Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/de1d66601f0ffc93fa638aa633434d2f3155f764.roa
File:                     de1d66601f0ffc93fa638aa633434d2f3155f764.roa (raw, json)
Hash identifier:          4BAUDHBuimWAODnFBH2Ce56x/unYkfMRE/0euPLw7SA=
Subject key identifier:   29:80:30:37:27:EE:F4:02:68:5A:05:26:1A:99:69:46:6E:6B:7E:2A
Certificate issuer:       /CN=bd9cc6efd7eedf3240948db53c9cc6f0a17bad04
Certificate serial:       17BCA4
Authority key identifier: AE:9E:EC:1F:99:E0:2B:A2:C6:29:B6:30:2B:64:53:48:51:64:3C:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/de1d66601f0ffc93fa638aa633434d2f3155f764.roa
Signing time:             Fri 03 Jun 2022 14:21:47 +0000
ROA not before:           Fri 03 Jun 2022 03:00:00 +0000
ROA not after:            Mon 03 Jun 2024 03:00:00 +0000
asID:                     264643
IP address blocks:        143.255.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555620 (0x17bca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9cc6efd7eedf3240948db53c9cc6f0a17bad04
        Validity
            Not Before: Jun  3 03:00:00 2022 GMT
            Not After : Jun  3 03:00:00 2024 GMT
        Subject: CN=de1d66601f0ffc93fa638aa633434d2f3155f764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:83:6d:3d:3f:ba:32:73:7c:ea:9d:86:6c:
                    0e:ea:ed:a8:7a:9f:b0:c9:7f:22:59:60:ea:14:ee:
                    2d:f3:3d:37:ed:b8:1f:f0:c0:b6:43:b3:2c:6e:5f:
                    2a:fd:90:94:63:d6:a9:d4:f2:67:31:31:f0:b9:e0:
                    55:2c:7f:dc:de:3a:e1:a7:5d:4a:3f:2f:ae:ce:d8:
                    f5:b4:11:55:71:bc:90:12:90:81:b0:48:d9:9c:c6:
                    ba:e6:99:9e:54:c7:72:76:d8:dc:22:00:ac:1a:b0:
                    f5:e7:be:6b:38:c2:3e:7b:75:9a:62:18:df:a2:5b:
                    de:a7:c1:1e:22:bb:40:ae:31:63:a9:99:3b:69:3c:
                    d5:e9:45:a1:59:d5:6d:45:29:a8:7a:db:c4:83:6c:
                    c9:41:3d:1c:71:4a:62:39:df:7e:0d:ff:cd:d8:8d:
                    10:5a:be:6b:f9:24:8a:f6:42:d2:7a:89:93:0f:c3:
                    df:07:a5:18:6a:58:52:08:02:47:98:68:72:38:de:
                    a4:a7:56:a9:6c:b3:57:d3:60:10:e9:62:d8:bb:96:
                    e6:e6:cf:97:4a:95:b2:4c:39:33:bb:7a:82:77:e1:
                    72:0b:a1:e9:40:0f:01:cf:82:a8:c2:98:6f:ae:7e:
                    8b:c0:c9:6e:e6:93:56:3e:93:02:c7:5d:14:59:47:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:80:30:37:27:EE:F4:02:68:5A:05:26:1A:99:69:46:6E:6B:7E:2A
            X509v3 Authority Key Identifier:
                keyid:AE:9E:EC:1F:99:E0:2B:A2:C6:29:B6:30:2B:64:53:48:51:64:3C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/de1d66601f0ffc93fa638aa633434d2f3155f764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:97:6a:c7:87:f2:15:9f:0a:1e:34:3f:e4:c6:b7:c8:15:52:
         e1:55:d8:0c:88:a1:72:74:dc:c2:b8:b6:c4:c9:97:9a:6b:ec:
         8c:8e:fe:cf:11:5e:e0:a0:86:42:a2:2b:03:a7:68:0d:13:17:
         fa:c2:01:fd:f0:36:63:85:18:cd:02:31:46:7e:43:2a:31:a7:
         51:c0:21:a3:ea:ef:94:fb:5e:e9:99:8a:5b:2a:8a:fd:a7:9c:
         82:82:90:a5:16:db:35:11:12:ab:54:e7:06:33:cb:d2:c7:f0:
         41:c7:dd:cc:f5:ce:b1:67:d6:50:56:45:46:6d:e0:fa:e0:2d:
         ad:c0:16:ea:a9:f9:0e:db:be:7d:f9:6f:e8:c6:5d:1c:df:23:
         99:51:8b:b0:be:86:bf:d4:55:82:9e:99:64:23:cd:31:48:0a:
         1d:61:8c:20:cb:d4:a0:c9:b0:a2:e6:b0:fc:ec:2c:db:63:b1:
         17:ac:5b:f3:11:5c:92:4b:89:42:44:ef:d6:4b:5d:02:32:15:
         cf:00:82:b3:02:99:f3:1a:cf:d0:71:8f:da:55:0b:00:b1:10:
         eb:ab:1e:bd:b3:2c:d8:49:78:c6:7f:0d:ab:ec:cc:80:cf:40:
         ef:95:a2:dc:9c:b9:78:ad:ac:8c:72:75:0b:e3:3f:39:f9:08:
         b7:f1:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org