Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/a48475024dad7b147bacf41fef24ad4ae0b19d63.roa
File:                     a48475024dad7b147bacf41fef24ad4ae0b19d63.roa (raw, json)
Hash identifier:          4+8G4sbL36rNb29GqDN3Qtd/HUsLQv1t6384zkip9GI=
Subject key identifier:   F9:6B:99:2E:C3:F4:38:02:0C:78:19:57:55:11:11:72:83:C6:43:A2
Certificate issuer:       /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial:       17A6A3
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/a48475024dad7b147bacf41fef24ad4ae0b19d63.roa
Signing time:             Mon 12 Jun 2023 14:54:32 +0000
ROA not before:           Sun 11 Jun 2023 14:54:32 +0000
ROA not after:            Thu 12 Jun 2025 14:54:32 +0000
asID:                     52266
IP address blocks:        201.219.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549987 (0x17a6a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
        Validity
            Not Before: Jun 11 14:54:32 2023 GMT
            Not After : Jun 12 14:54:32 2025 GMT
        Subject: CN=a48475024dad7b147bacf41fef24ad4ae0b19d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:c3:10:71:3d:0d:b8:bb:04:3c:80:1c:82:
                    04:0d:4b:3b:38:2e:fe:06:e5:16:47:5b:ed:2c:00:
                    30:b3:3b:41:c8:26:49:31:77:bb:26:20:6e:24:1d:
                    0e:4c:1c:4f:d5:04:be:00:65:f7:8f:2e:94:c2:aa:
                    06:17:3f:df:25:13:78:9d:aa:60:2d:6f:81:40:83:
                    77:e8:20:ca:ff:a4:18:62:fc:51:9a:f5:5c:9f:d5:
                    78:b9:ba:d8:a6:33:f2:50:4e:08:28:51:95:f2:a8:
                    5f:1e:ed:14:03:86:fd:cb:c9:e8:cb:2e:a1:2a:f3:
                    21:f3:72:05:5f:93:fa:78:18:39:ab:b4:e1:92:ee:
                    9f:2a:47:b9:17:76:73:05:ef:4b:c2:d2:a7:74:3d:
                    6e:1a:6b:58:ee:68:0b:67:56:1d:53:4a:0a:fc:1f:
                    8c:d5:bf:db:42:a7:e5:a6:f5:ef:0d:4f:4d:aa:83:
                    f6:d5:c0:a4:5a:14:fe:38:ab:6a:35:4c:85:99:ce:
                    0f:af:f8:6f:65:4a:e9:fa:d0:bc:3d:67:2e:f4:53:
                    a7:2e:f1:36:d5:97:2c:0d:ef:80:4e:12:55:8a:ab:
                    dd:15:c4:14:7c:ad:94:a8:d0:41:09:65:2c:b1:9b:
                    0b:46:c4:25:06:1a:98:00:10:88:29:a6:e7:e2:62:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6B:99:2E:C3:F4:38:02:0C:78:19:57:55:11:11:72:83:C6:43:A2
            X509v3 Authority Key Identifier:
                keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/a48475024dad7b147bacf41fef24ad4ae0b19d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:e5:fe:67:79:67:a7:86:58:06:51:86:17:ff:a9:67:a7:4f:
         2f:87:25:9c:77:48:59:a7:e1:65:45:03:89:84:6b:d4:79:c7:
         43:4b:16:00:0d:1c:db:c6:72:c1:05:d3:41:5f:8e:7f:f2:2e:
         9b:6e:ab:85:61:53:05:f4:4a:37:cd:d1:fe:18:6f:0f:c5:73:
         bd:c1:d0:4b:3e:6e:b5:ab:e5:53:61:cd:fd:6e:3f:cb:e8:6a:
         79:b6:81:a0:00:e2:84:d1:4c:c9:7f:e8:d9:c3:b2:a4:4c:42:
         f7:8d:fa:7f:d4:e8:30:67:f8:2c:f7:6e:43:b9:80:f3:25:04:
         d3:76:04:7a:6d:25:38:07:c5:36:d1:58:a4:8e:92:10:d1:b9:
         75:5d:7d:ec:62:52:0e:ae:7f:15:36:58:1b:82:9c:66:c7:d4:
         a6:7b:f5:91:50:bd:f0:dd:ab:a2:21:7b:c4:d1:b7:60:63:7f:
         a7:c5:e5:b1:6f:87:94:b2:7d:ea:69:94:79:6b:c9:ad:35:45:
         73:31:b5:e8:2e:5b:db:71:6a:62:86:52:b1:d8:df:5f:46:60:
         67:bb:99:37:29:88:ce:38:27:a2:27:53:e8:9d:01:c0:00:a5:
         00:4e:eb:21:7c:39:68:ad:e7:03:a3:bf:5a:6c:c0:e9:1d:c4:
         70:75:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org