Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/6d6a116937115da12eb885065525c6deb8466374.roa
File:                     6d6a116937115da12eb885065525c6deb8466374.roa (raw, json)
Hash identifier:          NWemUwSR3XCMS947Dn2IirCr1j/axuilhmvvdHcVAg8=
Subject key identifier:   2D:5E:2A:30:14:37:BA:F3:DB:C1:FD:E4:53:DE:BB:26:BE:9A:34:ED
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       028B6E
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/6d6a116937115da12eb885065525c6deb8466374.roa
Signing time:             Tue 11 Jul 2023 17:45:08 +0000
ROA not before:           Mon 10 Jul 2023 17:45:08 +0000
ROA not after:            Fri 11 Jul 2025 17:45:08 +0000
asID:                     16629
IP address blocks:        200.42.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166766 (0x28b6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 10 17:45:08 2023 GMT
            Not After : Jul 11 17:45:08 2025 GMT
        Subject: CN=6d6a116937115da12eb885065525c6deb8466374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:42:43:56:39:7d:6d:8f:a4:b4:97:52:83:
                    d9:ac:4d:da:15:10:ff:f7:a4:d1:11:4c:7e:09:33:
                    10:cb:4a:84:4f:6f:af:20:37:9b:da:ba:52:dd:1e:
                    8f:07:0c:ad:77:ea:46:6a:62:b5:81:bc:60:af:38:
                    94:4d:5f:d6:d9:b3:f2:d2:56:7d:db:a2:c2:1a:09:
                    9d:8d:7b:04:75:06:42:3f:65:bf:46:52:9e:78:9c:
                    ea:e3:09:6f:64:a1:de:cb:f6:88:6b:91:c5:cc:53:
                    cd:ba:0d:fb:d9:61:4b:50:e8:86:71:40:15:8a:32:
                    5b:9d:b8:2e:47:4e:c9:e2:b4:ff:7e:67:ae:0b:7b:
                    fd:23:a0:cf:66:56:1b:ca:2a:90:a2:a6:a7:98:32:
                    69:d4:20:fc:93:0e:24:94:31:3f:a6:89:f1:80:07:
                    94:f3:70:77:e3:75:4b:7a:3b:bf:42:95:24:89:8a:
                    c2:7b:1c:0a:cb:35:bc:da:a1:ae:88:6b:79:df:b5:
                    d8:53:67:3b:7d:45:26:88:cc:15:17:fa:de:e0:f6:
                    30:bc:44:6d:84:9f:dc:1f:51:4d:54:11:b1:32:5f:
                    a4:9f:15:7d:3f:8e:af:a3:74:6d:e1:f7:33:24:4c:
                    2e:f5:8a:d8:99:90:fe:b5:80:d1:74:f0:48:d2:98:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:2A:30:14:37:BA:F3:DB:C1:FD:E4:53:DE:BB:26:BE:9A:34:ED
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/6d6a116937115da12eb885065525c6deb8466374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f3:fb:0d:68:14:62:6d:e8:fb:61:91:eb:dd:b3:93:34:8d:da:
         3b:4c:f5:8b:3b:a2:28:f6:c1:4b:8f:f2:11:1c:15:bd:5a:33:
         31:5f:9a:19:1c:16:85:a0:88:fd:3b:f5:91:b4:2e:f8:9f:6b:
         eb:2f:85:20:99:df:24:3a:19:a4:e0:a1:96:69:4b:01:9e:7a:
         5b:ba:88:64:17:f4:61:d9:bf:10:69:e5:29:82:4c:16:e3:d0:
         89:ab:64:a8:31:1d:17:17:61:be:50:2c:58:78:63:7d:2a:ec:
         2c:4c:2c:57:03:60:ad:39:39:26:fa:81:be:f0:34:ca:ad:4b:
         f7:e3:37:db:d9:45:32:c7:6f:ce:dc:08:31:db:9b:ad:d7:6f:
         b2:4d:3f:0e:24:50:fa:19:9e:51:54:23:9a:50:f0:7d:35:c3:
         53:2c:5d:f6:66:71:87:f9:f7:22:cb:7e:49:ea:fb:87:97:77:
         d7:6a:ea:ff:97:4f:58:f8:58:5e:d5:7e:af:b9:94:4f:ea:b3:
         e8:0f:79:a1:88:45:ca:6d:61:24:34:09:7e:9d:06:58:28:cd:
         4d:35:08:99:7f:0e:17:16:fc:be:ba:bf:bb:fe:53:af:3f:76:
         c3:c9:e2:68:ff:d8:e9:18:1f:e4:a7:d4:9f:66:90:94:7e:de:
         86:3c:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org