Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/b4b7fca8e9f4864c3bd0b0b1eecbf89453a1b251.roa
File:                     b4b7fca8e9f4864c3bd0b0b1eecbf89453a1b251.roa (raw, json)
Hash identifier:          g4hTnizGttjvw38qOfwkmZKWV111eA0nu9guxAGEzoI=
Subject key identifier:   16:B6:14:1D:00:44:51:27:42:44:88:51:F8:6B:62:44:20:1D:01:FF
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       22F116
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/b4b7fca8e9f4864c3bd0b0b1eecbf89453a1b251.roa
Signing time:             Tue 15 Aug 2023 21:56:55 +0000
ROA not before:           Mon 14 Aug 2023 21:56:55 +0000
ROA not after:            Fri 15 Aug 2025 21:56:55 +0000
asID:                     6306
IP address blocks:        161.212.0.0/16 maxlen: 16
                          161.212.128.0/17 maxlen: 17
                          179.20.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289942 (0x22f116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Aug 14 21:56:55 2023 GMT
            Not After : Aug 15 21:56:55 2025 GMT
        Subject: CN=b4b7fca8e9f4864c3bd0b0b1eecbf89453a1b251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:64:3e:34:35:2f:92:5c:e6:e8:38:8e:be:48:
                    f8:88:ea:10:02:14:78:c6:22:fb:da:91:5a:fb:72:
                    26:7b:63:67:42:64:c0:44:0a:9e:cc:bf:a3:f6:f8:
                    75:ab:1c:50:93:0a:18:09:5b:82:59:ce:f0:1c:8d:
                    77:16:77:1a:fb:38:61:dc:db:43:91:31:a4:ea:4c:
                    e8:db:3b:c3:5c:f1:b6:6f:c1:4a:41:d1:12:f5:1b:
                    3f:9e:71:80:a8:c4:70:12:89:c3:e9:55:b8:35:e2:
                    ea:9e:d7:01:7c:75:dd:b4:46:84:01:cb:7b:52:83:
                    80:8c:da:ed:b2:8e:15:f9:df:75:eb:45:ff:04:31:
                    a5:96:a0:b1:83:cd:cd:e8:2f:2b:5b:db:e6:ed:8a:
                    99:4f:05:27:bf:5e:b6:e8:08:79:85:4d:9e:ab:26:
                    df:29:b5:c8:0c:4f:b2:f9:a1:55:3f:5a:2f:79:45:
                    db:6a:cf:45:31:7c:20:cd:73:ae:29:da:aa:a4:53:
                    70:bb:56:bd:dd:9e:82:01:3b:57:b7:2d:40:ee:cb:
                    1d:2e:ef:36:1c:df:c3:a7:ec:b3:ed:a4:e8:df:74:
                    8a:55:13:85:f3:79:56:1e:d5:42:18:d4:df:7b:f1:
                    83:94:f5:95:fe:76:d7:6f:a8:82:c0:ac:f3:2b:f1:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B6:14:1D:00:44:51:27:42:44:88:51:F8:6B:62:44:20:1D:01:FF
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/b4b7fca8e9f4864c3bd0b0b1eecbf89453a1b251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.212.0.0/16
                  179.20.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:c6:6b:13:d6:42:b3:7d:7f:e9:c7:e8:0d:b1:b4:4e:ef:
         d6:0f:b8:13:13:a6:1e:3d:3c:53:f9:3b:b2:ec:d0:f8:e2:ea:
         54:a8:be:54:aa:10:5b:f1:fa:8b:66:10:24:fd:c7:42:95:1c:
         cf:7b:2b:70:40:d3:a0:7d:6c:5c:be:86:dc:88:e7:50:b6:44:
         7f:22:f5:b5:25:82:2d:80:9f:17:43:e5:09:2d:8b:10:84:30:
         90:da:7a:61:95:aa:e3:40:b4:89:4c:ab:66:fd:60:b4:e8:e7:
         15:49:a6:55:8e:b0:e6:7d:65:80:fa:b2:8a:2d:9a:2b:cc:b3:
         97:6f:18:39:e8:38:3c:9c:02:00:72:3a:e5:4b:24:81:0f:a7:
         19:23:c2:e1:59:c4:95:bc:66:88:65:7c:08:80:88:01:cd:c3:
         4c:ad:bc:be:b9:ba:14:7f:5f:50:1d:a2:5a:19:c3:a1:7b:60:
         ae:e3:4f:30:9b:5f:f1:9e:93:3f:ba:fa:71:41:e5:71:8b:fc:
         d7:17:33:63:1e:70:1a:04:c6:bb:0e:7b:76:d7:34:9f:de:d6:
         39:cf:16:a0:c8:38:c2:93:e4:c2:73:29:9a:5e:2a:3d:b1:f4:
         c5:64:a0:dc:2d:5e:89:be:3a:09:14:e0:d8:a2:8b:86:fe:92:
         6f:d5:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org