Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/dfd43c16136ead1c60baedddb05161a084bda0b5.roa
File:                     dfd43c16136ead1c60baedddb05161a084bda0b5.roa (raw, json)
Hash identifier:          JNlxw7i5AWvF1S+I1X7mYvGa8y4/3YpfzIF28Aa5Gfk=
Subject key identifier:   EE:27:61:BD:C7:DB:B2:55:A0:E9:96:DD:9D:5F:DC:CF:B6:3E:BC:BB
Certificate issuer:       /CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Certificate serial:       214C92
Authority key identifier: FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/dfd43c16136ead1c60baedddb05161a084bda0b5.roa
Signing time:             Fri 02 Jun 2023 04:01:15 +0000
ROA not before:           Thu 01 Jun 2023 04:01:13 +0000
ROA not after:            Mon 02 Jun 2025 04:01:13 +0000
asID:                     3549
IP address blocks:        200.14.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182290 (0x214c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
        Validity
            Not Before: Jun  1 04:01:13 2023 GMT
            Not After : Jun  2 04:01:13 2025 GMT
        Subject: CN=dfd43c16136ead1c60baedddb05161a084bda0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:15:7f:e5:a4:6c:85:92:3b:81:74:d1:ef:
                    e6:0a:c7:06:c6:ce:ed:92:0d:5a:30:00:71:2c:44:
                    7c:08:18:88:95:4b:49:28:c4:91:e3:c7:6a:e4:ff:
                    dd:1f:55:1c:01:26:f5:af:c7:4a:42:0f:f6:3f:2d:
                    4d:ec:f5:f5:d1:53:5e:bf:4e:99:de:ae:5b:3f:9a:
                    4c:d5:32:31:81:0a:59:6a:34:91:d3:4b:c9:94:ab:
                    2e:9d:31:5b:0d:f8:d5:b2:9d:be:ab:79:5b:f1:e8:
                    35:f6:70:38:e3:11:bd:e9:63:61:bc:32:73:b7:4b:
                    b6:17:5c:97:81:d8:2f:5c:6e:06:eb:53:89:6a:6a:
                    5d:e2:6c:06:9b:a9:4d:8c:3d:11:42:11:6d:82:b5:
                    e5:f3:49:50:d2:7a:5b:1b:6c:0d:dc:f8:d7:53:3c:
                    1c:2d:6f:d8:95:ed:d4:5c:82:8d:d9:da:52:69:5f:
                    03:ac:4f:b9:98:0c:7f:67:bc:74:cf:06:7e:c7:8e:
                    33:23:f2:a9:87:87:c0:c6:62:a6:51:5d:db:f4:27:
                    3b:94:3f:1f:00:5d:82:5b:d7:6d:56:5b:5a:c9:32:
                    5e:22:34:c9:2c:d6:69:aa:a6:da:f6:78:66:e8:f1:
                    08:bb:87:b7:c6:22:ad:b1:01:df:70:f0:10:e6:ed:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:27:61:BD:C7:DB:B2:55:A0:E9:96:DD:9D:5F:DC:CF:B6:3E:BC:BB
            X509v3 Authority Key Identifier:
                keyid:FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/dfd43c16136ead1c60baedddb05161a084bda0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/6e4a182506cc3d6396e00aa2873b9f3c87963395.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:03:ff:75:8d:0e:d4:22:6c:9f:0f:95:03:80:c5:bc:e0:4b:
         5e:29:1c:fb:c7:e1:23:93:54:6f:8c:88:93:a4:05:d4:fe:96:
         19:40:a8:69:73:6a:2d:3c:ec:09:00:2c:06:b8:d6:af:c5:3e:
         aa:46:24:91:ff:68:10:5c:74:9e:b5:cc:fa:7d:53:e1:39:8e:
         b9:16:4d:be:12:90:ef:56:90:81:d5:7d:a6:1f:04:06:28:5c:
         00:7b:1e:90:7f:43:66:76:87:74:09:98:4b:3e:4d:6b:76:5b:
         4e:81:7e:0f:17:e9:30:65:c7:f1:8f:ac:73:52:ce:6a:0d:ea:
         16:ee:a5:e8:77:a1:18:77:d8:28:24:d3:5c:38:71:69:42:d1:
         88:17:75:8d:49:4d:45:a3:99:35:c5:2c:e4:64:e1:e8:35:33:
         86:94:e5:0b:e2:ec:01:68:00:81:6b:e0:5a:03:d4:ea:61:73:
         65:70:73:87:35:b2:af:76:80:a0:ba:78:9a:4f:33:76:3c:99:
         f4:ac:b4:38:b2:22:e5:a6:9d:24:a5:ff:cd:d3:50:26:e0:59:
         d3:fe:43:c9:83:61:fb:4a:f0:23:79:2d:16:21:b4:13:86:6a:
         8b:38:a5:41:2f:55:ab:84:95:52:df:73:55:f0:15:29:a5:31:
         2d:c8:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org