Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/a94b9d90813db32f3da07ddf63ca6c7d57e2092b.roa
File:                     a94b9d90813db32f3da07ddf63ca6c7d57e2092b.roa (raw, json)
Hash identifier:          /LS3AH8WF4OKuYP8iqGdra3VSr1XY4YsTW8tHRnzYpQ=
Subject key identifier:   4A:63:10:BE:9C:C7:C0:0D:6A:99:8A:8C:1F:67:7B:AE:22:57:23:50
Certificate issuer:       /CN=8e346b9efa64e019c55730d116dd29aa97da1530
Certificate serial:       069788
Authority key identifier: 2D:F0:31:7C:07:29:A7:78:A0:87:9F:B9:41:2F:08:01:2A:B0:FE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e346b9efa64e019c55730d116dd29aa97da1530.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/a94b9d90813db32f3da07ddf63ca6c7d57e2092b.roa
Signing time:             Fri 30 Jun 2023 15:52:38 +0000
ROA not before:           Thu 29 Jun 2023 15:52:38 +0000
ROA not after:            Mon 30 Jun 2025 15:52:38 +0000
asID:                     263196
IP address blocks:        143.202.136.0/22 maxlen: 24
                          186.148.80.0/21 maxlen: 24
                          2803:4b00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432008 (0x69788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e346b9efa64e019c55730d116dd29aa97da1530
        Validity
            Not Before: Jun 29 15:52:38 2023 GMT
            Not After : Jun 30 15:52:38 2025 GMT
        Subject: CN=a94b9d90813db32f3da07ddf63ca6c7d57e2092b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:73:b8:83:c1:f6:c4:59:9c:fc:38:6f:3f:
                    16:a1:4c:e9:be:9b:57:b6:a0:2d:4b:c1:de:04:c8:
                    66:9d:4b:85:26:40:28:59:c7:5c:66:15:f8:fa:09:
                    0d:3f:65:ec:3c:f0:15:73:f6:aa:25:3b:cd:e0:2b:
                    13:b1:90:37:c1:be:8c:7c:78:e5:c1:10:5b:e2:ae:
                    ed:4d:9d:98:1f:b1:3b:54:c5:e2:8c:13:10:c8:6a:
                    26:4e:9a:6a:5e:6d:46:3c:40:50:19:3c:02:5c:31:
                    cd:87:95:16:42:4f:b2:65:bc:04:5c:b7:e1:15:50:
                    3a:8b:d1:9e:5d:30:b6:5f:73:b9:95:90:a4:2c:b3:
                    95:74:cc:f8:06:33:ce:23:8c:f2:2c:49:51:e0:65:
                    1e:79:a0:da:35:92:b5:51:45:88:2a:53:32:19:04:
                    de:89:c7:c1:c7:e4:9b:dc:31:a6:ad:9a:5f:45:20:
                    7a:21:eb:a6:27:19:91:9f:96:27:b0:b5:6f:c1:59:
                    df:3a:ba:d7:d1:20:bb:83:d1:a5:87:e3:68:de:80:
                    b1:62:a8:12:7f:9b:0f:18:d8:69:65:fe:c1:c4:cd:
                    0c:17:7c:f1:15:72:ec:a0:f5:b4:10:88:b7:f0:30:
                    c3:f5:93:a6:dc:66:b4:01:22:4f:97:7d:38:83:37:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:63:10:BE:9C:C7:C0:0D:6A:99:8A:8C:1F:67:7B:AE:22:57:23:50
            X509v3 Authority Key Identifier:
                keyid:2D:F0:31:7C:07:29:A7:78:A0:87:9F:B9:41:2F:08:01:2A:B0:FE:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e346b9efa64e019c55730d116dd29aa97da1530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/a94b9d90813db32f3da07ddf63ca6c7d57e2092b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/8e346b9efa64e019c55730d116dd29aa97da1530.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.136.0/22
                  186.148.80.0/21
                IPv6:
                  2803:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:83:12:f5:76:1d:81:e6:26:a3:cd:b1:da:da:63:8d:93:0a:
         fd:40:28:93:6a:f3:c1:bf:a8:cb:64:8c:75:c5:67:54:b8:59:
         ef:5c:b3:06:ea:4b:74:e4:f3:91:57:01:10:0d:64:c1:cc:ae:
         e5:0c:81:29:9f:75:36:fe:ff:d9:9a:9c:a1:fc:aa:a9:1a:40:
         db:55:e8:d8:02:98:2b:5e:b4:03:5f:65:50:60:d4:7f:c1:a5:
         19:9e:cf:b9:67:3f:1c:e2:28:6c:a0:9b:39:d0:d6:ed:e2:ed:
         46:85:d6:5d:f0:a2:2a:b0:a0:b3:6d:a2:66:0d:d9:39:6e:12:
         05:a9:d2:36:d3:69:cf:80:37:bd:58:95:e4:3e:db:51:db:ad:
         66:d6:40:84:3c:a1:51:f0:f2:6f:d2:a2:97:f2:45:99:07:07:
         e0:ed:73:7f:19:91:c9:9f:77:bf:f4:42:30:e3:1d:c9:09:79:
         5f:68:49:52:2c:bb:77:5d:d8:ac:f6:1d:a0:d2:a5:bf:7a:4d:
         97:4e:ea:43:fd:a9:77:2a:0b:9f:e8:e0:70:57:6c:61:da:59:
         ce:12:ea:1f:27:33:51:b0:f0:6d:1a:13:f2:25:09:4f:19:b6:
         fb:53:a8:d6:19:a5:63:6b:4e:7e:dd:59:76:b0:4e:1e:3f:c0:
         0e:d5:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org