Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/2122f5bc9cf9fb6ed2c80e2bd7635970ad8e643a.roa
File:                     2122f5bc9cf9fb6ed2c80e2bd7635970ad8e643a.roa (raw, json)
Hash identifier:          xN1FXuEx9EVhcAff9rMLU1LAJAhEd0AJZaj81/wQGIE=
Subject key identifier:   4F:D3:E6:72:CA:2B:E0:F6:17:5B:D8:36:CE:30:4D:08:2D:9E:83:60
Certificate issuer:       /CN=63333df328424e1d0ca2ddcff0cfc829ea44b7a1
Certificate serial:       25962C
Authority key identifier: FD:59:37:71:8E:92:A1:AE:60:2C:14:23:71:FE:AA:B4:AD:6B:8B:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/2122f5bc9cf9fb6ed2c80e2bd7635970ad8e643a.roa
Signing time:             Thu 04 Jan 2024 21:04:50 +0000
ROA not before:           Thu 04 Jan 2024 21:04:50 +0000
ROA not after:            Sun 04 Jan 2026 21:04:50 +0000
asID:                     27947
IP address blocks:        192.207.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463276 (0x25962c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63333df328424e1d0ca2ddcff0cfc829ea44b7a1
        Validity
            Not Before: Jan  4 21:04:50 2024 GMT
            Not After : Jan  4 21:04:50 2026 GMT
        Subject: CN=2122f5bc9cf9fb6ed2c80e2bd7635970ad8e643a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:35:28:76:fe:8f:06:f8:dc:e0:d1:a2:f2:13:
                    d7:b9:e7:51:84:e3:05:3e:76:01:f1:1f:f1:26:1a:
                    cc:6f:10:cd:5e:7d:21:cb:95:57:33:67:b1:cd:7c:
                    d3:26:7f:2e:e0:6c:2f:a8:8a:ba:7a:ee:5d:ee:5f:
                    bf:1d:a9:24:66:97:d8:1b:74:9f:8b:1c:63:28:bf:
                    bd:a7:2a:5e:7f:d2:2b:cc:45:f3:d6:83:2a:c9:75:
                    f8:96:d8:f7:78:a6:b1:ea:4d:b2:18:09:36:f2:23:
                    05:30:a3:36:e4:f8:9b:4b:05:f7:a5:46:a7:44:88:
                    10:f8:9b:50:39:8a:49:14:5d:c5:00:40:b3:a4:dc:
                    c9:9e:36:52:6a:ab:ac:2e:fd:88:5c:d5:a7:4e:c8:
                    36:61:c6:13:ec:11:97:bf:66:77:77:8c:71:5a:4a:
                    00:71:e3:7c:b2:b0:d3:b5:fd:c2:61:de:f4:79:ba:
                    ab:1f:e7:fa:8e:97:06:c6:1f:f0:e2:f7:cc:9d:74:
                    b3:84:ff:a0:f5:a1:c2:84:08:43:46:22:57:6a:fe:
                    23:5e:c4:9b:82:be:d3:a5:fa:28:eb:8d:de:e8:6c:
                    cb:f8:6e:df:16:6b:18:54:2a:03:cd:53:42:5d:1d:
                    3c:ad:e5:87:ad:12:c6:82:67:32:a3:ca:b1:f8:b2:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D3:E6:72:CA:2B:E0:F6:17:5B:D8:36:CE:30:4D:08:2D:9E:83:60
            X509v3 Authority Key Identifier:
                keyid:FD:59:37:71:8E:92:A1:AE:60:2C:14:23:71:FE:AA:B4:AD:6B:8B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/2122f5bc9cf9fb6ed2c80e2bd7635970ad8e643a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:00:ed:70:cf:1e:63:57:2e:8e:91:ca:4a:a6:da:b1:39:08:
         ba:12:52:f4:b2:e2:d0:2b:2d:16:e3:fe:4e:71:39:83:17:81:
         f9:6e:a3:ca:30:bf:e3:fc:1c:ac:6b:2b:0b:eb:6a:69:f7:8c:
         1b:ef:e6:70:85:1d:2e:a6:5f:07:19:2b:ae:5a:45:04:ad:a2:
         01:c2:68:85:6d:e4:e3:ed:96:69:c0:17:8e:28:18:46:41:87:
         26:5f:23:b5:9c:12:f2:bb:79:ca:c1:ad:dd:cf:e1:38:7b:01:
         03:78:bb:56:91:37:b7:78:f3:85:8b:7a:02:67:80:30:c8:31:
         d2:ee:bd:b0:ef:fe:57:7f:89:29:b9:8e:57:b3:a8:ac:15:42:
         77:a9:e8:70:ee:84:84:6b:16:b3:02:e8:97:34:4c:dc:b3:22:
         62:b9:e5:60:6f:c4:6e:d8:09:88:89:86:de:41:11:ac:10:11:
         67:46:be:2b:e7:84:54:11:3d:13:f9:9b:b1:c5:ee:08:5e:7a:
         e9:02:7f:3c:95:a9:4a:87:d2:77:d5:b5:61:88:31:43:67:aa:
         4d:5b:c5:0c:92:b5:da:da:40:f3:45:45:1a:a4:e8:6d:e4:a4:
         99:6e:c1:86:b8:84:85:8b:d0:0c:53:62:60:15:81:8b:55:28:
         09:10:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org