Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/406dfb6a475b882d9962e95243f705eda75ea435.roa
File:                     406dfb6a475b882d9962e95243f705eda75ea435.roa (raw, json)
Hash identifier:          Aq0QmKzKXZIKm5r/dqEW1abpDrUgk0p6m6qMIz/SEvg=
Subject key identifier:   FE:3E:99:8C:FB:AC:5B:9D:82:37:70:BA:40:E4:E2:9F:1B:35:C3:D0
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0C2527
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/406dfb6a475b882d9962e95243f705eda75ea435.roa
Signing time:             Thu 05 Oct 2023 10:12:52 +0000
ROA not before:           Wed 04 Oct 2023 10:12:51 +0000
ROA not after:            Sun 05 Oct 2025 10:12:51 +0000
asID:                     272150
IP address blocks:        192.141.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795943 (0xc2527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  4 10:12:51 2023 GMT
            Not After : Oct  5 10:12:51 2025 GMT
        Subject: CN=406dfb6a475b882d9962e95243f705eda75ea435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:09:28:d3:3e:e7:45:3f:a2:85:13:1c:e8:
                    84:c4:f0:e8:93:d2:96:c1:cf:c0:66:9d:ee:44:a2:
                    fc:54:fd:0f:91:ae:7e:6a:a5:ff:e1:6d:1d:d5:1e:
                    41:ab:d0:3c:99:d6:1d:1a:bd:8c:96:ef:b7:12:81:
                    2f:f2:29:33:c2:34:db:0f:b2:41:fa:58:30:94:6c:
                    83:5c:da:d4:ab:cd:b3:24:2d:d2:ea:43:c9:5c:5b:
                    9f:03:e3:13:e5:bd:8a:3b:d4:c1:3d:23:52:b3:20:
                    e1:01:48:6b:56:fb:95:50:b2:3a:68:f7:b8:0c:2f:
                    f5:12:84:95:c5:f2:e5:7c:68:01:20:e7:3e:c4:f8:
                    9d:11:66:03:b3:a6:59:0a:04:05:46:b2:ed:39:f1:
                    b9:25:8e:aa:80:5c:8f:d1:72:83:85:6a:83:1a:ff:
                    ac:66:ee:7f:51:57:27:99:44:03:8d:b0:f8:8c:8f:
                    56:a7:fa:8a:a7:80:fe:18:8c:1a:37:07:e3:c9:43:
                    ec:74:90:cc:0c:b5:3f:b3:d7:53:86:9d:d6:63:42:
                    11:09:85:79:8a:1e:54:c7:06:08:5c:3d:3e:e6:ed:
                    02:a5:cc:13:75:17:ca:11:f2:a9:a5:ee:e2:ab:7c:
                    4a:f6:c2:c2:91:63:34:36:d0:20:3b:cb:69:e6:26:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:99:8C:FB:AC:5B:9D:82:37:70:BA:40:E4:E2:9F:1B:35:C3:D0
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/406dfb6a475b882d9962e95243f705eda75ea435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:0d:8c:71:fd:c3:d9:a2:e9:ed:42:1d:0e:46:87:c7:b7:4e:
         37:3a:26:36:99:3b:01:fe:d3:d6:8c:83:b2:f1:d4:79:c8:ff:
         c6:54:a2:82:39:cc:b7:98:40:87:eb:18:32:15:4c:3f:77:0b:
         78:4b:97:99:15:1a:29:2e:02:5c:77:a1:d3:2d:e1:40:e8:5c:
         1b:28:c9:43:55:55:28:44:b6:70:6f:da:4a:83:1d:7d:f3:d7:
         fc:5a:41:bd:71:2b:90:f5:49:49:0a:3f:7a:0c:bc:bb:6e:53:
         11:e1:d8:42:e4:32:05:aa:a9:dc:ea:cf:1f:ba:b5:fd:d8:80:
         f7:a5:72:a8:ed:ac:6b:cb:df:26:c7:a1:f0:7b:7a:88:08:0c:
         81:99:bf:13:38:18:de:19:79:28:d7:08:f3:65:e9:8e:1c:9b:
         bd:a1:bf:82:24:dc:db:77:24:25:11:c2:4f:ac:7e:cd:4a:f0:
         19:8e:96:ca:f4:e8:16:ab:dd:1d:15:dd:22:e4:ab:d0:79:8b:
         b6:f4:8b:7e:c4:a2:fb:89:e7:06:b9:7a:ba:ea:63:3a:40:63:
         12:71:f3:ca:74:e7:bc:3f:51:92:0f:74:4b:88:cd:83:88:1b:
         c0:6d:18:57:d9:a7:e5:6d:ff:81:6d:6e:34:a5:bd:31:a7:96:
         a5:38:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org