Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/5f691b2efc9091a51c4d3d157f6faee227021146.roa
File:                     5f691b2efc9091a51c4d3d157f6faee227021146.roa (raw, json)
Hash identifier:          mZ37ByBgWZZCqNWH4SOMGtGfPnI62ELgxPr/wfxujSc=
Subject key identifier:   60:EE:5F:AF:F7:92:C5:07:AB:89:14:D8:66:00:2E:D2:5B:BB:D5:AF
Certificate issuer:       /CN=14ca70169ff8886e815bd50416068dfdf2827fa6
Certificate serial:       165858
Authority key identifier: 47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/5f691b2efc9091a51c4d3d157f6faee227021146.roa
Signing time:             Thu 03 Feb 2022 22:04:19 +0000
ROA not before:           Thu 03 Feb 2022 03:00:00 +0000
ROA not after:            Sat 03 Feb 2024 03:00:00 +0000
asID:                     264744
IP address blocks:        170.238.0.0/22 maxlen: 24
                          190.52.192.0/20 maxlen: 24
                          200.107.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464408 (0x165858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ca70169ff8886e815bd50416068dfdf2827fa6
        Validity
            Not Before: Feb  3 03:00:00 2022 GMT
            Not After : Feb  3 03:00:00 2024 GMT
        Subject: CN=5f691b2efc9091a51c4d3d157f6faee227021146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:a9:e3:b5:69:63:dc:eb:8a:cb:77:bc:23:
                    7d:1e:df:0d:89:e1:dc:df:b8:93:74:b4:22:1f:a7:
                    ab:db:eb:48:22:64:9e:33:2a:4c:cd:6c:1b:bf:71:
                    46:cf:9e:3d:99:a2:1c:da:c2:aa:29:ea:ce:4d:c9:
                    73:45:dd:96:99:ab:6d:16:aa:c6:38:fb:f3:29:0f:
                    ab:0a:f3:ff:fa:38:0c:ec:99:3a:2e:7f:f6:fa:f2:
                    b1:24:e2:38:75:80:44:17:5f:8f:cd:67:43:8d:10:
                    fc:1b:09:c2:80:07:27:c1:d9:7a:5e:95:78:01:1d:
                    f4:cb:c4:35:05:eb:a2:21:b6:ab:54:e4:96:f9:58:
                    80:6b:58:ba:74:46:04:19:68:8e:63:76:af:6d:f1:
                    43:81:69:db:63:8f:77:28:92:68:1c:67:c9:80:f0:
                    b6:62:65:31:3a:95:79:78:5d:5e:15:3a:ba:00:19:
                    31:76:ee:e1:23:20:74:3e:0b:79:ac:f4:28:35:38:
                    e2:95:cf:74:48:4d:49:cd:38:78:e9:3e:df:7c:5c:
                    af:e7:d1:7d:3a:b5:87:06:32:7f:f8:ca:a1:82:47:
                    43:42:8b:b6:76:c9:fe:ab:c1:fd:d6:33:df:42:71:
                    cf:be:70:07:bd:d7:3e:4d:4d:f0:bf:c5:67:0b:87:
                    4c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:5F:AF:F7:92:C5:07:AB:89:14:D8:66:00:2E:D2:5B:BB:D5:AF
            X509v3 Authority Key Identifier:
                keyid:47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/5f691b2efc9091a51c4d3d157f6faee227021146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/14ca70169ff8886e815bd50416068dfdf2827fa6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.0.0/22
                  190.52.192.0/20
                  200.107.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:70:b6:24:66:e3:9d:42:47:cb:6c:83:23:21:ce:94:b6:
         d9:5c:6e:ce:9f:04:4c:66:77:be:fe:33:e0:44:ed:cb:bc:9e:
         87:49:61:89:28:50:11:15:e3:4e:9b:ab:4a:90:e6:e4:4f:18:
         cc:87:d8:cf:23:3d:72:83:27:f5:6d:58:79:65:4e:28:41:7d:
         28:fe:cf:0b:d7:ba:5d:26:28:85:5c:6c:9f:a5:69:c6:92:7c:
         ce:18:55:93:98:74:b2:ea:9e:b4:b5:89:32:fa:93:e0:90:73:
         dc:81:f2:bc:91:ae:2d:72:49:eb:ea:be:53:30:c4:53:04:3c:
         07:c8:6d:70:e8:db:05:03:cd:6e:9b:aa:40:58:5f:46:0d:f3:
         c9:a7:46:ef:ba:6e:50:92:a5:46:80:8b:09:5c:12:df:c0:90:
         cc:74:12:b7:4f:ef:57:36:a2:65:ef:d7:01:0a:dc:ed:4c:2d:
         3a:93:c5:fa:6b:f6:24:a8:10:0d:34:05:6a:5e:fd:2f:b8:13:
         d7:90:f9:c3:f8:2c:da:28:33:22:48:37:e0:bf:7f:fa:de:2c:
         7e:4d:5f:ab:39:7c:6d:b8:2a:09:05:47:30:f2:0a:57:af:45:
         a3:78:49:83:46:3b:40:f7:bc:13:48:3d:15:a4:6a:17:c5:44:
         b1:e1:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org