Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/a6ae368618463ae7f3cdb779066bd4665fa3b250.roa
File:                     a6ae368618463ae7f3cdb779066bd4665fa3b250.roa (raw, json)
Hash identifier:          TC/6XSeKvhAxyD2pn/E/0G9GztWmDUnEeUGe1PpIqY4=
Subject key identifier:   53:5C:41:BD:EC:9E:1A:B7:BC:BA:9D:E7:91:CB:54:D9:71:00:AC:BF
Certificate issuer:       /CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
Certificate serial:       201E
Authority key identifier: 67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/a6ae368618463ae7f3cdb779066bd4665fa3b250.roa
Signing time:             Mon 28 Mar 2022 14:54:42 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     264776
IP address blocks:        168.197.248.0/23 maxlen: 24
                          168.197.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8222 (0x201e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=a6ae368618463ae7f3cdb779066bd4665fa3b250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:cf:44:de:c2:c4:ef:c1:8a:4f:8f:3d:93:
                    8a:4f:25:31:e2:a5:3c:46:fb:5f:e2:54:b4:a7:72:
                    8d:09:4d:b8:e5:02:60:34:ee:0f:5d:cd:82:d6:80:
                    08:22:d0:f5:86:d6:f2:dd:d4:69:96:64:f2:34:22:
                    4b:d9:2f:01:b8:da:20:6b:f4:c7:ef:e3:5d:2e:d4:
                    f6:fe:90:82:ec:86:ae:93:5e:b0:ae:85:50:30:81:
                    62:2d:73:5b:82:53:92:16:77:c7:1b:aa:9b:f5:bf:
                    87:96:09:8c:29:de:4e:5d:1d:9e:2b:fc:e4:e6:ae:
                    1b:d5:ee:66:47:79:3f:80:98:93:5a:bb:17:e0:56:
                    b2:4e:d2:f3:1d:20:00:fd:43:f8:1b:70:fb:0e:b1:
                    f9:28:c3:36:3c:41:63:86:c1:11:f2:f7:7d:4c:9b:
                    ba:49:48:d7:57:7d:91:11:71:50:ae:a3:11:5c:29:
                    1b:52:d8:af:0c:6f:70:a0:9c:6d:bd:a9:d1:90:c0:
                    09:5d:d1:ed:35:38:2e:30:05:82:51:c8:e1:73:ec:
                    11:46:59:87:59:b1:f4:06:7c:b2:2f:f9:2b:37:16:
                    b4:40:73:58:0e:2b:b7:5f:4f:b1:81:ac:b6:56:4e:
                    ed:c0:16:80:da:60:f9:bd:54:66:7c:02:42:d0:f0:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5C:41:BD:EC:9E:1A:B7:BC:BA:9D:E7:91:CB:54:D9:71:00:AC:BF
            X509v3 Authority Key Identifier:
                keyid:67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/a6ae368618463ae7f3cdb779066bd4665fa3b250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/e54bc3956d81b33eb49bda17274b51fc9913ebd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.248.0-168.197.250.255

    Signature Algorithm: sha256WithRSAEncryption
         3c:12:1a:59:b8:65:bf:5e:fb:63:29:0f:f4:f6:46:57:e4:c5:
         f2:f4:b3:2b:ee:61:5a:f4:67:81:5e:b7:80:14:82:9e:b4:3a:
         67:03:9a:8d:db:12:b3:df:f6:56:1b:fc:e7:b0:1a:39:92:23:
         5c:07:d6:7e:13:e8:0d:f9:81:c1:07:7e:5a:b6:5d:10:7d:1a:
         b0:63:c8:bd:30:c6:8a:2e:84:50:8b:76:57:1d:22:b9:54:67:
         2b:09:13:1d:e6:60:f3:db:20:53:f0:f2:6a:a3:fd:34:52:60:
         d2:09:2a:4a:c3:9b:46:04:06:bc:0f:17:db:0d:a0:1e:2d:37:
         5f:23:0c:57:e9:86:58:7c:ea:25:4d:86:62:94:4b:06:77:c8:
         b3:5f:d8:6c:e1:8b:ed:3f:95:ed:83:e0:5c:88:88:f7:54:12:
         8a:17:52:cc:71:1e:4d:0b:c4:1f:32:2b:e2:be:6a:02:c1:91:
         14:b9:bf:ea:a2:a6:60:e7:bc:53:3d:67:a9:03:e9:80:fe:6c:
         5b:9f:39:8e:8e:5b:36:35:b4:19:7f:bd:98:1f:89:e4:3c:38:
         66:52:8e:81:89:26:9d:72:51:60:a4:ca:29:b6:17:69:7d:a1:
         d2:ef:2d:b3:cf:96:58:1f:76:cc:ce:9b:77:ae:1d:b8:aa:fc:
         05:cd:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org