:c0:bb:0c:0a:e6:ac:a2:3f:ed:a6:ed:
                    c1:8c:17:2a:81:e1:0b:fc:1e:d7:7d:32:f4:59:25:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C5:1F:9E:E0:A4:E9:D2:81:84:70:D1:BE:F3:6D:DC:BF:E6:32:0D
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/12ecc7a60954f3bf0f4df9850a62602245966433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:f9:c6:f2:9e:a1:33:27:f0:34:1b:07:b0:09:e8:c6:4c:
         c2:d2:7c:ef:00:f1:3d:02:0e:d6:5d:db:2c:49:39:77:01:14:
         26:9f:2b:1c:08:7e:00:31:ad:9e:58:29:8f:54:0c:89:45:6f:
         b7:d4:ee:01:c3:7e:88:6b:31:ec:6a:ab:13:c2:1e:1f:fe:ff:
         86:4b:34:67:2a:7a:b4:67:3e:ab:8d:77:20:64:9b:8e:0b:bd:
         e4:ea:b0:13:79:8a:53:f4:06:00:87:41:6a:22:1f:3e:f8:0b:
         be:ee:10:e4:f9:5b:de:c8:b8:bc:59:96:24:d9:51:a3:ee:d1:
         b0:d5:96:ad:68:a9:ed:6e:d1:11:55:78:40:47:69:f3:54:c4:
         bc:6a:69:a4:23:be:e2:29:44:e8:68:72:20:3d:4c:92:6e:fc:
         03:89:33:7d:16:4a:ed:2a:99:32:39:c1:4b:3c:16:78:bf:01:
         fa:8d:87:1d:0c:42:31:fc:86:c1:b1:d3:46:47:da:5d:74:9c:
         cd:8a:1b:8f:28:6e:d2:35:77:2e:45:6c:3b:de:17:3f:20:ef:
         8e:05:23:24:51:11:b6:bc:5c:0d:7b:24:2e:43:b1:f9:42:17:
         29:cf:42:89:57:d1:90:b7:af:9b:c5:12:74:ec:7e:94:14:9c:
         4e:59:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org