Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/c5b1cc39febe836abb19e0128b7ca2dde9a77818.roa
File:                     c5b1cc39febe836abb19e0128b7ca2dde9a77818.roa (raw, json)
Hash identifier:          Z44jGtzu0VZHyutqQqyTvPtWgj3z5Wy4tCalKxqv0Bg=
Subject key identifier:   97:61:BA:64:B9:35:64:F3:69:E9:8F:C5:B2:17:9F:03:87:49:30:A2
Certificate issuer:       /CN=86e766e07cf0cd3dfd57b2a4acd47666d35711b6
Certificate serial:       12E99B
Authority key identifier: 88:17:E3:63:3B:91:B1:21:50:2E:54:71:20:ED:AA:8C:67:83:20:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/c5b1cc39febe836abb19e0128b7ca2dde9a77818.roa
Signing time:             Mon 15 Jan 2024 18:35:10 +0000
ROA not before:           Mon 15 Jan 2024 18:35:09 +0000
ROA not after:            Thu 15 Jan 2026 18:35:09 +0000
asID:                     263717
IP address blocks:        131.108.192.0/22 maxlen: 24
                          181.174.160.0/22 maxlen: 24
                          2803:c80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239451 (0x12e99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e766e07cf0cd3dfd57b2a4acd47666d35711b6
        Validity
            Not Before: Jan 15 18:35:09 2024 GMT
            Not After : Jan 15 18:35:09 2026 GMT
        Subject: CN=c5b1cc39febe836abb19e0128b7ca2dde9a77818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ea:06:16:cf:9e:3e:38:c6:7d:de:e5:77:ff:
                    2b:59:c3:7a:33:52:69:b5:56:66:e0:d8:74:0e:86:
                    25:6f:ae:23:1e:99:be:35:dd:8c:07:fe:b5:be:3a:
                    09:6d:b8:a0:39:fb:c4:5b:9c:89:01:bc:4e:ff:90:
                    58:8d:59:8c:05:81:90:52:7c:17:c6:7e:96:53:0d:
                    a4:83:6b:d8:6e:3d:f4:c9:2a:6a:66:cc:50:24:c4:
                    5e:cc:c2:0a:42:db:6d:b8:7f:8f:f7:4d:e5:a1:ac:
                    c8:fc:c8:02:6b:35:9d:31:52:dc:53:ad:d5:12:2c:
                    fd:40:03:e1:b8:d2:07:9b:f9:c1:d0:b0:26:c3:c4:
                    e7:77:2e:a0:74:89:a4:df:0f:cf:dd:eb:b3:80:f0:
                    18:55:43:5c:10:8b:8a:0b:89:6e:45:58:b2:f0:f6:
                    6b:5b:0b:92:33:af:f2:30:4d:ca:e3:67:5d:ef:f1:
                    eb:74:35:af:c7:08:e4:34:34:da:b0:33:f0:a5:50:
                    40:d7:2f:2d:3f:0b:8a:f4:e4:d4:16:7e:90:0b:65:
                    ae:f6:66:15:6a:1d:9d:29:a0:1a:60:d8:47:9d:c3:
                    8a:b9:30:8f:24:75:fe:72:2f:fc:61:8e:07:58:8e:
                    5d:32:ed:90:bd:68:ad:23:6d:ee:85:40:6f:bf:f7:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:61:BA:64:B9:35:64:F3:69:E9:8F:C5:B2:17:9F:03:87:49:30:A2
            X509v3 Authority Key Identifier:
                keyid:88:17:E3:63:3B:91:B1:21:50:2E:54:71:20:ED:AA:8C:67:83:20:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/c5b1cc39febe836abb19e0128b7ca2dde9a77818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.192.0/22
                  181.174.160.0/22
                IPv6:
                  2803:c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:e6:63:a7:db:76:e9:d8:da:57:5b:85:a4:8e:48:22:9d:28:
         47:14:ba:5c:68:19:6b:b9:5f:f7:b7:45:72:42:b0:35:37:47:
         3f:79:f7:31:3e:6a:82:67:d9:9b:09:29:95:f4:a9:62:1d:3b:
         b8:aa:cd:8a:6d:01:67:7b:d6:1b:1f:02:70:53:45:54:f5:f2:
         0e:d8:58:27:4d:1d:20:61:50:c4:ca:43:6d:e4:c3:8e:42:2b:
         bf:03:f7:3e:c5:03:83:3f:3c:31:1b:58:5e:f1:20:fe:ba:f2:
         33:75:2d:61:07:a6:6f:a0:64:f4:71:7c:ef:03:3f:b8:1f:0e:
         a4:d0:cf:f1:1a:90:b5:31:2a:04:b4:8a:14:aa:fc:f2:6e:17:
         45:73:33:ed:86:ce:9d:0c:96:fd:7d:76:1c:db:0e:1a:d5:82:
         e4:be:9c:87:eb:f2:77:81:b4:5f:de:52:80:a1:78:48:d6:5d:
         bd:c0:e9:40:f6:db:3f:cc:12:a7:ae:d1:6a:c5:dc:b1:87:3a:
         7a:7f:5d:80:14:29:25:69:d9:20:7c:61:95:e1:f4:86:24:8d:
         bd:c8:39:44:75:ea:44:88:17:f8:d9:4c:ec:f1:08:43:4b:27:
         f4:bd:b1:47:4c:02:7b:2b:a8:86:ea:4c:ed:8e:a0:ad:13:da:
         9a:38:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org