Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/c301b15ada5dd68d359067492442b3e405056340.roa
File:                     c301b15ada5dd68d359067492442b3e405056340.roa (raw, json)
Hash identifier:          Aa1ApHepdG7sdLaoumJRgxkf8yTO1Yv7BghDqX0UnpA=
Subject key identifier:   36:31:D0:22:35:39:BA:0F:F9:8B:05:A1:6E:58:BC:6F:E4:C1:10:D8
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       166D81
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/c301b15ada5dd68d359067492442b3e405056340.roa
Signing time:             Mon 11 Apr 2022 15:09:35 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     27789
IP address blocks:        201.221.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469825 (0x166d81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=c301b15ada5dd68d359067492442b3e405056340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:b7:e8:f5:5b:46:5a:b3:2e:70:7a:68:db:
                    d3:01:a3:92:ce:e7:37:1c:86:9c:3a:18:18:3d:fa:
                    8e:88:3a:df:49:bd:cc:33:78:0e:b2:46:7d:63:c9:
                    c6:f6:28:db:26:9d:5e:a0:4d:4d:cd:51:5f:c8:48:
                    6a:54:f0:90:71:40:7f:76:4a:7d:17:e2:ab:12:32:
                    eb:bc:c7:18:09:47:2b:50:b2:ed:28:9c:54:94:19:
                    a7:07:35:ad:44:2d:96:67:d4:9d:19:25:be:03:01:
                    7a:85:47:34:01:d7:78:f4:8a:73:38:34:cb:55:85:
                    24:8f:e7:18:e5:92:d4:bd:8d:c6:4a:75:da:d5:62:
                    43:f6:0d:c4:24:68:6c:99:a1:ab:47:31:8f:f7:b6:
                    27:85:12:b9:70:33:d7:b4:c7:fd:c7:72:06:34:ec:
                    38:f6:9b:b7:81:ca:17:d3:d1:da:ae:b3:0e:66:46:
                    e6:10:9d:78:a0:df:a2:16:11:d1:1c:6f:52:23:ca:
                    2e:8b:71:f9:e2:98:08:9a:bf:64:75:cf:e1:80:45:
                    13:96:5c:01:0d:9a:b2:a9:cb:25:ff:92:e0:22:30:
                    ef:ff:c7:36:98:3b:5b:be:f3:e6:9d:11:c9:96:e7:
                    ed:80:0c:96:72:51:fa:94:f4:d0:22:ca:26:0b:3e:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:31:D0:22:35:39:BA:0F:F9:8B:05:A1:6E:58:BC:6F:E4:C1:10:D8
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/c301b15ada5dd68d359067492442b3e405056340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:77:80:1f:d7:bf:54:d5:26:8c:63:f8:c3:9c:29:6c:60:
         49:52:6c:6b:00:56:84:46:50:22:92:9a:e7:ae:a5:e5:dd:37:
         05:80:3b:00:1d:b1:b9:99:98:a5:c8:82:66:e1:50:82:25:88:
         32:95:34:39:36:44:b5:d3:ab:45:3d:7c:de:36:b9:b6:6e:2c:
         26:67:47:1c:08:94:9e:a5:b8:89:e1:1e:11:43:0f:61:7b:2a:
         28:7d:20:42:1b:7e:0e:b5:8c:8f:94:cc:95:b4:88:2f:ed:2d:
         51:19:76:6f:25:25:9d:74:5a:59:f0:09:65:e7:3c:7d:c4:0f:
         a1:0a:a8:49:3d:3f:7d:ef:55:cb:d0:da:9c:34:7a:f5:e7:c7:
         1b:65:c5:e2:bf:67:38:62:97:71:15:92:8c:dc:ff:c5:03:d7:
         ee:b2:1e:5e:4a:32:b0:19:48:66:57:91:0c:e3:54:b7:64:34:
         c6:d4:32:e3:13:1f:25:b6:c0:9b:61:8f:ce:10:55:24:22:c9:
         ff:c3:2b:14:3a:8a:01:93:50:50:43:69:42:6f:07:a1:83:c7:
         65:a9:e6:34:71:2d:9a:69:af:a6:a1:a0:4f:48:08:c4:47:1c:
         a1:f2:df:86:1b:bc:5d:21:04:63:7a:4c:53:e7:88:1d:cf:f9:
         23:3a:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org