Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/ca6da80571a7b375026d99deffb823d47aa0bb8d.roa
File:                     ca6da80571a7b375026d99deffb823d47aa0bb8d.roa (raw, json)
Hash identifier:          OryCXlIV8Al/Mpz6BTEdP4fFut0y/G30KcsxyVE6s84=
Subject key identifier:   99:F3:7E:C7:D4:8A:58:6D:35:6F:77:83:A2:15:FA:73:51:D6:B7:10
Certificate issuer:       /CN=7be338779993b5a43526ba10761aa524da070d7d
Certificate serial:       23D332
Authority key identifier: 49:6C:BD:64:40:D7:D4:BF:CD:B6:0B:A4:FC:3B:D1:07:8A:1F:1B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7be338779993b5a43526ba10761aa524da070d7d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/ca6da80571a7b375026d99deffb823d47aa0bb8d.roa
Signing time:             Fri 08 Sep 2023 16:18:30 +0000
ROA not before:           Thu 07 Sep 2023 16:18:30 +0000
ROA not after:            Mon 08 Sep 2025 16:18:30 +0000
asID:                     52336
IP address blocks:        167.250.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347826 (0x23d332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be338779993b5a43526ba10761aa524da070d7d
        Validity
            Not Before: Sep  7 16:18:30 2023 GMT
            Not After : Sep  8 16:18:30 2025 GMT
        Subject: CN=ca6da80571a7b375026d99deffb823d47aa0bb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:b5:dd:88:63:65:96:7c:26:6d:56:68:c6:
                    92:88:53:b8:f5:3c:42:58:6c:a6:b8:e8:8c:bd:cf:
                    2e:4e:5b:0f:f6:7b:61:40:ab:4d:3a:ed:95:34:d1:
                    2f:d6:83:f3:cf:41:2d:03:08:42:a9:a7:52:ad:d5:
                    2e:f1:5e:8f:02:26:4f:b0:03:38:c6:83:fd:b0:f9:
                    30:7d:d7:04:e5:eb:25:17:da:4c:60:60:4c:cd:e8:
                    5f:fa:4a:cb:a6:5c:39:4d:a1:41:fa:c1:6a:ad:ff:
                    51:6e:52:2a:13:d1:81:a4:b0:b4:bd:9b:82:2e:4b:
                    1c:dc:e1:7e:c6:c8:bd:38:2b:c9:37:bb:38:0a:b5:
                    16:6e:0d:51:7c:04:24:60:97:8d:6d:d1:0d:19:2b:
                    e1:1f:53:53:c6:8a:d0:0b:09:99:a9:71:5a:aa:bf:
                    33:a4:c0:b6:8a:94:38:cd:ec:2f:a1:06:96:78:2a:
                    4e:84:b4:d8:61:3b:61:4f:db:24:13:28:c8:e6:44:
                    b0:94:49:7e:4c:07:14:7e:cf:7d:f6:7a:d5:45:b1:
                    1a:8d:a6:5f:8b:75:52:53:53:b6:bf:29:8c:e4:23:
                    b9:6d:4a:18:1c:ba:b1:86:36:73:e3:c1:02:e8:1a:
                    0a:86:bc:a0:e3:bb:55:23:19:87:ed:db:c4:bc:a5:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F3:7E:C7:D4:8A:58:6D:35:6F:77:83:A2:15:FA:73:51:D6:B7:10
            X509v3 Authority Key Identifier:
                keyid:49:6C:BD:64:40:D7:D4:BF:CD:B6:0B:A4:FC:3B:D1:07:8A:1F:1B:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7be338779993b5a43526ba10761aa524da070d7d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/ca6da80571a7b375026d99deffb823d47aa0bb8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/7be338779993b5a43526ba10761aa524da070d7d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:92:6d:91:1b:7f:59:55:54:8c:69:30:06:11:f9:7a:2f:
         9b:73:38:31:ab:5f:7a:8b:5c:3e:33:e8:0a:34:3b:ab:91:97:
         da:f7:42:12:bd:7d:21:da:27:f3:bc:4d:f1:f8:3a:da:3b:65:
         3c:28:24:32:d7:d0:c8:80:8b:2c:fe:af:2a:6b:4e:d6:97:a6:
         a2:40:68:c7:91:7f:c9:99:ad:a1:3f:a4:a3:d8:0a:51:60:bb:
         73:d9:97:ce:46:5e:e3:df:ca:71:07:ab:92:a9:e0:e7:28:73:
         e8:ec:64:03:52:58:dc:58:67:3b:7d:b1:b4:31:de:ee:1f:1d:
         79:49:08:c3:32:b3:16:af:f3:cd:78:49:d8:40:a4:e9:63:36:
         18:49:5d:88:5c:1a:f7:5c:c7:e3:bb:06:51:2f:c8:6b:30:85:
         71:2b:57:0c:a5:10:9d:04:92:6a:75:c5:44:a3:81:e4:e1:be:
         25:2e:e3:ca:6d:f3:a0:1c:5f:90:20:87:23:37:58:20:5b:3b:
         b0:b5:c3:ac:77:0a:2f:af:70:13:64:58:e2:5d:20:fd:9f:74:
         3d:24:9a:58:93:76:37:2a:fc:69:16:0f:e1:99:c6:b8:84:6a:
         09:6d:5c:54:49:d0:36:f2:26:ff:69:d0:e6:5a:2f:f3:a2:65:
         94:d2:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org