Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/c10684568114a4f334c03853a64fa74c9a4f6a46.roa
File:                     c10684568114a4f334c03853a64fa74c9a4f6a46.roa (raw, json)
Hash identifier:          m/iSSPbXW+uP/zjkHNwvGQznR5DKf6rAomCF5YR8g6o=
Subject key identifier:   1C:6B:E6:D4:2B:F0:06:71:3A:0D:D2:14:0E:FA:0D:72:AB:1B:D5:EC
Certificate issuer:       /CN=312f25bb43cf12fb021669059d3a617d23ade269
Certificate serial:       1E7AAB
Authority key identifier: DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/c10684568114a4f334c03853a64fa74c9a4f6a46.roa
Signing time:             Wed 08 Nov 2023 13:37:54 +0000
ROA not before:           Wed 08 Nov 2023 13:37:54 +0000
ROA not after:            Sat 08 Nov 2025 13:37:54 +0000
asID:                     17147
IP address blocks:        163.247.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997483 (0x1e7aab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312f25bb43cf12fb021669059d3a617d23ade269
        Validity
            Not Before: Nov  8 13:37:54 2023 GMT
            Not After : Nov  8 13:37:54 2025 GMT
        Subject: CN=c10684568114a4f334c03853a64fa74c9a4f6a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:5c:2f:7c:c7:84:3c:3c:cf:03:5a:b0:22:
                    49:a1:6f:37:e1:26:93:44:c3:6e:b3:5b:31:a6:d7:
                    81:06:2f:d7:74:84:49:52:8f:44:21:df:f6:3e:45:
                    05:22:6b:b4:a7:ca:36:bf:65:e9:29:e5:7e:4b:f7:
                    f8:1f:9b:1f:d2:cc:a9:36:39:08:0e:b7:e2:36:ad:
                    ab:85:cb:66:81:8b:aa:7f:e3:d1:f7:30:99:49:92:
                    1c:f2:a4:90:4a:d4:1a:19:d6:13:15:60:0b:85:68:
                    c9:b6:42:60:67:00:64:19:94:78:f3:21:24:2a:7b:
                    a8:ef:af:5c:c0:62:de:51:c1:bc:91:ac:49:7e:8a:
                    21:86:77:ee:ff:4c:03:52:40:c6:1f:d8:d1:1e:67:
                    01:c9:61:64:b8:90:69:42:3a:38:a7:a1:93:bc:3d:
                    67:7f:44:90:8c:31:10:c1:a8:b9:a6:f9:55:7b:57:
                    8f:19:0b:0c:23:2f:54:d1:b0:9b:14:52:c9:0c:3c:
                    f2:e7:90:47:3b:67:76:61:51:c8:54:b6:9f:31:d7:
                    55:10:5a:2f:37:54:ae:8c:44:e7:a8:f6:4c:d3:4f:
                    ae:fd:8f:15:e3:6f:5b:85:e9:f1:87:91:80:ea:1b:
                    d6:7d:5f:d3:64:58:9c:9c:87:b3:09:29:14:49:80:
                    c4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6B:E6:D4:2B:F0:06:71:3A:0D:D2:14:0E:FA:0D:72:AB:1B:D5:EC
            X509v3 Authority Key Identifier:
                keyid:DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/c10684568114a4f334c03853a64fa74c9a4f6a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/312f25bb43cf12fb021669059d3a617d23ade269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:d5:d4:83:d7:3b:95:f7:3c:79:f3:67:18:22:65:d3:f3:
         e2:57:11:6b:fe:89:41:e2:f6:32:df:37:f9:e9:4c:dd:f3:25:
         a6:0d:6d:d7:d3:75:56:67:8e:27:89:5a:ef:87:63:0c:fa:e6:
         56:6b:e0:b4:b7:5e:c8:a8:4e:ae:9b:dd:4d:e2:e5:d1:0f:19:
         12:49:9d:be:3e:87:5d:60:15:ae:62:ed:d5:11:d2:65:fd:f2:
         bf:c7:62:79:36:64:45:f3:94:b3:f3:2b:95:73:38:4d:37:18:
         c0:7b:40:8e:aa:3c:61:12:d9:e6:97:3d:76:ed:0a:12:54:73:
         39:f9:b9:a2:f4:2a:29:11:fd:d0:38:1c:67:3d:1b:a1:c5:3b:
         2f:29:8e:fe:9e:34:62:d8:7b:e1:82:58:90:05:a7:1b:69:7c:
         8f:cf:03:f6:89:31:e8:e2:2d:70:fb:c0:5a:c9:b7:0f:50:00:
         33:02:b1:9f:9c:67:48:b7:4b:3e:76:86:ab:14:31:e3:7d:6f:
         cc:c1:01:96:02:4b:ab:01:1a:c9:88:c4:38:1a:85:1c:61:16:
         9c:d7:96:0c:c3:25:d3:69:4a:82:71:4d:fd:c0:1b:72:aa:c5:
         89:de:bc:11:9f:ce:8f:92:94:55:9c:89:db:a2:f9:1f:0f:7b:
         fa:c5:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org