Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/092e4062a84ec37c9e7fa011e07113bbc87a32b4.roa
File:                     092e4062a84ec37c9e7fa011e07113bbc87a32b4.roa (raw, json)
Hash identifier:          +HJweaKLoj4ueXhRWZvUOXTwpyESUhDzh7hxfPzS/fw=
Subject key identifier:   44:8D:D6:56:DA:E4:3C:D9:F0:6A:9D:60:03:5B:A6:DE:89:EB:A3:0E
Certificate issuer:       /CN=466e43c330240907a2659f129b7552a9a8972ea2
Certificate serial:       121961
Authority key identifier: 30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/092e4062a84ec37c9e7fa011e07113bbc87a32b4.roa
Signing time:             Wed 28 Jun 2023 08:30:00 +0000
ROA not before:           Tue 27 Jun 2023 08:30:00 +0000
ROA not after:            Thu 26 Jun 2025 08:30:00 +0000
asID:                     271872
IP address blocks:        128.201.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186145 (0x121961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e43c330240907a2659f129b7552a9a8972ea2
        Validity
            Not Before: Jun 27 08:30:00 2023 GMT
            Not After : Jun 26 08:30:00 2025 GMT
        Subject: CN=092e4062a84ec37c9e7fa011e07113bbc87a32b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:6f:e0:11:e5:60:5d:5f:21:71:5c:76:2d:
                    40:d4:80:eb:39:3f:2a:31:b4:1f:ed:cf:68:17:9c:
                    fb:ef:39:e1:6a:db:1d:14:7c:f2:65:d7:c8:9c:99:
                    ca:59:6f:e5:25:4a:ab:d4:0d:29:4c:e7:9e:06:9f:
                    6f:cd:5b:7c:8f:f6:45:a3:d3:2c:d6:a7:37:33:f9:
                    8f:3d:04:14:36:64:8c:95:43:a1:c3:33:45:5c:fd:
                    cd:fe:fe:95:85:00:70:58:4f:4a:c9:d6:21:d4:27:
                    36:7e:72:d0:76:a9:b4:4a:8f:0a:4f:39:30:0d:31:
                    86:07:d2:80:3b:ef:cf:f7:6a:66:91:41:ef:ef:40:
                    d3:1b:af:4d:2b:e0:97:e1:27:a3:73:20:64:54:98:
                    7f:c7:06:7c:92:4b:bc:ae:39:62:44:42:c2:d7:b5:
                    77:8e:8f:c3:d4:bd:11:a3:c2:a7:06:ad:85:23:62:
                    3b:7c:b6:e1:85:68:49:60:0d:f0:f2:ad:db:49:83:
                    b7:16:ad:00:ae:33:de:f0:25:0d:c1:e2:ac:74:22:
                    1b:10:e4:18:49:68:ca:9b:3a:08:b6:27:b3:32:3d:
                    7d:1f:b2:d9:2a:e9:7b:9b:67:20:8e:aa:f0:be:dd:
                    a6:43:61:45:f6:86:ec:4c:e6:01:2b:0c:63:97:9e:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8D:D6:56:DA:E4:3C:D9:F0:6A:9D:60:03:5B:A6:DE:89:EB:A3:0E
            X509v3 Authority Key Identifier:
                keyid:30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/092e4062a84ec37c9e7fa011e07113bbc87a32b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/466e43c330240907a2659f129b7552a9a8972ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:1a:a6:08:ee:6d:7e:83:26:cb:29:e4:ef:b0:b7:bf:a5:b9:
         94:a7:e5:01:f0:4d:83:36:95:58:29:f6:94:c5:12:d3:e8:e9:
         57:86:68:25:91:bc:81:5b:5e:bd:51:7f:23:bd:04:47:f8:c9:
         41:51:6e:84:ec:23:7d:a1:c1:8e:67:09:02:d3:92:a6:07:ca:
         e2:70:69:0e:17:99:a4:5c:c5:57:e4:fb:a4:c0:1a:72:bd:fc:
         a6:f6:44:31:43:0c:c6:f5:8a:43:a2:3b:5a:b0:d3:ce:7a:94:
         f3:05:c6:11:39:56:8a:b3:7f:49:01:20:29:8c:cc:38:00:15:
         52:6a:74:24:1f:53:20:89:09:ca:76:92:c5:88:14:74:b3:4c:
         56:63:74:7e:21:54:d2:5c:53:e0:0d:20:b7:5e:ef:c5:4d:b3:
         71:7a:01:03:59:e0:21:80:98:b1:0f:a0:5e:b4:90:27:e6:3d:
         cf:1e:92:e9:1b:c8:13:b8:29:1c:2f:ec:cf:3c:b7:ff:60:2e:
         46:90:8e:60:d3:f9:ed:88:e6:19:9c:c0:6f:1f:fa:41:23:8e:
         06:34:26:7b:7c:9c:13:ac:31:2c:2d:16:09:d4:4e:c8:60:f4:
         ed:9e:b3:59:39:52:84:eb:97:61:70:8f:6e:5f:9c:82:18:2d:
         f8:e4:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org