Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/807cd4aff458962a965a20db010350072140f1c8.roa
File:                     807cd4aff458962a965a20db010350072140f1c8.roa (raw, json)
Hash identifier:          dExirQkTYn0h1+yqFd6zYBRROjmt9ahF7rcMbTgl6jw=
Subject key identifier:   8F:A4:3A:4A:EA:23:B1:76:53:42:2D:4B:85:1B:66:13:30:D8:7A:D2
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       042C14
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/807cd4aff458962a965a20db010350072140f1c8.roa
Signing time:             Wed 12 Jul 2023 15:09:43 +0000
ROA not before:           Tue 11 Jul 2023 15:09:42 +0000
ROA not after:            Sat 12 Jul 2025 15:09:42 +0000
asID:                     7418
IP address blocks:        201.246.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273428 (0x42c14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:09:42 2023 GMT
            Not After : Jul 12 15:09:42 2025 GMT
        Subject: CN=807cd4aff458962a965a20db010350072140f1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:f8:6e:f0:70:7d:8a:77:89:9e:f5:37:f1:
                    4f:39:85:77:79:da:fe:36:79:b2:a9:ba:4d:ab:05:
                    22:72:13:17:4e:bb:63:af:b8:14:1f:59:45:5f:4c:
                    c3:0b:58:f0:a0:18:6d:33:d4:3c:8a:9f:b2:62:a9:
                    3a:81:ec:43:8c:58:6c:20:4f:1a:5c:03:74:7f:09:
                    c4:cc:54:ba:30:85:a4:46:e9:f7:5e:08:67:ce:b7:
                    c8:0a:f2:a3:d1:15:e8:5c:18:60:ef:a6:ac:b3:96:
                    70:68:85:f9:93:c5:d1:f5:50:d0:de:13:2e:86:2f:
                    a7:ac:13:31:b1:8f:0b:30:ee:8d:5c:f5:0e:18:76:
                    f9:84:5d:65:f6:dc:49:64:9e:f0:21:52:83:22:30:
                    50:8f:b4:c7:8d:fa:45:de:58:2e:3a:ac:58:79:9c:
                    2b:bb:8c:4d:cd:75:5e:4a:b4:da:6e:50:c6:92:e7:
                    7f:6f:40:06:6e:c5:e1:23:5f:91:d5:9e:f1:bc:72:
                    c5:78:1e:d1:a8:d0:4f:66:4d:fb:d9:e4:57:4a:82:
                    ba:02:57:0c:a6:aa:44:01:fe:5e:7b:6b:d0:78:79:
                    fa:25:df:6a:2b:a0:9b:04:17:ee:bc:eb:23:50:64:
                    f0:b4:aa:d6:1d:d2:89:72:19:49:0a:ea:ef:95:42:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:3A:4A:EA:23:B1:76:53:42:2D:4B:85:1B:66:13:30:D8:7A:D2
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/807cd4aff458962a965a20db010350072140f1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:3c:52:06:94:e5:90:6b:91:5d:a4:5b:71:06:9e:a9:cb:34:
         2b:a6:90:2a:0b:3d:cf:bf:a6:f0:a6:d0:22:60:7a:53:24:16:
         80:db:bd:13:bf:2e:7c:a4:04:9e:f6:8d:c2:d8:7b:c8:80:f8:
         57:54:1a:51:14:ce:af:dd:91:40:7e:69:17:05:7a:98:1b:ab:
         a2:fc:ad:93:6c:f4:2d:2a:c2:8b:8c:8b:f3:ad:99:cd:a3:89:
         0b:ed:9c:6e:a8:9b:0c:76:19:31:2d:d9:af:e5:65:48:20:3b:
         36:3a:5a:ba:fb:7f:07:7e:51:85:46:7f:8e:da:19:67:5e:63:
         50:7b:e4:a1:01:81:a0:92:77:e4:c6:32:7c:86:c6:a8:3e:74:
         62:0f:82:cd:68:06:7b:e6:12:ad:c8:ca:a2:60:66:48:e3:c3:
         aa:7a:90:65:19:19:8d:44:7c:fe:84:a7:47:24:8a:be:bf:8e:
         69:e9:42:f1:70:a2:9b:ce:bc:bd:f5:45:d0:d8:c9:0e:79:89:
         ef:13:44:b6:c6:56:d5:3f:43:e4:6a:3a:0f:b4:1a:67:59:50:
         9f:68:27:05:d5:c1:25:5d:29:b7:b6:76:c8:be:93:11:ec:5a:
         91:ec:36:2b:8e:f3:f1:c7:23:89:cc:24:38:cb:4b:4c:ef:1c:
         4a:6e:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org