Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbcc3a19-17de-4d2c-a3ec-5d8baafc4ec8/512e2280749a4e996cc105bb56896902e2dbdcd1.roa
File:                     512e2280749a4e996cc105bb56896902e2dbdcd1.roa (raw, json)
Hash identifier:          Arz4oOEQtgfVrJ5yC+hnJzVPcTjNQavU/wn9TQ9uzpE=
Subject key identifier:   EC:80:05:E2:87:F3:9F:C9:CA:58:C3:89:FF:9E:40:BB:49:A9:A7:AC
Certificate issuer:       /CN=d521c7fba0352daaa6e8bb49e91cdca1b7a477ae
Certificate serial:       181EA6
Authority key identifier: 5A:F2:B6:3B:96:23:1C:D0:22:F9:38:2E:7F:DD:9E:96:FB:7E:ED:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbcc3a19-17de-4d2c-a3ec-5d8baafc4ec8/512e2280749a4e996cc105bb56896902e2dbdcd1.roa
Signing time:             Fri 10 Jun 2022 16:33:52 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     262185
IP address blocks:        200.106.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580710 (0x181ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d521c7fba0352daaa6e8bb49e91cdca1b7a477ae
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=512e2280749a4e996cc105bb56896902e2dbdcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:68:de:eb:0f:89:92:ee:8a:e2:e3:30:72:
                    44:7f:5c:f5:8b:5c:0d:bb:d7:61:0f:fc:f4:a5:80:
                    9e:54:1c:dd:80:b6:8d:16:52:06:72:83:e7:b7:57:
                    60:6c:80:6e:c2:15:6e:57:8f:bc:d8:ea:2b:ca:5f:
                    31:a6:48:46:ee:bb:11:bc:0f:83:8e:f9:28:71:60:
                    03:ba:1c:18:2b:53:28:70:40:70:2e:f6:f2:bd:fe:
                    c0:a3:de:14:dd:72:95:53:23:db:34:01:3e:f9:b7:
                    3a:11:3b:22:1b:22:19:be:0c:e1:73:3b:2c:b0:fa:
                    11:73:6f:bc:5a:55:38:fb:a6:e1:65:56:b5:34:a7:
                    7a:88:19:e9:35:d7:d9:15:bd:e8:3c:e1:1b:15:bc:
                    bb:2b:45:f2:04:c2:9f:f6:50:e1:33:99:18:ab:d3:
                    3c:8a:b5:d3:8f:76:dd:d5:7a:38:63:98:ae:61:33:
                    17:5a:98:e4:10:a9:9e:9f:e1:64:32:89:f7:82:d9:
                    30:05:ff:4a:dd:d9:24:27:8e:fd:9d:7f:02:8e:15:
                    8f:78:81:8f:a1:74:31:f3:81:18:3f:7e:13:b3:70:
                    53:55:86:21:af:c1:ab:72:36:9a:e5:6b:03:62:4d:
                    7c:d3:3b:eb:f8:9c:f9:47:6f:d9:d3:a4:8e:c9:9b:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:80:05:E2:87:F3:9F:C9:CA:58:C3:89:FF:9E:40:BB:49:A9:A7:AC
            X509v3 Authority Key Identifier:
                keyid:5A:F2:B6:3B:96:23:1C:D0:22:F9:38:2E:7F:DD:9E:96:FB:7E:ED:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbcc3a19-17de-4d2c-a3ec-5d8baafc4ec8/512e2280749a4e996cc105bb56896902e2dbdcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbcc3a19-17de-4d2c-a3ec-5d8baafc4ec8/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:9a:0f:9a:63:2c:b9:c3:e6:a9:cd:3d:19:55:f0:13:06:f0:
         b8:eb:83:32:aa:b0:e3:cf:43:e7:de:b0:39:6c:48:19:56:d3:
         9e:04:90:06:68:02:ca:5c:08:70:13:0b:22:14:2c:60:f8:be:
         be:e8:40:8f:66:02:19:35:bd:cf:a2:53:2e:0e:4e:52:c9:d0:
         fc:12:d8:6a:0f:82:79:3e:3d:12:a0:b3:74:cf:ec:19:6c:6a:
         85:3b:31:09:36:07:40:57:78:f4:e9:60:0b:27:58:62:ea:82:
         55:ad:f1:ac:4d:16:ff:f2:bd:ba:66:81:ca:b6:0f:26:bd:65:
         85:d2:ac:ed:e5:67:05:34:6a:2f:83:6c:23:01:e5:49:c1:0d:
         77:a3:b8:bc:60:6e:c9:ec:0b:67:fd:73:ba:de:16:87:b9:db:
         b3:a0:8d:3e:4a:26:19:70:ca:7e:55:06:1e:cc:bb:e4:54:21:
         94:b0:27:27:62:15:b0:5b:20:f2:dd:f7:6a:ca:e1:52:1c:3c:
         e2:89:a3:58:e6:b6:ad:50:20:e6:51:dc:a0:b0:5f:40:5f:0f:
         8f:0a:00:54:62:f7:b3:ed:54:dd:52:a1:66:3e:91:03:94:c1:
         5a:9d:8b:55:66:27:9f:97:c4:cb:d4:61:26:65:90:10:0b:0c:
         ce:e4:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org