Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/b2e760d527dd28fb2854afcc92f6786b33715469.roa
File:                     b2e760d527dd28fb2854afcc92f6786b33715469.roa (raw, json)
Hash identifier:          oNrdIxO9bHgs7Ql2HWVWOwFyMV+hf/9AU9+PQ0i2hws=
Subject key identifier:   F1:39:D8:27:98:FB:67:0A:0A:88:D2:E8:89:7F:C8:9E:93:CB:F9:4C
Certificate issuer:       /CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Certificate serial:       2140A9
Authority key identifier: FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/b2e760d527dd28fb2854afcc92f6786b33715469.roa
Signing time:             Fri 02 Jun 2023 04:01:13 +0000
ROA not before:           Thu 01 Jun 2023 04:01:13 +0000
ROA not after:            Mon 02 Jun 2025 04:01:13 +0000
asID:                     26613
IP address blocks:        200.14.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179241 (0x2140a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
        Validity
            Not Before: Jun  1 04:01:13 2023 GMT
            Not After : Jun  2 04:01:13 2025 GMT
        Subject: CN=b2e760d527dd28fb2854afcc92f6786b33715469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:69:d9:bc:4b:93:e9:8d:4d:1c:41:48:61:
                    b5:b8:d8:c0:b2:f1:9e:fa:0f:c3:6b:bb:32:24:a9:
                    6c:b0:af:e4:c7:08:4f:05:96:cd:1b:50:2a:0b:a2:
                    ac:02:f6:4a:30:f2:d7:4b:a5:d6:29:b2:a3:3f:2c:
                    26:f5:c3:97:4c:bf:76:3f:19:ad:71:b6:fc:72:fa:
                    bc:bd:0f:80:75:6b:b1:23:0d:28:c7:3d:fd:82:84:
                    43:8c:f7:cf:03:9e:b8:c1:92:51:e1:78:bc:3d:b7:
                    d9:c6:59:69:c0:b9:3b:d2:86:47:f6:93:13:19:ac:
                    8d:5f:77:47:fe:af:b7:e8:57:41:64:b9:a6:1d:23:
                    74:3a:b3:85:74:54:eb:53:9b:9b:b0:81:a8:58:a1:
                    a4:dc:19:91:f2:1e:23:ba:18:d5:0c:e4:60:09:cb:
                    a5:05:3f:1d:26:6d:22:b9:cc:41:13:6a:7e:2c:20:
                    64:af:c5:67:c7:06:60:c6:02:e0:2d:b5:53:86:6b:
                    dd:22:75:42:05:d1:39:8f:45:e8:71:e2:9e:b3:ff:
                    4d:71:dc:4e:53:b8:10:af:fc:5b:fd:5d:68:18:e3:
                    3a:7e:8f:5e:cc:aa:f3:20:a4:d4:c1:51:af:2a:1c:
                    d5:b0:6f:c8:a0:4c:34:a0:8a:d7:95:5f:fd:03:c0:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:39:D8:27:98:FB:67:0A:0A:88:D2:E8:89:7F:C8:9E:93:CB:F9:4C
            X509v3 Authority Key Identifier:
                keyid:FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/b2e760d527dd28fb2854afcc92f6786b33715469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/6e4a182506cc3d6396e00aa2873b9f3c87963395.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:7a:1a:5b:77:97:63:1e:7e:18:c2:82:60:49:00:72:8c:
         9d:b4:f5:95:0b:98:7c:14:be:9f:6f:17:46:8e:1a:e7:de:ea:
         e5:d3:c9:ce:fb:b6:fe:dd:13:78:35:62:26:55:f1:f3:3c:db:
         06:27:6d:42:54:c4:f9:42:53:54:6d:8d:73:17:60:b8:2d:09:
         e6:99:57:bb:af:1f:5c:a5:f4:c3:c9:0b:d2:92:e0:e6:6a:23:
         5c:9f:68:2b:4f:de:61:24:b8:51:d3:6a:0e:4a:82:a2:f5:e4:
         40:c2:b7:89:d7:b1:11:63:6c:1f:a1:37:9a:01:7c:48:af:22:
         65:a2:9c:80:3d:60:0d:e7:3a:ae:4c:49:58:4c:82:64:2b:da:
         9d:7c:50:82:a0:47:6c:4c:6d:df:87:f0:83:6a:50:51:5e:c5:
         12:c9:26:e4:9f:3e:85:1a:bd:27:16:13:0e:16:d3:ea:3a:27:
         7b:f6:3d:79:f5:24:2e:37:0b:a6:fb:53:0c:5b:53:0e:fe:47:
         52:24:dc:9b:b5:ca:22:4f:98:ab:d8:e3:94:35:c8:d7:88:b7:
         c4:17:15:fa:40:d1:67:9e:59:85:ab:39:d8:55:67:27:74:28:
         f0:17:b1:9b:9e:69:84:a4:56:ce:46:ef:9c:8b:83:bb:1a:52:
         4e:e5:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org