Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/c8f6281463ab0aa96c50104e7f66e5d72dc9e6fe.roa
File:                     c8f6281463ab0aa96c50104e7f66e5d72dc9e6fe.roa (raw, json)
Hash identifier:          a95pCFlXO0UXJMyl0c2eidv4EdR0x4d0wNEcRV5+Yl4=
Subject key identifier:   70:7D:32:33:2D:D9:23:37:0F:3C:88:D6:A1:C5:BE:95:C0:7F:D8:F4
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       049652
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/c8f6281463ab0aa96c50104e7f66e5d72dc9e6fe.roa
Signing time:             Tue 18 Jul 2023 20:04:18 +0000
ROA not before:           Mon 17 Jul 2023 20:04:18 +0000
ROA not after:            Fri 18 Jul 2025 20:04:18 +0000
asID:                     7418
IP address blocks:        201.222.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300626 (0x49652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 17 20:04:18 2023 GMT
            Not After : Jul 18 20:04:18 2025 GMT
        Subject: CN=c8f6281463ab0aa96c50104e7f66e5d72dc9e6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:32:28:79:9e:22:8c:f9:24:0f:00:b8:53:
                    14:4f:09:c2:f5:90:f0:74:28:4c:b4:15:3b:7d:ea:
                    1b:ce:ad:35:9c:d1:dd:50:65:6b:9b:a1:a2:5e:6d:
                    fd:11:8d:35:6d:bc:6e:e5:9a:6a:34:b0:3a:6b:8f:
                    ea:43:f0:2d:c8:94:8a:f1:fb:5f:04:32:da:b8:01:
                    4b:2d:88:c8:82:06:00:76:f7:69:a1:bd:77:34:38:
                    a3:ef:3f:f7:59:ac:e4:e5:a8:f7:51:f6:46:94:8c:
                    1b:42:1d:63:c8:fd:1a:4f:fa:06:5c:49:ff:b9:7e:
                    08:73:d5:ac:1c:e4:30:58:c8:5e:a1:5a:a3:1b:c8:
                    4c:e0:c4:3b:af:45:93:89:73:a1:94:7b:90:ca:71:
                    e5:49:82:23:4f:7b:52:17:ee:55:40:31:a5:48:49:
                    3f:46:4d:53:fe:32:ea:84:2e:45:09:b8:54:1e:63:
                    71:21:40:6e:b5:1b:aa:d4:57:76:8c:b1:1b:ab:0a:
                    a1:bb:ce:72:4c:c4:aa:c7:b4:e0:83:79:65:4d:70:
                    a8:7b:2a:78:c5:0b:c3:fa:fb:02:f8:23:ee:35:70:
                    0e:fe:55:66:ea:48:73:25:79:d6:74:e1:6e:e1:00:
                    71:e4:95:49:6f:b1:ef:39:e7:d7:2d:93:cd:8d:6a:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7D:32:33:2D:D9:23:37:0F:3C:88:D6:A1:C5:BE:95:C0:7F:D8:F4
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/c8f6281463ab0aa96c50104e7f66e5d72dc9e6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:0e:b0:c4:0a:99:ef:8c:92:ac:71:12:0c:73:51:53:a8:
         6a:92:a7:61:6b:0e:d3:54:16:31:f4:7b:8b:83:a3:ff:91:ba:
         95:42:da:c6:3e:59:91:37:88:20:56:4e:20:73:dd:c7:b9:b9:
         1c:25:8c:ad:13:38:10:96:b6:b3:9a:bc:3b:6d:7d:19:c4:82:
         e2:df:46:8e:06:cb:a6:bb:ee:c1:af:08:54:02:03:f5:9e:89:
         52:4c:92:2f:b8:6a:9f:13:7a:a0:ac:3c:76:ad:ea:41:3d:42:
         66:11:f3:15:60:21:8a:b5:9f:37:fc:2b:c3:42:6a:8a:ec:91:
         7d:3f:aa:7d:3f:25:f4:12:fc:11:48:17:9b:89:6c:62:53:99:
         c9:f8:a5:9f:a7:90:cc:31:14:fd:85:03:97:aa:58:86:db:07:
         9b:a0:60:d7:e7:50:42:67:56:eb:de:37:0c:62:61:d7:6a:c2:
         f4:9b:b4:51:9d:06:01:77:c3:1c:3e:9e:ea:1b:26:49:43:d8:
         ff:db:c5:19:a5:69:75:55:43:04:47:d5:2a:08:81:2b:cb:41:
         6b:9f:cf:43:ef:38:94:20:7f:3d:47:a1:f8:5a:d8:8b:ff:72:
         ca:c3:ee:a3:8b:0b:63:fb:46:40:37:2f:0a:54:ea:2a:f2:f6:
         ee:fd:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org