Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/20d4293dac9d77273bce78a903bdbf8ca549b29f.roa
File:                     20d4293dac9d77273bce78a903bdbf8ca549b29f.roa (raw, json)
Hash identifier:          25swlOIsUa8WC21llL/yOEWlWznP2GTKbS7pqyuWQoU=
Subject key identifier:   BD:A6:C7:02:D3:D4:D0:50:7E:A1:97:C6:EF:77:1F:21:A2:7C:C5:68
Certificate issuer:       /CN=63333df328424e1d0ca2ddcff0cfc829ea44b7a1
Certificate serial:       0C8DEA
Authority key identifier: FD:59:37:71:8E:92:A1:AE:60:2C:14:23:71:FE:AA:B4:AD:6B:8B:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/20d4293dac9d77273bce78a903bdbf8ca549b29f.roa
Signing time:             Wed 24 Mar 2021 14:41:18 +0000
ROA not before:           Wed 24 Mar 2021 14:41:18 +0000
ROA not after:            Tue 24 Mar 2026 14:41:18 +0000
asID:                     27947
IP address blocks:        192.207.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822762 (0xc8dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63333df328424e1d0ca2ddcff0cfc829ea44b7a1
        Validity
            Not Before: Mar 24 14:41:18 2021 GMT
            Not After : Mar 24 14:41:18 2026 GMT
        Subject: CN=20d4293dac9d77273bce78a903bdbf8ca549b29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:47:44:fe:55:d4:ae:31:8a:13:cc:2b:d1:
                    0c:0a:13:3b:dc:d8:1b:81:ab:ef:93:32:e2:88:0b:
                    72:d4:ec:06:a0:8f:2f:d6:05:f1:40:1d:0a:08:2a:
                    44:2f:3f:c3:30:fd:c1:0b:ad:1d:c8:af:5f:ff:ac:
                    46:bb:ec:cd:bc:b1:c1:a7:da:4b:64:ff:5c:ee:8e:
                    75:52:9d:1a:04:58:28:1f:46:06:18:d6:38:9b:7d:
                    c3:86:02:f6:56:76:dd:a6:73:f6:e3:25:4c:c8:7f:
                    98:c3:91:58:ee:5b:4d:4b:6b:61:fd:52:84:6b:e9:
                    3b:59:cc:dc:41:0a:14:c8:5b:2f:66:96:52:53:18:
                    b4:0b:de:94:52:2e:de:88:7a:f9:00:15:49:2b:8d:
                    57:9e:6e:af:e9:36:8a:eb:ec:7b:b2:96:5c:7b:94:
                    0a:ca:aa:02:f9:72:bb:64:4c:e7:e8:e2:b2:37:38:
                    42:3b:7a:c2:b3:f1:cd:7d:db:94:e2:48:e9:50:59:
                    86:7d:ad:33:cb:4c:57:0a:0e:8e:c1:f0:24:67:d2:
                    e2:c3:35:db:88:40:ae:31:02:92:bb:e9:e0:59:56:
                    cf:43:bb:4b:a8:26:61:40:c7:c9:9b:b5:c6:81:bc:
                    7a:08:32:cf:df:5a:ec:dd:45:6c:9f:48:4b:a2:f9:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A6:C7:02:D3:D4:D0:50:7E:A1:97:C6:EF:77:1F:21:A2:7C:C5:68
            X509v3 Authority Key Identifier:
                keyid:FD:59:37:71:8E:92:A1:AE:60:2C:14:23:71:FE:AA:B4:AD:6B:8B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/20d4293dac9d77273bce78a903bdbf8ca549b29f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:a8:55:e1:5f:71:9a:3d:e6:db:6a:69:51:4d:44:31:f6:97:
         34:b0:3e:71:7b:ac:cb:e6:79:63:5d:17:07:9b:e2:8a:c2:a8:
         e2:f1:1d:43:79:5e:45:03:97:fb:49:7a:72:db:22:21:9c:be:
         0d:64:20:c2:b0:60:6e:35:cc:50:39:e4:6e:1b:92:ec:c6:67:
         92:4d:d0:9d:ab:ec:25:9c:4e:ba:e6:32:9f:1c:bc:d6:5e:88:
         0c:19:2e:00:67:34:a6:61:df:7d:cb:55:a7:d0:54:4e:5f:f6:
         09:59:74:2d:8f:7c:a7:4f:e5:91:5d:ba:3f:f7:7f:13:54:af:
         11:e9:ba:87:86:b4:04:c7:04:d4:56:5d:98:87:00:d8:39:6b:
         55:41:b6:81:15:45:76:d7:39:ce:49:03:1b:25:ce:1d:a8:b6:
         d5:ec:a5:f7:fd:76:c8:33:6e:b7:bd:d8:d6:2a:99:30:fc:25:
         86:a7:58:02:35:9e:4d:4e:08:2b:a7:9a:d2:d9:f7:57:00:79:
         3e:6c:aa:9c:03:bf:65:1b:91:5d:61:2e:d7:ee:4b:1a:7a:9a:
         0e:9f:64:f7:e5:d2:a4:ce:f1:43:23:2d:88:02:e6:02:98:2f:
         fa:c3:6c:4c:e9:c2:4a:4d:7d:e9:da:30:23:0e:80:bc:82:5a:
         a8:bd:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org