Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/d01b302f8e1c959e52ae2c13bfaf835a88fec5fd.roa
File:                     d01b302f8e1c959e52ae2c13bfaf835a88fec5fd.roa (raw, json)
Hash identifier:          PBE/E10peHWqwg8VRZFt8GlcTeGOu5E9BXg88V1LlJ8=
Subject key identifier:   DC:F1:3A:4C:83:89:1A:DF:8F:00:F4:E6:AC:4E:81:B4:C1:7B:0C:92
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       19C99A
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/d01b302f8e1c959e52ae2c13bfaf835a88fec5fd.roa
Signing time:             Fri 05 Aug 2022 16:22:24 +0000
ROA not before:           Fri 05 Aug 2022 16:21:27 +0000
ROA not after:            Mon 05 Aug 2024 16:21:27 +0000
asID:                     7195
IP address blocks:        148.222.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690010 (0x19c99a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: Aug  5 16:21:27 2022 GMT
            Not After : Aug  5 16:21:27 2024 GMT
        Subject: CN=d01b302f8e1c959e52ae2c13bfaf835a88fec5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:10:2a:ba:86:ea:ad:b0:53:59:61:1f:bf:3b:
                    46:67:74:db:1b:bc:6d:0a:47:59:a6:b7:13:97:69:
                    da:64:24:f1:e2:1c:8a:ff:07:7a:de:14:8c:a4:82:
                    9e:87:63:16:6e:5f:5c:34:07:6e:12:c4:f6:57:e3:
                    61:a1:64:64:30:64:67:96:a3:61:9a:e0:c9:c6:03:
                    8c:12:48:32:a0:7d:02:ab:46:1f:55:3c:65:a9:8e:
                    77:1a:2d:40:2b:1c:a5:45:e8:bc:5c:86:e6:87:1a:
                    55:19:f7:f4:8b:6c:f6:f1:3f:de:96:92:5b:b2:08:
                    09:92:ea:c1:cd:12:07:5f:9d:1f:54:e9:20:e6:c9:
                    f4:87:c5:37:f4:cc:e1:6e:91:fb:15:85:e7:82:2d:
                    a3:db:80:61:3e:88:45:f5:8d:60:9c:1a:a6:3d:d9:
                    ab:2b:14:30:e4:5b:58:92:eb:d2:8a:d6:22:21:d6:
                    6c:18:8d:02:68:96:93:9f:67:3d:ee:94:47:33:f7:
                    f9:39:88:83:a8:4c:41:55:34:f2:3e:cf:88:8c:a8:
                    5d:8d:60:b5:02:37:a6:0d:70:ff:b3:a1:a3:8b:e9:
                    b8:f9:ee:bc:f5:f4:83:2d:91:a5:cc:40:6f:fc:46:
                    22:87:b5:9f:c0:a7:bb:5f:0f:17:a0:68:e4:0b:ce:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F1:3A:4C:83:89:1A:DF:8F:00:F4:E6:AC:4E:81:B4:C1:7B:0C:92
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/d01b302f8e1c959e52ae2c13bfaf835a88fec5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:93:35:e3:ce:62:bf:7b:10:45:75:70:d1:bd:23:40:cd:b1:
         2d:17:16:39:92:8f:d7:49:05:88:f6:46:85:be:ff:ef:b5:35:
         3e:98:cd:57:44:e1:30:6f:3a:41:ff:f5:e8:e1:23:63:d8:69:
         dc:f8:d3:3b:42:57:6d:5f:d1:66:b2:88:71:b6:7d:05:7c:d7:
         f1:44:bc:df:7e:a8:c4:2c:c6:e1:01:54:ac:4d:04:85:58:bc:
         a0:c8:90:bf:3f:13:c0:35:6a:12:ec:cd:c3:b4:34:d4:26:34:
         dc:47:b9:20:b1:d5:16:86:eb:cb:7b:e7:c2:2b:12:3c:19:f8:
         aa:4a:25:83:6e:78:3c:06:de:c4:69:d8:e8:fc:46:50:4d:45:
         bf:a8:47:2a:76:79:38:56:ad:96:a7:e3:f9:9c:02:39:11:0f:
         49:bb:84:22:8c:a2:8c:4f:5c:e6:fb:2c:9f:27:c4:9e:63:a9:
         91:d0:e7:0a:d7:5f:b9:90:83:7b:6e:18:52:74:dc:fd:83:39:
         22:49:f1:b3:99:f2:2b:9f:b4:e0:13:bc:9a:6e:ac:d9:ee:a3:
         b9:0f:8e:e1:40:77:7b:5d:bc:41:d4:2b:01:f4:1e:49:56:d2:
         3b:37:29:2b:47:4f:0c:42:e9:55:a3:13:a3:e2:1d:20:13:f8:
         54:3e:6d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org