Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/b34897b8455859f0e22242815e6f63ffa6e1f82c.roa
File:                     b34897b8455859f0e22242815e6f63ffa6e1f82c.roa (raw, json)
Hash identifier:          leQhyHYdM8zXgqyxMJYU6pRez9yINLFju/1wiBs8SCY=
Subject key identifier:   11:50:67:45:03:C2:6C:7C:D3:99:73:0E:E8:F3:A1:58:CD:83:22:C8
Certificate issuer:       /CN=8e346b9efa64e019c55730d116dd29aa97da1530
Certificate serial:       05EE
Authority key identifier: 2D:F0:31:7C:07:29:A7:78:A0:87:9F:B9:41:2F:08:01:2A:B0:FE:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e346b9efa64e019c55730d116dd29aa97da1530.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/b34897b8455859f0e22242815e6f63ffa6e1f82c.roa
Signing time:             Thu 06 Oct 2022 13:30:54 +0000
ROA not before:           Thu 06 Oct 2022 13:27:56 +0000
ROA not after:            Sun 06 Oct 2024 13:27:56 +0000
asID:                     263196
IP address blocks:        143.202.136.0/22 maxlen: 22
                          186.148.80.0/21 maxlen: 21
                          2803:4b00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e346b9efa64e019c55730d116dd29aa97da1530
        Validity
            Not Before: Oct  6 13:27:56 2022 GMT
            Not After : Oct  6 13:27:56 2024 GMT
        Subject: CN=b34897b8455859f0e22242815e6f63ffa6e1f82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:33:3e:75:96:94:3e:a9:ea:b9:0d:00:55:
                    1f:42:f3:4f:3c:26:6d:37:ae:50:6a:39:0f:da:28:
                    f3:a7:d7:9f:65:67:fa:a6:09:c8:b8:ff:86:79:1b:
                    6f:69:ff:b3:0c:16:11:a7:aa:22:1c:d2:20:ed:c5:
                    8e:c7:cb:3b:34:4d:fe:01:ac:6c:d2:21:78:1e:9f:
                    ce:c6:4a:71:3c:80:67:2a:7c:07:6e:ad:f0:63:86:
                    b0:13:3e:d5:f1:07:ba:d1:d8:36:c5:1d:6e:e9:75:
                    23:d4:c3:62:a0:0c:b0:f9:ce:69:97:77:fe:20:9b:
                    cb:71:62:79:4b:25:61:a1:49:43:db:8a:9f:a0:a7:
                    cc:07:95:a9:c5:82:d0:e5:87:f9:7c:fb:13:8c:f7:
                    3c:f8:81:df:e0:5d:b3:cd:26:b5:ac:34:8d:e7:11:
                    f4:92:3e:ce:42:35:a3:2a:6c:9e:70:9e:c8:3d:e8:
                    b7:44:90:bf:09:0c:02:e3:03:19:b1:85:56:28:e2:
                    6d:9e:0d:83:8a:a1:db:e6:4c:3e:6e:d4:9e:c6:00:
                    87:49:c0:e5:bd:7e:93:61:10:af:05:6c:82:00:68:
                    0b:e1:84:85:66:fe:b9:23:68:ad:95:cf:99:5d:17:
                    4c:1e:5e:58:8a:2d:6a:0a:be:3c:65:21:5a:35:ad:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:67:45:03:C2:6C:7C:D3:99:73:0E:E8:F3:A1:58:CD:83:22:C8
            X509v3 Authority Key Identifier:
                keyid:2D:F0:31:7C:07:29:A7:78:A0:87:9F:B9:41:2F:08:01:2A:B0:FE:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e346b9efa64e019c55730d116dd29aa97da1530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/b34897b8455859f0e22242815e6f63ffa6e1f82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/8e346b9efa64e019c55730d116dd29aa97da1530.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.136.0/22
                  186.148.80.0/21
                IPv6:
                  2803:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:81:11:54:b2:96:43:b7:4a:13:cf:87:25:0c:37:a7:f9:
         0a:a7:0a:19:4f:36:d0:15:7e:b9:72:bb:5b:0f:b5:32:5c:d0:
         60:fb:21:72:9e:fc:ef:b0:49:be:48:13:cd:4f:4d:81:0f:c4:
         d7:ae:65:5b:fc:7a:9b:7f:6e:66:67:2c:d6:fd:cf:1e:47:ab:
         1e:ea:f7:c3:8f:90:7b:18:c6:ef:75:fc:6e:91:42:a6:b4:32:
         32:08:35:06:91:19:4b:dc:20:d4:6e:73:25:42:b2:02:2f:60:
         19:7e:37:c9:9f:23:72:2c:16:d1:df:fd:e9:81:07:6b:aa:a8:
         e3:1f:d1:c8:46:10:c5:12:89:a9:9d:55:d7:67:00:0a:09:46:
         d3:78:55:64:a9:4c:e9:19:13:d0:4b:90:63:a7:31:6e:45:4b:
         74:3d:9e:22:f6:45:cc:ea:c0:e8:56:70:80:c6:88:16:4f:2f:
         d2:9c:bf:f3:b9:5d:43:b7:e6:a7:9b:e6:ce:92:e2:78:4e:08:
         96:c5:0c:ee:ae:b0:d9:68:44:3e:d3:cd:b2:b7:a0:54:f1:6b:
         b9:a1:2b:d0:3b:a9:7e:8b:ff:c9:0e:e4:a5:8d:f0:73:48:a7:
         52:2e:55:96:c0:4d:70:01:ef:b5:b1:a7:04:59:a6:cf:87:62:
         71:4b:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org