Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/5cf3988ab6f05c7155f00b5e479eea032c94a431.roa
File:                     5cf3988ab6f05c7155f00b5e479eea032c94a431.roa (raw, json)
Hash identifier:          7iJ7AHxnA5WpAMhF/sUPSU8dSS9zUVtHfBKp5IfFpHI=
Subject key identifier:   1A:DA:E4:1E:7B:B7:AE:18:9C:91:AF:54:94:0C:6C:AF:3D:1D:03:00
Certificate issuer:       /CN=1d01e0d3cb834f895612155144725f326726b46a
Certificate serial:       1238BE
Authority key identifier: 09:29:CA:B4:B6:2B:66:D5:F7:17:2A:EE:84:5E:79:84:65:AF:59:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d01e0d3cb834f895612155144725f326726b46a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/5cf3988ab6f05c7155f00b5e479eea032c94a431.roa
Signing time:             Thu 25 May 2023 08:30:01 +0000
ROA not before:           Wed 24 May 2023 08:30:01 +0000
ROA not after:            Fri 23 May 2025 08:30:01 +0000
asID:                     265770
IP address blocks:        164.163.125.0/24 maxlen: 24
                          164.163.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194174 (0x1238be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01e0d3cb834f895612155144725f326726b46a
        Validity
            Not Before: May 24 08:30:01 2023 GMT
            Not After : May 23 08:30:01 2025 GMT
        Subject: CN=5cf3988ab6f05c7155f00b5e479eea032c94a431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:81:17:0a:a0:30:3b:12:ac:52:a5:69:da:
                    01:7b:28:fc:43:c4:84:22:33:cd:37:6f:b9:d7:73:
                    55:7e:4f:34:f5:eb:30:81:e9:9b:ac:8e:99:63:89:
                    f9:57:8e:d3:a3:18:33:6e:d8:3b:70:8c:4b:e4:44:
                    9c:af:11:7b:8d:07:4d:e6:5c:15:08:7f:a0:a5:fa:
                    88:c2:1b:b7:d6:e9:9e:99:0f:25:43:e0:bb:d6:3c:
                    06:dd:38:1d:6f:29:9a:10:a6:2f:f5:6b:9c:37:6c:
                    90:ec:54:33:d7:54:6d:e3:9a:bd:48:57:16:8d:e4:
                    7b:05:ac:e0:78:4b:a9:23:68:3e:96:0a:44:cf:03:
                    9d:99:11:7a:c2:30:e9:ff:59:fe:89:f6:ac:47:c6:
                    2a:d5:96:6e:5b:48:28:1f:d0:fe:8e:9c:78:e4:05:
                    85:e0:bf:75:b3:de:56:f3:6a:4f:c3:7c:2e:09:77:
                    af:14:35:b7:11:b9:d1:ba:b3:ca:71:16:76:b1:4d:
                    1f:a1:3f:6b:52:b8:4e:cf:09:4c:7e:8a:01:cb:6e:
                    b8:29:0f:83:e2:2c:5e:a9:ce:a6:cd:9f:32:7e:ae:
                    a2:d2:ac:9f:fd:fe:dd:0c:91:1a:09:b7:1d:18:9f:
                    53:7e:c1:89:c8:87:a5:4e:24:ac:03:b4:f7:82:e3:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DA:E4:1E:7B:B7:AE:18:9C:91:AF:54:94:0C:6C:AF:3D:1D:03:00
            X509v3 Authority Key Identifier:
                keyid:09:29:CA:B4:B6:2B:66:D5:F7:17:2A:EE:84:5E:79:84:65:AF:59:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d01e0d3cb834f895612155144725f326726b46a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/5cf3988ab6f05c7155f00b5e479eea032c94a431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/1d01e0d3cb834f895612155144725f326726b46a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.125.0-164.163.127.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:d7:a7:44:3c:12:aa:06:39:f1:3c:77:9d:6f:75:72:d4:47:
         9f:b1:e3:ad:0e:59:db:8a:57:ca:37:7e:27:7c:65:be:10:1f:
         64:73:36:f7:d5:f8:f4:de:77:28:bf:2b:41:51:f9:03:a6:03:
         3d:49:aa:cf:c2:1e:fd:4a:b3:a2:55:b2:da:26:dd:79:30:a1:
         f3:f0:14:64:8a:6f:3f:3d:ae:42:62:15:62:41:ce:eb:83:b6:
         f6:4e:56:fb:d7:69:24:26:72:3a:c0:fa:c8:f4:5e:47:93:6c:
         6c:9a:86:03:e6:ae:60:77:ee:cd:eb:e1:b5:ef:1e:21:86:eb:
         30:47:82:6c:ed:fa:52:62:12:81:19:fa:e8:dd:4f:a7:e5:dc:
         8e:61:09:61:d0:47:dc:f7:93:a2:8e:d2:82:cf:be:49:e8:99:
         7d:97:8e:7c:5c:c6:ff:e7:71:9b:a5:e6:e4:35:05:42:ec:1b:
         aa:25:e7:31:46:5d:7a:60:3a:4a:a9:8c:20:13:43:cb:57:03:
         c4:47:3c:a3:cf:67:2b:64:01:e8:5d:64:7c:1e:9e:96:be:14:
         01:9e:e9:89:a7:b7:ba:ae:66:10:f3:cc:b7:d5:8e:32:d4:8a:
         21:e7:ad:66:93:54:87:10:16:5f:ff:fc:f9:b5:37:29:5c:27:
         f2:db:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org