Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/74d2356bf1d9390789e3c420bf82a0f86911d30e.roa
File:                     74d2356bf1d9390789e3c420bf82a0f86911d30e.roa (raw, json)
Hash identifier:          hBNX8kIS3LDU2bQmpCTlCbAYveYT/Qc09LYuF+aQ0QY=
Subject key identifier:   AB:AB:B1:AB:93:46:A8:8C:AE:3F:26:D3:CB:9D:22:70:0F:27:F3:2C
Certificate issuer:       /CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Certificate serial:       21379B
Authority key identifier: FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/74d2356bf1d9390789e3c420bf82a0f86911d30e.roa
Signing time:             Fri 02 Jun 2023 04:00:29 +0000
ROA not before:           Thu 01 Jun 2023 04:00:27 +0000
ROA not after:            Mon 02 Jun 2025 04:00:27 +0000
asID:                     3549
IP address blocks:        200.14.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176923 (0x21379b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
        Validity
            Not Before: Jun  1 04:00:27 2023 GMT
            Not After : Jun  2 04:00:27 2025 GMT
        Subject: CN=74d2356bf1d9390789e3c420bf82a0f86911d30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:76:dc:76:e3:9f:08:d2:d4:35:c2:9f:06:
                    8c:22:bd:b4:81:bc:42:6b:21:43:65:5c:f4:5a:84:
                    9d:2f:33:8c:98:f5:1a:64:e5:9c:bf:21:1f:40:6e:
                    ff:e4:ed:08:52:1e:cb:92:b8:ce:82:9c:e8:26:75:
                    d0:57:09:11:a6:b8:22:3f:f7:1d:22:bb:63:1f:8c:
                    9a:48:fc:6e:af:28:52:a2:3f:bb:47:e2:ae:f3:de:
                    86:e0:cf:15:0c:d3:8b:5c:9e:9a:ad:7b:f4:0e:38:
                    e4:80:fb:7a:b2:9e:07:74:cc:83:48:3e:b0:df:0a:
                    2f:cc:48:49:0d:3f:98:84:39:2b:56:47:8b:b5:8a:
                    d2:b3:0a:0b:ab:39:56:88:1a:a6:70:ca:f4:37:c1:
                    30:35:de:28:58:d3:de:84:2f:2b:b7:bc:ba:9e:38:
                    6c:64:0c:31:8a:f4:4c:92:09:d4:14:b5:9e:34:4f:
                    d1:d4:6e:8e:3d:a5:d8:eb:36:1e:9f:9e:5f:0c:24:
                    f9:42:97:9b:9a:b4:ca:67:79:4d:df:57:25:31:a4:
                    3d:6c:26:ec:21:8c:69:ce:a7:2a:dc:d5:55:89:e7:
                    04:fd:dc:01:bb:da:ad:28:6f:e8:29:fb:d4:4b:30:
                    4d:e0:f4:9b:78:6b:df:ca:65:63:a3:89:cf:d8:83:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:B1:AB:93:46:A8:8C:AE:3F:26:D3:CB:9D:22:70:0F:27:F3:2C
            X509v3 Authority Key Identifier:
                keyid:FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/74d2356bf1d9390789e3c420bf82a0f86911d30e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/6e4a182506cc3d6396e00aa2873b9f3c87963395.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:af:fb:ed:4a:26:b3:e2:83:e3:a5:e8:72:91:84:6b:86:99:
         08:6d:ef:4c:d5:f4:10:83:9b:b8:83:5a:b8:37:d2:6c:b2:89:
         17:be:fb:96:20:72:9c:04:69:c6:bc:a6:37:79:95:e1:fc:6c:
         a5:09:2a:45:32:c3:bf:60:3d:72:70:f5:98:8e:ef:38:42:e6:
         74:56:86:bf:0e:c2:98:ce:ec:19:b7:a0:ff:ba:87:55:a6:4a:
         70:96:92:22:e1:a8:2f:66:9b:af:15:77:f0:de:13:5e:e7:71:
         82:fc:e5:c6:da:3f:c8:cb:fc:7d:5b:57:30:25:b6:9a:13:dd:
         93:cd:d7:48:34:b3:c5:24:b5:e7:61:7e:bd:bd:00:c8:6b:dc:
         54:28:f6:04:29:4e:a4:0c:aa:95:88:4c:b9:9c:c2:ae:6f:ad:
         cb:41:ee:a5:19:79:be:1c:00:b8:42:d4:b4:d0:03:f7:5f:eb:
         e9:8f:d8:0a:45:1b:da:60:be:45:16:2f:ad:6f:f9:91:fc:f0:
         e2:d9:b6:39:e5:17:36:df:c0:f0:70:00:66:1e:d2:fa:51:93:
         5c:a5:23:9f:b2:73:ce:20:18:f5:70:f2:8f:53:96:62:0b:ec:
         20:6e:c5:03:61:b3:cf:d2:e4:da:69:24:98:74:a2:0d:88:2e:
         78:e5:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org