Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/6c2b118b09679285819d74fdb5ee23e48e341f46.roa
File:                     6c2b118b09679285819d74fdb5ee23e48e341f46.roa (raw, json)
Hash identifier:          WQvJksc0W4R9K5KiyRrn8v966L+uWiaP4JLhOwShLkI=
Subject key identifier:   CD:B5:D0:55:F7:57:32:DE:0D:13:4D:4D:BB:B4:D2:AF:86:BA:2C:00
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       224317
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/6c2b118b09679285819d74fdb5ee23e48e341f46.roa
Signing time:             Tue 04 Jul 2023 08:30:16 +0000
ROA not before:           Mon 03 Jul 2023 08:30:16 +0000
ROA not after:            Wed 02 Jul 2025 08:30:16 +0000
asID:                     12252
IP address blocks:        200.14.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245399 (0x224317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jul  3 08:30:16 2023 GMT
            Not After : Jul  2 08:30:16 2025 GMT
        Subject: CN=6c2b118b09679285819d74fdb5ee23e48e341f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:59:30:92:f1:ab:e0:25:9c:d2:71:51:47:
                    11:54:83:c8:9c:9f:7d:53:ed:f3:c1:57:ba:7a:5a:
                    d6:81:0f:b2:93:a8:82:03:1e:1b:54:ba:bd:27:83:
                    0a:85:9a:a2:a2:d5:07:05:cc:2e:0c:d8:98:1e:20:
                    a4:41:b9:3e:d2:b5:82:b4:4d:98:39:9a:d6:4d:d5:
                    bd:94:6f:ee:e3:37:e2:f5:ce:97:a8:0b:2b:53:f2:
                    03:4d:82:51:93:cf:1f:23:06:7d:33:61:0a:3e:f3:
                    4f:21:bb:c4:c9:9b:3d:69:50:7e:72:31:db:af:fb:
                    d1:c0:77:2f:a1:6b:93:a4:f3:96:ef:fc:3b:cb:fd:
                    9c:0a:f7:e1:74:e8:61:21:5d:5a:9e:ea:d3:81:92:
                    f4:e8:f4:2c:ed:84:c3:49:d5:6d:b3:cc:60:a8:16:
                    d6:4a:cd:51:b3:ad:79:4d:83:1e:15:56:2b:b7:72:
                    61:42:98:7e:ff:17:f0:73:c8:1e:69:7e:13:19:cb:
                    68:e1:e8:b2:b0:e7:bd:19:48:3e:a1:cb:68:b2:32:
                    60:9d:1e:1b:da:7f:ef:93:98:e5:61:39:8f:81:98:
                    c3:fa:71:00:32:05:33:22:cf:ad:fc:8e:ac:1a:d9:
                    5a:88:c8:88:5b:e5:70:74:28:d4:e1:c0:28:2c:2c:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:D0:55:F7:57:32:DE:0D:13:4D:4D:BB:B4:D2:AF:86:BA:2C:00
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/6c2b118b09679285819d74fdb5ee23e48e341f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:9d:4c:39:b2:8a:d3:92:80:5f:e5:36:8e:3e:94:78:75:29:
         43:70:da:aa:e1:ae:ad:6c:5f:8a:62:3c:43:14:d8:32:dc:c9:
         cf:6e:50:e4:2a:a0:ba:ae:ca:50:5e:9b:8f:a6:5d:94:b9:cc:
         0b:3d:d5:c0:21:d8:8e:1e:66:08:6d:a2:50:22:03:11:0d:14:
         84:71:72:49:b5:74:4d:cf:32:a0:83:37:14:c1:cb:2e:ea:6f:
         c5:c2:3c:00:d2:76:8a:c4:9a:34:de:ff:00:39:62:99:ce:43:
         6a:6c:78:2d:a6:96:d9:83:b4:c6:61:0a:8c:54:a5:81:57:4d:
         23:40:63:c6:c2:7f:89:f9:7c:de:a5:f3:ee:59:28:40:7c:0f:
         0e:68:b5:30:74:8e:14:87:1c:47:08:f5:3c:86:fa:ed:02:ce:
         24:d1:49:00:35:06:bf:a3:b1:60:57:e9:82:66:28:96:d5:0d:
         c9:04:48:c8:9d:8f:d8:63:4b:5d:e9:af:7b:43:3d:3c:f6:b3:
         bc:f9:c3:b5:4d:95:9c:b2:cc:6f:63:22:12:bb:bd:17:fe:85:
         39:7c:ff:8d:85:14:8a:c8:0b:1b:e7:87:f9:4b:6b:22:47:c7:
         d9:ad:59:cb:91:49:cd:30:60:54:a9:5e:69:bb:6c:75:67:60:
         25:02:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org