Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/2cc5b22287498434988b31f4cb27ab1dafbab2f2.roa
File:                     2cc5b22287498434988b31f4cb27ab1dafbab2f2.roa (raw, json)
Hash identifier:          tt+ne0PQr0HHm+lLWf4dFiVghKXn2jIdCA/ZI1AdWj4=
Subject key identifier:   5A:5D:1A:4B:68:A4:50:F2:1D:D6:BB:01:5E:5B:48:EB:1C:1A:A0:22
Certificate issuer:       /CN=6ce6d1bf69eb5ad45d04c6d15358e247afe93e94
Certificate serial:       07E836
Authority key identifier: 37:4C:48:A5:20:C7:96:45:BB:F3:AE:DD:90:EE:75:95:DE:00:36:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/2cc5b22287498434988b31f4cb27ab1dafbab2f2.roa
Signing time:             Wed 24 Mar 2021 22:52:27 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265786
IP address blocks:        192.141.148.0/24 maxlen: 24
                          192.141.149.0/24 maxlen: 24
                          192.141.150.0/24 maxlen: 24
                          192.141.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518198 (0x7e836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce6d1bf69eb5ad45d04c6d15358e247afe93e94
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=2cc5b22287498434988b31f4cb27ab1dafbab2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:ef:d5:8e:cb:86:7c:6c:e8:2a:a2:fa:cf:
                    26:39:5b:bc:8b:95:50:e5:00:6f:2a:99:e5:eb:40:
                    bc:f0:32:28:d1:b4:6a:c1:72:93:c2:8b:c3:4b:2d:
                    d6:ce:2d:2d:8a:a2:16:c4:18:6b:79:39:24:4c:2c:
                    39:3b:18:cf:3a:e2:94:ac:83:e5:da:b0:37:96:05:
                    76:f1:1f:27:6b:20:79:f2:b0:14:c4:16:6c:4a:f8:
                    93:4b:06:aa:de:8a:96:5b:ed:38:05:d1:b4:ca:f9:
                    71:b9:e6:bc:a8:73:68:eb:af:c4:51:28:e5:d0:9b:
                    15:05:01:36:2a:24:13:17:67:f6:aa:db:0f:8a:7b:
                    5b:10:b5:07:d7:68:5e:86:65:93:e2:90:c8:d8:c9:
                    3a:dc:fc:7b:0b:4a:be:f1:ae:05:8d:5d:66:92:36:
                    31:75:2d:e4:80:43:9b:a1:97:e8:4e:84:24:47:39:
                    06:63:bf:a9:48:ef:ce:41:4a:c9:fb:b8:2d:ca:05:
                    c2:62:81:13:1e:e6:b3:95:9f:90:b4:36:66:97:f0:
                    e8:b1:e0:20:ba:d1:d7:d6:8c:75:1a:7a:3b:b1:db:
                    2f:59:45:fb:fb:ce:85:0c:ce:4a:3e:21:b4:8c:43:
                    6f:94:3e:a8:0b:c1:56:b5:b6:f4:ce:bb:51:8b:2a:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5D:1A:4B:68:A4:50:F2:1D:D6:BB:01:5E:5B:48:EB:1C:1A:A0:22
            X509v3 Authority Key Identifier:
                keyid:37:4C:48:A5:20:C7:96:45:BB:F3:AE:DD:90:EE:75:95:DE:00:36:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/2cc5b22287498434988b31f4cb27ab1dafbab2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:49:b1:00:6a:00:3f:95:55:3c:4e:52:e1:75:ca:6a:e3:
         8c:bb:94:a4:62:ba:5b:9b:6e:4f:6b:7b:7e:e5:59:74:12:a7:
         5a:e8:d8:6f:11:b8:de:3c:97:ab:f6:46:07:3f:04:91:71:64:
         4a:cc:98:7e:54:3e:49:07:60:d3:c9:e9:35:99:f3:8e:32:2d:
         db:51:ec:7e:b8:32:8b:a7:79:dd:13:b8:41:b2:b4:8c:88:96:
         3a:f5:fc:fd:d4:b7:24:fc:7a:7a:ce:52:d0:68:86:88:66:10:
         59:01:34:cf:88:a2:8a:96:eb:60:97:84:ab:7a:8d:08:a9:ab:
         2f:80:ab:1c:dc:36:c1:d3:5e:c3:30:07:cd:d5:7a:6f:1a:62:
         50:af:38:79:73:07:b4:00:b7:c5:ab:77:bc:04:5d:5b:dd:cd:
         e4:54:01:7a:0b:95:b4:8b:95:ad:9b:37:c3:0d:10:00:3b:0f:
         01:96:37:f8:82:47:05:60:c6:e7:50:32:bd:21:da:d6:55:67:
         f2:6c:5b:c0:64:3a:e7:a8:29:bd:b9:e3:f5:ac:cb:b2:3a:33:
         ec:9a:48:81:a2:54:5b:90:c6:f9:76:bb:08:2f:87:06:56:93:
         57:e2:82:cd:a0:a3:23:f0:ee:e5:d8:be:ed:50:4f:66:d9:fa:
         35:e0:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org