Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/cd9eb13c2eacfda735304cc2e811c0ab886c5146.roa
File:                     cd9eb13c2eacfda735304cc2e811c0ab886c5146.roa (raw, json)
Hash identifier:          hHhFNmlRf6Ns6RvvYdpHsuEczM/cC/LHsw4U8DhJXWI=
Subject key identifier:   DB:7B:5B:93:B6:7D:49:DC:E7:10:4B:E0:9D:6A:F3:CD:E0:39:CA:13
Certificate issuer:       /CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
Certificate serial:       0A5DFD
Authority key identifier: 00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/cd9eb13c2eacfda735304cc2e811c0ab886c5146.roa
Signing time:             Wed 24 May 2023 08:30:03 +0000
ROA not before:           Tue 23 May 2023 08:30:03 +0000
ROA not after:            Thu 22 May 2025 08:30:03 +0000
asID:                     52468
IP address blocks:        165.98.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679421 (0xa5dfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
        Validity
            Not Before: May 23 08:30:03 2023 GMT
            Not After : May 22 08:30:03 2025 GMT
        Subject: CN=cd9eb13c2eacfda735304cc2e811c0ab886c5146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:2c:d7:63:14:9b:02:a3:3f:ba:62:f9:7b:
                    19:5e:8c:1a:f4:80:57:8d:29:8a:af:7d:1c:25:2a:
                    5f:34:3d:9a:ed:87:5b:de:5c:54:b5:d5:0d:62:ac:
                    1c:76:9d:df:3a:f5:50:3b:8e:ee:73:a5:1c:62:6b:
                    6e:e6:fb:b9:f2:6c:6e:90:74:25:4b:54:92:9e:48:
                    41:1e:92:fb:3b:58:12:ab:ff:d3:1d:c5:eb:ca:d4:
                    df:ea:68:71:a6:47:fb:fe:2a:6f:ff:01:61:17:20:
                    51:95:46:04:44:31:13:20:c3:5c:47:08:82:62:38:
                    90:1e:d5:fe:e4:15:de:8a:80:af:2a:a7:ae:4c:e3:
                    f2:72:50:8d:d0:4a:37:46:11:2a:a3:35:b6:86:dd:
                    85:bf:14:c1:a6:35:2e:fb:1b:09:59:54:28:c8:c6:
                    6f:37:2a:5e:58:45:13:af:53:bc:3f:1d:f4:12:d1:
                    f9:63:11:ee:3d:4e:ff:6f:b4:fe:78:2a:bd:c8:e3:
                    29:5f:5e:5e:4c:43:4a:85:85:9d:84:d4:40:5b:8c:
                    76:a2:11:c3:b8:87:16:ee:fc:5b:3b:97:23:92:39:
                    9f:5f:d1:30:74:15:02:fc:86:e6:a7:63:4a:25:d1:
                    c4:29:4b:84:04:06:b3:a3:6e:9b:c0:e4:6f:1f:1f:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7B:5B:93:B6:7D:49:DC:E7:10:4B:E0:9D:6A:F3:CD:E0:39:CA:13
            X509v3 Authority Key Identifier:
                keyid:00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/cd9eb13c2eacfda735304cc2e811c0ab886c5146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:04:e9:80:e0:a7:6b:65:95:e6:10:db:aa:e6:30:44:b3:6c:
         f3:17:16:b1:dc:19:6d:e4:5c:ef:71:7b:8c:d6:c7:5e:88:52:
         c2:e9:d3:e2:f2:f2:a7:97:c9:62:bf:55:b5:a2:6e:25:09:37:
         d8:87:0c:76:0d:2e:3b:21:76:c2:6a:a6:36:8a:79:e1:bd:93:
         ef:87:c1:4a:c2:7f:5f:f6:a2:66:ab:57:02:5c:82:db:2d:d7:
         c9:ea:75:77:47:92:53:64:e3:80:65:41:2b:a9:1d:f0:b1:5f:
         db:a5:6c:f3:85:e0:f2:04:42:9f:67:6c:0c:9d:2b:e9:71:56:
         33:81:b5:0d:fc:cd:9d:49:ee:9a:88:40:60:47:78:bc:08:08:
         5b:e7:1c:7d:0d:61:0b:d4:70:f8:ac:a9:70:65:f1:5f:cf:bd:
         52:1b:f4:2c:4f:9a:4b:aa:28:ea:49:08:6b:66:a4:90:6b:2f:
         3b:68:50:10:62:73:d6:7e:77:db:98:ea:a0:59:6f:13:a9:9e:
         9c:ef:c4:c5:cc:27:c1:dd:fc:f8:a6:15:08:54:28:4e:67:dc:
         62:25:8b:fe:c1:75:d0:c3:ea:2f:a8:e6:b2:31:d6:b9:85:0d:
         98:1f:d9:bd:44:e1:ad:d6:90:bd:ad:9b:0e:e6:9c:f2:d3:4e:
         15:79:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org