Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/c24778503ad00416e446a75aa1d16db24ea9338f.roa
File:                     c24778503ad00416e446a75aa1d16db24ea9338f.roa (raw, json)
Hash identifier:          7iL03jIvqPF4E3AEwT6/KNEbbFmHazcPHFdSsFHcOUU=
Subject key identifier:   6B:E4:46:CE:56:1D:6C:C9:E6:FC:53:AF:72:1F:EA:46:D5:6F:36:9D
Certificate issuer:       /CN=cc1e84cc9e304aced62b019d9b2c50e9387e605f
Certificate serial:       04EC
Authority key identifier: F6:BA:F4:16:80:14:29:12:8C:64:54:AB:D0:5B:4F:11:A8:AF:EB:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc1e84cc9e304aced62b019d9b2c50e9387e605f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/c24778503ad00416e446a75aa1d16db24ea9338f.roa
Signing time:             Mon 13 Jun 2022 23:33:47 +0000
ROA not before:           Mon 13 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     265823
IP address blocks:        132.255.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1e84cc9e304aced62b019d9b2c50e9387e605f
        Validity
            Not Before: Jun 13 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=c24778503ad00416e446a75aa1d16db24ea9338f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:09:5b:05:29:2d:76:6d:a5:f4:43:16:ce:
                    9e:20:5f:97:59:ec:ec:d9:78:16:0f:da:f2:8a:59:
                    d2:72:c6:ef:20:86:1d:6c:ad:0b:d3:0b:75:41:e4:
                    aa:98:02:be:7b:ba:f2:48:25:c6:b6:ab:92:16:c3:
                    7f:f3:4d:1a:b9:46:65:7b:20:ee:93:27:cd:39:95:
                    ef:8a:d7:bf:64:f5:d1:6c:66:e4:2e:43:15:c2:98:
                    21:10:91:95:4d:9b:1e:02:c9:aa:2a:8e:12:ab:be:
                    92:33:d9:b1:af:14:cf:a9:04:ee:25:04:d5:27:b6:
                    c6:02:18:e2:65:d3:e6:44:5d:87:53:38:fd:64:3d:
                    bd:8a:4c:cc:6a:9b:7e:4b:f8:12:bf:a3:08:ed:ce:
                    0a:4c:9c:31:7b:48:5c:ed:8e:4d:04:89:c0:9f:19:
                    19:ce:6c:bc:12:f6:0b:d8:44:66:90:31:25:83:3a:
                    b5:f1:3c:cb:cb:ce:72:e8:cd:44:05:90:d3:09:31:
                    7d:a3:67:96:0e:8b:d1:ef:fc:b5:4f:61:ef:77:fe:
                    6c:89:16:7f:41:26:52:22:3b:ba:a6:84:19:9c:94:
                    02:69:23:40:19:47:46:e5:d5:4d:9e:a0:8d:b5:02:
                    6a:df:84:7a:53:33:15:20:a9:31:24:7b:f5:c8:cc:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E4:46:CE:56:1D:6C:C9:E6:FC:53:AF:72:1F:EA:46:D5:6F:36:9D
            X509v3 Authority Key Identifier:
                keyid:F6:BA:F4:16:80:14:29:12:8C:64:54:AB:D0:5B:4F:11:A8:AF:EB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc1e84cc9e304aced62b019d9b2c50e9387e605f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/c24778503ad00416e446a75aa1d16db24ea9338f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/cc1e84cc9e304aced62b019d9b2c50e9387e605f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:e3:7d:44:b5:94:41:d5:01:a6:49:a5:07:f5:7d:6a:3f:
         ee:8d:9d:53:32:23:77:a2:99:ab:58:f2:ae:89:a7:be:d3:01:
         3d:d4:e3:80:7d:20:98:9c:31:20:23:b1:ee:c1:3e:fb:8d:5e:
         a3:59:bc:1e:2e:1f:75:dd:92:75:a5:62:28:ed:13:fa:84:30:
         8e:68:53:b1:b4:f4:e2:57:32:ad:62:9f:22:db:be:a9:06:be:
         9c:c4:ec:7b:c2:de:4e:99:be:b7:69:a7:fc:a9:72:85:ee:a6:
         54:f5:c0:32:b7:0b:55:7c:11:10:63:f0:1c:16:fb:1f:fb:aa:
         b4:cd:0a:d1:dd:80:73:b7:1a:7b:55:0e:45:61:de:be:8f:44:
         1f:1a:35:ec:58:8e:c5:df:ea:e4:d0:df:1b:d6:6d:0e:72:e3:
         95:16:78:22:79:8f:64:25:dd:5e:31:86:6b:21:6c:ce:4c:e9:
         50:1a:b0:a5:0c:c9:f1:bd:1c:72:8c:3f:53:87:be:0d:23:04:
         bb:e8:4c:70:9f:3c:e8:80:a5:14:e6:cf:6d:2b:9b:3d:75:ee:
         20:1a:f1:b0:56:3d:c6:f6:a4:d0:49:84:87:8b:01:1d:b1:ba:
         db:78:86:37:b8:1b:95:9e:16:cb:5f:82:cf:6f:1f:fa:83:b6:
         9b:d6:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org