Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/c82a00e78aad9309061bf1f3b3b6e51227196e2d.roa
File:                     c82a00e78aad9309061bf1f3b3b6e51227196e2d.roa (raw, json)
Hash identifier:          hjC3Ry77X0UEYdOOocKjf/YX7EsJ34u5R6HVynT93IQ=
Subject key identifier:   BC:8D:4B:B0:BC:2D:53:2A:48:6D:A6:8B:6E:12:66:B6:08:E4:FA:EE
Certificate issuer:       /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial:       1EFF20
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/c82a00e78aad9309061bf1f3b3b6e51227196e2d.roa
Signing time:             Mon 29 May 2023 12:28:21 +0000
ROA not before:           Sun 28 May 2023 12:27:56 +0000
ROA not after:            Thu 29 May 2025 12:27:56 +0000
asID:                     28494
IP address blocks:        207.248.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031392 (0x1eff20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
        Validity
            Not Before: May 28 12:27:56 2023 GMT
            Not After : May 29 12:27:56 2025 GMT
        Subject: CN=c82a00e78aad9309061bf1f3b3b6e51227196e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:8d:81:f9:c3:b0:10:0b:c2:89:3c:39:b6:
                    3b:ed:a5:5c:93:32:ff:37:fa:55:11:7d:e4:4c:b5:
                    f6:37:7d:55:4a:c6:da:98:c1:01:f7:08:43:f8:b8:
                    b9:ca:d5:8d:b3:56:1c:e3:d1:1d:43:a1:03:cb:fd:
                    22:73:65:13:83:bf:c7:2d:45:6a:bb:e1:81:d0:a3:
                    6d:0e:80:79:36:1d:22:01:4e:1f:6b:4f:04:11:00:
                    69:ab:c8:4b:b2:1c:7c:20:70:66:a7:52:ef:ee:7d:
                    bc:a2:e7:0c:c2:46:77:2d:54:b3:a7:df:29:b0:30:
                    a3:8c:fb:91:0e:1c:a9:88:01:da:40:82:1a:86:5b:
                    96:4a:a6:3f:6a:d3:77:25:b8:bb:c1:b2:96:d6:79:
                    bf:58:e3:0b:c7:4d:05:e8:fa:08:1b:43:63:62:71:
                    09:94:dc:1d:c1:30:63:e7:f1:21:f9:06:43:ae:a3:
                    83:96:cc:11:c0:1e:2f:c0:7e:70:8f:5f:69:3d:29:
                    ac:35:b5:80:b3:ee:a1:b6:57:89:54:34:37:84:79:
                    e0:07:1b:35:b1:da:a6:80:ba:2c:84:bb:11:27:b7:
                    70:83:b5:d7:9a:4f:9a:65:d0:92:d0:0e:79:3d:1f:
                    29:b4:bd:4d:ff:b8:23:db:9f:5b:11:96:2a:93:71:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8D:4B:B0:BC:2D:53:2A:48:6D:A6:8B:6E:12:66:B6:08:E4:FA:EE
            X509v3 Authority Key Identifier:
                keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/c82a00e78aad9309061bf1f3b3b6e51227196e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:aa:7f:2b:63:74:09:6b:e7:6c:28:1d:ab:e9:62:30:90:
         16:d4:1a:b3:23:ea:34:be:a6:32:11:67:8a:5b:a8:33:a7:8f:
         12:3f:39:bf:ce:51:56:34:82:d7:dd:da:b6:fa:6d:39:7e:f2:
         07:df:6d:38:f6:af:8b:1d:3d:de:ba:5d:d0:34:17:85:92:39:
         f2:08:50:2c:73:8f:5c:6f:18:77:90:49:4a:98:81:ec:15:43:
         75:90:18:94:ab:d5:33:3b:c0:1f:96:8d:7f:f5:a9:ef:d6:b8:
         78:97:5a:3c:5b:a4:8d:7e:4a:89:a8:76:31:c7:56:8a:37:8c:
         f2:2b:0d:e2:46:d3:32:a8:ae:b2:8a:fc:e6:d8:6e:a3:3c:db:
         e4:c8:65:da:34:bb:e7:02:b5:d0:d6:56:4b:50:24:0e:7b:a5:
         97:42:46:a9:fe:6e:f6:6b:39:25:1e:24:5c:b6:3b:4f:2e:52:
         62:3b:a8:5e:e0:87:a7:2f:1a:00:25:a6:e2:a2:91:72:82:42:
         0a:00:7c:f7:b5:d2:3f:d1:1c:c5:5b:70:46:c4:c0:61:61:52:
         5a:f1:3f:94:7e:c8:e7:b6:ff:df:f3:34:8f:e7:06:7b:e7:f2:
         8b:3c:ea:68:8e:d1:d4:f4:62:a8:c8:03:2c:25:02:6d:2f:55:
         1c:49:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org