Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/6b1381558a91b1f9de3066194aab0d630683ec48.roa
File:                     6b1381558a91b1f9de3066194aab0d630683ec48.roa (raw, json)
Hash identifier:          Va7einXcFr9PWZB4xcd7/lw1myZ22YFI/+dH2EauBUc=
Subject key identifier:   13:B6:12:A3:16:C3:9D:29:BD:F2:1D:F9:E5:F7:31:EA:68:83:00:6C
Certificate issuer:       /CN=312f25bb43cf12fb021669059d3a617d23ade269
Certificate serial:       1EC3E0
Authority key identifier: DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/6b1381558a91b1f9de3066194aab0d630683ec48.roa
Signing time:             Fri 17 Nov 2023 20:07:40 +0000
ROA not before:           Fri 17 Nov 2023 20:07:40 +0000
ROA not after:            Mon 17 Nov 2025 20:07:40 +0000
asID:                     17147
IP address blocks:        163.247.40.0/24 maxlen: 24
                          163.247.43.0/24 maxlen: 24
                          163.247.46.0/24 maxlen: 24
                          163.247.51.0/24 maxlen: 24
                          163.247.55.0/24 maxlen: 24
                          163.247.57.0/24 maxlen: 24
                          163.247.64.0/24 maxlen: 24
                          163.247.84.0/24 maxlen: 24
                          163.247.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2016224 (0x1ec3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312f25bb43cf12fb021669059d3a617d23ade269
        Validity
            Not Before: Nov 17 20:07:40 2023 GMT
            Not After : Nov 17 20:07:40 2025 GMT
        Subject: CN=6b1381558a91b1f9de3066194aab0d630683ec48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e1:a8:8c:d0:53:97:04:14:f5:d0:f2:cf:7b:
                    6a:7d:e7:3e:c9:6e:e0:3c:d9:b1:12:74:8b:25:e2:
                    6a:17:3d:e9:92:40:f5:1f:21:60:ee:22:a2:6a:87:
                    0c:8a:fc:7e:cb:e3:f8:ec:71:4f:1f:ac:3e:00:d1:
                    47:07:46:e6:24:5e:0c:70:92:84:67:b6:26:45:fc:
                    e9:49:9c:1e:52:a5:d7:ba:c6:80:d5:d5:98:7c:88:
                    73:6e:29:f3:a8:91:04:5b:23:01:5b:91:73:95:ff:
                    23:7d:b7:db:77:d2:d8:a9:97:be:ea:ad:a2:57:81:
                    94:04:2b:3b:86:b6:20:3b:eb:d5:fd:7a:cf:ef:a5:
                    4c:98:41:b8:29:9f:05:fa:aa:24:4e:8a:bf:71:1b:
                    67:bc:87:0c:d6:00:78:88:1b:ad:0e:99:b5:8b:17:
                    16:fa:5e:15:17:d0:09:5f:21:b6:50:3c:7f:dc:d9:
                    11:fa:eb:1c:61:de:10:95:20:ff:11:c4:26:f9:7f:
                    32:90:4c:8b:64:71:52:43:92:82:5c:cd:8a:9b:99:
                    77:2e:c8:5e:16:4a:06:e5:b5:f9:a0:62:cf:a5:13:
                    44:98:9d:1e:49:0a:59:5f:54:57:51:01:7a:8e:d5:
                    d8:47:a1:ee:40:75:12:1e:85:b3:5c:e7:f8:05:2d:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B6:12:A3:16:C3:9D:29:BD:F2:1D:F9:E5:F7:31:EA:68:83:00:6C
            X509v3 Authority Key Identifier:
                keyid:DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/6b1381558a91b1f9de3066194aab0d630683ec48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/312f25bb43cf12fb021669059d3a617d23ade269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.40.0/24
                  163.247.43.0/24
                  163.247.46.0/24
                  163.247.51.0/24
                  163.247.55.0/24
                  163.247.57.0/24
                  163.247.64.0/24
                  163.247.84.0/24
                  163.247.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:85:4b:0f:4d:04:4a:23:03:0d:f9:4b:2f:b7:a2:a7:f8:19:
         c5:35:90:90:9a:26:e1:90:6f:71:53:07:12:44:b3:76:c1:9a:
         f4:d5:b8:d8:34:4c:0b:18:99:de:0f:64:79:a7:1c:67:8c:22:
         39:a2:c9:89:d7:10:6d:b1:88:34:8d:b2:42:25:8a:12:52:d9:
         56:e6:18:ee:b9:4e:11:51:c6:2b:6c:7f:09:ce:1b:3f:50:f8:
         7a:f7:d0:07:45:e1:80:6a:ee:1b:b3:21:2c:b0:1d:d7:58:b2:
         8a:5f:c8:61:a7:9b:23:4e:8e:45:d0:d2:71:cf:2a:79:c7:18:
         ca:c7:06:b7:cb:f0:9d:ce:4b:96:ff:e8:cf:31:3b:1f:8c:30:
         e5:69:5b:2f:ee:b1:9e:89:2d:dd:6b:44:78:71:ef:04:29:ba:
         fd:2a:45:90:1a:4e:4f:06:b2:4c:83:a2:d8:14:13:51:a3:9d:
         3a:78:ad:f1:a3:cd:48:c3:63:22:8d:b0:8a:54:f3:41:e1:13:
         a1:01:1f:b5:18:25:2a:b6:f0:5c:d2:34:09:73:4a:11:74:86:
         97:c5:5a:f6:2e:11:b6:7d:2b:78:28:93:dd:12:31:ee:74:09:
         5e:fc:8b:72:84:d4:63:18:0f:53:f8:ce:b3:58:1d:93:c7:dd:
         31:ad:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org