Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/6f6422a669ca4e34e0bc6ec20830a738d1cee5b7.roa
File:                     6f6422a669ca4e34e0bc6ec20830a738d1cee5b7.roa (raw, json)
Hash identifier:          1XdtUe2eYbtJ10IZ94bwRPZGvGPs+VU0feD6B7001KU=
Subject key identifier:   9E:69:AE:7C:C4:E6:DB:03:61:17:26:91:08:6C:96:00:3B:F8:23:2C
Certificate issuer:       /CN=36904f0e1d851da537ad771f7dc44fa5a2018601
Certificate serial:       0C1462
Authority key identifier: 77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/6f6422a669ca4e34e0bc6ec20830a738d1cee5b7.roa
Signing time:             Fri 05 Aug 2022 16:40:33 +0000
ROA not before:           Tue 04 Jan 2022 03:00:00 +0000
ROA not after:            Thu 04 Jan 2024 03:00:00 +0000
asID:                     52283
IP address blocks:        200.108.112.0/24 maxlen: 24
                          200.108.113.0/24 maxlen: 24
                          200.108.114.0/24 maxlen: 24
                          200.108.115.0/24 maxlen: 24
                          200.108.116.0/24 maxlen: 24
                          200.108.117.0/24 maxlen: 24
                          200.108.118.0/24 maxlen: 24
                          200.108.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791650 (0xc1462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36904f0e1d851da537ad771f7dc44fa5a2018601
        Validity
            Not Before: Jan  4 03:00:00 2022 GMT
            Not After : Jan  4 03:00:00 2024 GMT
        Subject: CN=6f6422a669ca4e34e0bc6ec20830a738d1cee5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:a8:0d:05:8d:60:07:34:d0:56:db:fb:bf:
                    5d:fa:01:3c:f1:de:54:44:7c:ec:80:e1:34:b5:74:
                    bb:3a:e8:74:04:50:62:bf:05:5a:dd:30:66:85:11:
                    84:3b:0a:35:ff:0c:16:be:04:78:5f:af:8a:88:db:
                    3d:ac:40:a5:52:3c:d1:bf:6b:dc:52:3b:d8:2e:37:
                    dc:91:18:5d:68:a3:10:b4:7d:27:7f:9a:24:05:04:
                    a9:54:a5:a2:cc:3b:a3:e7:0d:f3:9c:63:06:6c:49:
                    47:4b:ad:f6:ef:ac:b8:99:f7:3c:86:25:2a:8a:2b:
                    d4:e7:6a:76:69:3b:4e:12:2c:23:43:68:bb:d3:d6:
                    db:d8:7f:52:97:5b:8e:bf:29:8b:ad:8b:42:81:b2:
                    8f:ca:b1:df:58:dc:1b:48:91:a7:32:7c:05:6d:e8:
                    80:54:e8:5c:f4:ec:4a:50:3d:82:63:f1:aa:87:2a:
                    08:1d:16:96:c7:8f:43:f8:48:9c:25:3e:a7:37:e9:
                    c9:8a:e8:7c:f0:a5:cb:d3:0a:fc:10:99:f3:16:b1:
                    08:8b:99:e5:2a:e7:a4:c3:a3:82:f5:5a:ca:9b:30:
                    cb:a6:36:17:ae:fa:87:52:a6:12:90:29:a3:00:52:
                    44:20:d5:06:82:60:d7:e2:93:0d:d1:af:ba:e0:3c:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:69:AE:7C:C4:E6:DB:03:61:17:26:91:08:6C:96:00:3B:F8:23:2C
            X509v3 Authority Key Identifier:
                keyid:77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/6f6422a669ca4e34e0bc6ec20830a738d1cee5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/36904f0e1d851da537ad771f7dc44fa5a2018601.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:2b:c2:d5:db:4d:8d:45:77:71:c9:94:32:7a:07:ef:8d:05:
         92:11:ae:a6:70:2b:28:a6:1a:d1:83:ea:1f:0a:f6:e6:b6:84:
         48:37:33:67:3f:29:9a:4b:bf:83:f3:43:00:28:e9:40:6d:fb:
         4b:d7:76:f1:e7:41:1e:df:50:30:54:f4:77:7c:bf:5c:64:ee:
         59:64:52:47:f9:58:b7:15:fd:eb:52:e1:4a:89:19:54:13:57:
         21:2f:52:6c:2d:4d:06:ba:df:e4:cc:98:e8:de:93:1d:ee:79:
         c5:7c:7c:66:8e:5c:2f:9e:32:f7:0a:00:5d:35:81:d1:62:f5:
         39:a2:2a:bf:12:5b:2d:6d:91:45:ef:16:dc:a2:93:59:a7:a7:
         be:6b:99:88:cd:5b:fa:ed:59:71:b2:b3:fb:ca:9c:f9:46:2d:
         bb:53:cc:c8:15:d0:c7:8e:13:fe:01:1f:65:4a:1e:26:36:ac:
         61:a2:26:9a:03:77:58:c8:6d:54:d1:bd:36:b3:b1:7d:2b:2c:
         8b:5b:90:0c:e4:e2:d7:45:d3:89:6a:aa:3b:7c:f8:af:31:b9:
         0b:29:f7:91:35:30:b6:14:9a:df:84:5f:15:8a:91:d5:c8:f9:
         49:5b:4d:82:3c:77:d3:b7:32:a6:26:e4:fc:65:94:44:fb:1b:
         e7:44:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org