Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c322e85518d6f4692fc919c36e7ff3374e0c11f1.roa
File:                     c322e85518d6f4692fc919c36e7ff3374e0c11f1.roa (raw, json)
Hash identifier:          efiLeLIe3p8aUt3DP8EoqgQgIFJcRiE3GTp/0oFADKk=
Subject key identifier:   98:A3:F1:4E:67:E7:C7:34:CC:41:10:A2:88:DE:A3:7E:66:E9:C1:79
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       230129
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c322e85518d6f4692fc919c36e7ff3374e0c11f1.roa
Signing time:             Wed 16 Aug 2023 16:45:16 +0000
ROA not before:           Tue 15 Aug 2023 16:45:16 +0000
ROA not after:            Sat 16 Aug 2025 16:45:16 +0000
asID:                     6306
IP address blocks:        200.71.128.0/18 maxlen: 20
                          200.71.160.0/19 maxlen: 19
                          200.71.160.0/22 maxlen: 22
                          200.71.184.0/22 maxlen: 22
                          200.71.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294057 (0x230129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Aug 15 16:45:16 2023 GMT
            Not After : Aug 16 16:45:16 2025 GMT
        Subject: CN=c322e85518d6f4692fc919c36e7ff3374e0c11f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:e6:db:dd:1f:47:ea:62:68:f9:54:65:96:
                    c5:f7:4f:b4:a7:1b:6a:d6:72:0e:d0:f4:1a:66:93:
                    eb:ff:05:28:96:b4:c2:13:82:ae:c9:07:d2:6b:cb:
                    ab:47:86:b1:1f:1d:9f:01:48:92:2b:4a:c1:66:2f:
                    eb:05:4f:aa:eb:31:7f:83:6d:35:5b:9f:a1:a2:a1:
                    fc:2e:b4:f8:6d:66:c3:59:58:9b:52:e2:a2:4f:bc:
                    f2:4d:e6:a9:f2:03:fa:da:b8:e6:c2:d4:63:f2:46:
                    b9:4f:17:98:2e:c8:c2:af:f5:a2:85:52:7f:1f:d7:
                    3e:f4:85:0e:1e:ee:68:a6:be:75:fa:c8:9a:09:1b:
                    d4:0c:ef:f1:79:a6:1a:71:21:89:7f:5e:c6:0d:ce:
                    11:c2:3e:69:54:9f:07:db:6f:1b:d9:81:80:da:55:
                    9d:8a:fa:2f:f4:a2:10:84:29:21:83:a0:c7:99:03:
                    48:6c:31:c4:f6:9c:4d:cd:59:ee:4d:03:5a:d4:04:
                    15:87:2d:ba:bf:62:4a:c2:7d:25:77:f2:e1:e5:27:
                    e8:8e:13:d4:d1:f2:5f:e9:18:ed:94:2a:26:98:09:
                    cf:49:ef:44:bb:24:af:45:e9:82:50:28:1b:7d:ef:
                    f4:c9:c5:5b:77:9c:66:d7:b9:07:f2:3d:03:bc:ca:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A3:F1:4E:67:E7:C7:34:CC:41:10:A2:88:DE:A3:7E:66:E9:C1:79
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c322e85518d6f4692fc919c36e7ff3374e0c11f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:c7:80:bb:1a:95:9c:a6:d8:ac:f3:14:5c:e9:e0:ee:59:0a:
         47:fd:90:06:f6:2d:ec:89:21:b6:91:d5:23:df:79:c8:46:1e:
         07:fe:57:e0:4a:2c:01:f4:30:f0:03:f3:4d:65:46:3a:c5:b4:
         2e:39:26:b8:72:42:8e:05:de:bd:8b:20:46:59:01:1b:92:01:
         64:55:0e:7f:9a:9f:26:c9:2e:66:1d:2c:d6:b9:07:2f:ca:e7:
         b2:78:02:b2:e8:d9:c8:8b:af:2f:2b:67:85:eb:e1:74:3d:6b:
         3b:96:11:4b:34:71:fb:d1:53:64:96:e3:2c:d3:a5:a5:13:90:
         a5:fb:f6:64:59:85:a9:e1:6c:23:63:cf:4d:1c:ef:41:e0:be:
         99:ff:53:ad:55:6f:05:8e:b0:ba:54:a0:11:91:de:2b:db:4e:
         47:2d:fb:f9:17:db:76:fa:e0:a6:e8:28:8c:41:4d:ad:b3:1a:
         36:df:4d:a8:e2:36:0b:60:34:37:d3:a5:cc:4f:9b:8d:b5:23:
         94:6c:e1:be:02:a8:c3:4a:97:1e:b4:ca:1c:d6:27:58:d3:4c:
         38:6e:53:16:80:12:b3:8b:b8:c1:36:c4:15:20:84:c9:51:b5:
         0a:05:2a:d2:c6:7c:16:24:cc:a3:ae:85:c1:91:47:99:a6:f4:
         77:f1:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org