Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/64328ce7661048f68a57f80573eff34da3d9016f.roa
File:                     64328ce7661048f68a57f80573eff34da3d9016f.roa (raw, json)
Hash identifier:          /gdnEv0FUIbESKeyN1shbjDRRO4F2eb9P3O1qo3QwIc=
Subject key identifier:   07:39:8A:D2:6E:AB:3B:FB:C5:BA:63:B0:2C:BD:04:CF:B5:92:E9:61
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       06126C
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/64328ce7661048f68a57f80573eff34da3d9016f.roa
Signing time:             Wed 12 Jul 2023 15:50:50 +0000
ROA not before:           Tue 11 Jul 2023 15:50:50 +0000
ROA not after:            Sat 12 Jul 2025 15:50:50 +0000
asID:                     7418
IP address blocks:        201.188.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397932 (0x6126c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul 11 15:50:50 2023 GMT
            Not After : Jul 12 15:50:50 2025 GMT
        Subject: CN=64328ce7661048f68a57f80573eff34da3d9016f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:f3:02:fa:d0:ad:9c:5d:3a:7d:08:53:d1:
                    4a:38:11:c3:53:10:08:7c:d2:88:2b:03:1f:ea:89:
                    ec:cb:10:65:84:3a:aa:b8:c1:0d:a9:de:bc:3b:1d:
                    dd:73:cd:6b:d5:9c:10:e7:d6:c1:f1:4a:99:d2:68:
                    b7:72:c8:c0:27:1f:34:89:fa:7d:9f:b2:12:d1:7e:
                    28:bb:8a:dc:49:3c:02:20:ae:f2:8e:5c:ed:1f:db:
                    d5:85:ce:53:1d:10:2f:0e:04:fe:54:9f:85:a0:39:
                    76:20:da:84:47:71:11:dc:51:0f:27:08:ad:e2:ab:
                    98:42:07:a9:b2:a1:11:50:b3:04:ef:36:c7:31:91:
                    d9:c8:db:b6:a2:3c:d8:d6:35:7a:dd:2e:83:e4:b0:
                    f8:27:a6:ec:39:ea:89:c1:c0:e3:05:e9:a8:63:56:
                    86:3f:ed:cc:f3:26:ca:97:fe:c3:47:98:47:95:0c:
                    6b:07:41:12:d1:eb:ea:05:0f:76:7b:42:6c:35:cb:
                    55:05:3f:ce:a5:1a:0f:fb:3b:05:9b:13:d8:61:e9:
                    7a:85:28:b2:0a:4c:d4:bd:69:3e:44:c2:28:5c:5f:
                    2a:ef:22:70:14:c4:59:1f:81:39:ec:52:03:b5:f1:
                    05:66:c8:7e:66:6d:4a:af:44:aa:15:78:90:4b:40:
                    92:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:39:8A:D2:6E:AB:3B:FB:C5:BA:63:B0:2C:BD:04:CF:B5:92:E9:61
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/64328ce7661048f68a57f80573eff34da3d9016f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.188.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:e2:55:a0:1a:6a:1a:71:b5:5d:b5:0b:cc:7b:17:11:3d:
         70:1e:cc:c3:dd:e5:ea:31:7d:6e:30:98:6c:0d:d4:c3:cd:f1:
         8b:50:1a:e1:73:7b:46:9f:09:69:8e:9c:44:ee:cf:e9:74:69:
         68:23:4b:cb:89:bb:08:4f:3b:fd:b5:f9:a0:02:69:8e:31:5f:
         21:a0:3f:0d:a2:5c:81:78:de:58:4b:cd:9c:a8:e3:ed:b5:32:
         6a:6d:a5:b9:38:5c:1a:7a:50:48:72:27:10:b3:60:16:90:70:
         c9:22:17:8c:bc:28:91:27:66:71:3c:3d:ca:e3:81:38:d8:a7:
         13:cd:0e:0c:42:27:82:c0:aa:48:df:74:3f:4f:cf:21:36:75:
         2b:c7:0c:85:d0:84:5e:0c:77:b7:66:ab:89:51:a9:2b:7c:68:
         01:cb:2a:26:81:d0:32:cd:35:b3:46:ac:d4:b9:0a:ef:d6:16:
         2d:14:c3:d2:0f:fb:12:23:ac:bb:7b:02:30:60:a5:82:82:53:
         2f:ed:f6:aa:ad:ce:be:62:14:2a:40:4c:d9:5a:73:3d:03:8a:
         7f:f1:ef:d4:1e:29:8c:28:f5:06:eb:3a:c2:a6:9e:a1:fb:83:
         f7:81:db:bd:84:f2:42:f7:8b:3f:09:96:0b:5b:02:5a:cb:1d:
         eb:54:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org