Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3cdebc7fecdb515349dc5829c13835e377c272e8.roa
File:                     3cdebc7fecdb515349dc5829c13835e377c272e8.roa (raw, json)
Hash identifier:          idpyYyWxwWvlid6njcuBPatU6h6Hm3tm3PKgGNpursU=
Subject key identifier:   F5:8F:1A:C0:C3:6E:61:D8:F2:63:21:8F:FB:3E:37:7B:29:F4:AD:08
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       049CCA
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3cdebc7fecdb515349dc5829c13835e377c272e8.roa
Signing time:             Tue 18 Jul 2023 20:05:01 +0000
ROA not before:           Mon 17 Jul 2023 20:05:01 +0000
ROA not after:            Fri 18 Jul 2025 20:05:01 +0000
asID:                     16629
IP address blocks:        201.222.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302282 (0x49cca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 17 20:05:01 2023 GMT
            Not After : Jul 18 20:05:01 2025 GMT
        Subject: CN=3cdebc7fecdb515349dc5829c13835e377c272e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:bd:67:c2:23:09:73:4f:f8:b2:e2:ff:fc:
                    ee:04:7b:46:01:92:5a:35:a5:5b:2a:1e:64:f1:a3:
                    52:8c:dd:f3:ca:ef:f4:dd:be:40:47:01:a7:75:fd:
                    9b:4e:97:66:dc:15:af:ea:b2:8b:c5:21:70:ab:7d:
                    ff:b8:55:d3:25:27:06:6d:94:29:5e:7d:2b:72:2e:
                    83:b1:eb:c6:95:35:6f:fc:36:f1:95:ed:b4:ec:74:
                    fe:1d:d9:32:e0:0f:40:6c:56:98:7a:eb:89:3c:ad:
                    c2:83:4b:65:e3:5a:ea:e6:5f:cd:67:9a:6b:2c:68:
                    8d:17:f5:a3:b7:39:2b:3b:76:b5:fd:0c:ca:8e:1c:
                    70:2f:7d:a1:39:fd:48:87:5d:7f:fd:74:35:89:dd:
                    21:11:7f:3b:6c:3b:5f:fa:59:27:ab:24:63:fc:f6:
                    81:96:95:3b:03:67:b8:d5:bf:c1:ee:90:a5:97:6b:
                    40:9d:82:a4:c4:1a:34:32:62:1b:fd:c0:90:d7:de:
                    14:ef:23:29:32:f7:02:5e:3b:0f:ee:3f:6e:46:eb:
                    80:87:fc:fa:e1:1f:0b:cf:87:6e:60:29:c5:36:bc:
                    68:13:78:f5:5c:3b:19:4a:d7:4d:19:61:6d:38:a4:
                    17:a2:0a:b1:ce:f2:9a:e6:d8:49:51:e5:b5:35:f8:
                    82:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8F:1A:C0:C3:6E:61:D8:F2:63:21:8F:FB:3E:37:7B:29:F4:AD:08
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3cdebc7fecdb515349dc5829c13835e377c272e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:32:e9:b1:b0:e0:66:7b:79:30:61:b3:0d:a9:b6:4f:b9:
         98:12:79:3d:31:e9:a3:02:90:c0:ce:5e:f1:74:d3:72:f2:f2:
         73:36:2e:fc:19:5f:6e:85:39:0a:72:fa:88:88:1e:41:0f:c2:
         71:cf:a1:16:6a:00:30:83:f6:a0:b0:f2:09:2a:ef:04:69:62:
         ad:73:46:95:30:4b:dd:10:09:c6:79:8f:f0:56:f0:af:0e:b3:
         94:fb:76:cd:66:b9:12:6a:10:19:c8:53:5d:05:ca:e7:c4:bf:
         0c:a9:24:19:65:e1:ef:9b:eb:1b:c7:d7:df:5b:d5:b6:fa:f0:
         d5:bb:e8:69:4d:e1:f0:7c:25:db:86:70:7c:27:ab:1a:f2:7f:
         1b:e4:d5:55:6e:c7:cc:57:4d:2f:9f:aa:03:95:a5:f0:d8:02:
         03:02:21:a6:6d:17:a1:6e:02:03:50:14:46:9c:31:d1:b2:57:
         d6:64:80:bd:ec:c1:aa:b3:df:4e:29:67:57:99:4b:73:35:05:
         d0:18:69:be:c1:3b:a6:53:08:19:6d:9d:3a:95:27:ab:42:92:
         f1:76:21:e1:2d:11:3f:1f:89:83:42:61:3d:67:00:80:fd:47:
         02:f1:50:66:cd:36:6d:f8:4c:e7:34:01:88:0f:57:b8:7a:4d:
         4c:f2:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:48 2024 by rpki-client on console-fra.rpki-client.org