Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/1c946612485369b7eb0cc98768a1a6e375b5e8d1.roa
File:                     1c946612485369b7eb0cc98768a1a6e375b5e8d1.roa (raw, json)
Hash identifier:          kHAOOSrqlWJX9lsfJJcW1K7BqQZR8EOoqbLy9eH1ofM=
Subject key identifier:   75:FC:B9:A6:FF:02:96:91:0C:D0:4E:6B:A1:58:43:7B:A4:24:FF:4A
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       1C5626
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/1c946612485369b7eb0cc98768a1a6e375b5e8d1.roa
Signing time:             Wed 30 Nov 2022 20:46:57 +0000
ROA not before:           Mon 06 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     198949
IP address blocks:        200.91.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857062 (0x1c5626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Jun  6 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=1c946612485369b7eb0cc98768a1a6e375b5e8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:1d:19:7c:02:1b:c5:4b:4f:01:3b:d4:32:
                    67:46:69:3e:d2:58:1d:c1:2a:e5:ed:6d:8f:74:e5:
                    9b:83:37:05:c1:d0:fd:72:9b:37:5f:e5:26:20:ca:
                    0e:51:44:b5:7e:b9:02:c0:d7:08:50:8d:58:b2:7b:
                    ae:35:47:4d:a5:df:b1:87:5c:50:e8:34:9b:6f:e3:
                    75:55:b9:9c:b0:ea:11:82:40:61:2b:1c:ae:2c:a0:
                    5e:73:ac:4a:59:0f:68:1e:a5:07:5f:4d:02:7d:85:
                    97:13:50:1a:a7:8f:61:93:36:9c:14:ed:3b:07:0a:
                    b9:0e:ac:8b:c5:a2:7d:cf:aa:ad:d2:66:92:f3:a4:
                    ea:ea:3e:0f:9f:47:b7:3a:82:fd:de:70:52:fc:58:
                    6d:51:3b:96:b7:d9:50:82:02:8d:0d:ee:9c:80:21:
                    39:7c:82:83:91:1d:66:c9:1d:ed:d8:98:12:0a:23:
                    8c:f3:21:19:26:1b:86:e0:e0:d4:1e:a3:b7:9f:54:
                    21:e3:85:c3:9f:f2:3a:26:ac:59:39:93:40:0d:7e:
                    63:26:31:2e:9d:a9:c5:d6:f1:b6:ce:65:a7:e9:fa:
                    23:00:a7:c1:85:f5:03:04:88:60:de:e8:15:25:76:
                    91:f0:05:4f:e0:25:f7:f1:75:dd:20:2b:fb:c7:44:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FC:B9:A6:FF:02:96:91:0C:D0:4E:6B:A1:58:43:7B:A4:24:FF:4A
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/1c946612485369b7eb0cc98768a1a6e375b5e8d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:e8:2e:58:59:95:54:db:16:02:8e:68:b9:37:48:a2:ce:
         aa:f9:51:9b:45:24:6f:15:2e:ca:fc:fa:fb:2b:54:aa:21:41:
         e1:7d:d8:7c:d3:e0:0e:a9:c4:f1:76:7a:74:cf:e5:71:a2:1c:
         f9:8d:77:ca:c5:c8:98:e5:12:d0:ed:db:9c:ac:40:8f:6c:7b:
         20:39:73:08:03:f7:79:3d:bb:ef:81:76:34:76:ad:bd:aa:25:
         2d:b2:33:21:b9:43:a0:57:34:b9:40:ee:dc:6c:22:1a:e9:cf:
         fd:6e:84:ea:f0:f8:35:92:0d:27:55:b2:d7:0a:b0:de:76:81:
         d6:da:ce:aa:d3:5f:b0:94:81:5e:8c:c3:00:c5:57:a4:70:1a:
         b2:ad:07:31:7c:0a:a3:66:44:45:4d:43:9f:cb:c9:66:c0:73:
         c1:f6:3e:5c:c4:bb:21:65:a8:32:e4:28:bb:38:40:d5:93:f8:
         60:9d:22:e5:5e:6a:7b:50:a8:c1:79:04:35:5e:e2:44:e2:f4:
         9b:7b:28:9e:0a:ce:e6:91:e4:79:52:91:65:e9:df:42:5e:da:
         12:82:27:94:4f:56:a9:33:8e:2a:6d:36:95:0a:4f:36:d4:5f:
         7d:28:15:79:f4:41:2e:a1:b4:f0:ed:c7:d1:50:47:07:a0:0b:
         db:42:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org