Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3e7e4dd4-a549-4f57-a66b-2e5e3b777142/13048e6e79a39916777c95abab64a6ad40131d6a.roa
File:                     13048e6e79a39916777c95abab64a6ad40131d6a.roa (raw, json)
Hash identifier:          Eos0YihGwqOvm070P8fJbbosMKsVgfPVPQkmNygAYRc=
Subject key identifier:   DB:57:BD:04:01:BF:BF:26:6D:8D:F7:44:0E:15:A5:2E:FE:FA:AC:05
Certificate issuer:       /CN=5b7ecece57be40d2d7acbf686245f6860d943ed3
Certificate serial:       0D7BD8
Authority key identifier: 11:17:AD:16:CC:FE:8E:9D:9D:24:74:36:4F:2B:44:9A:6D:21:E3:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7ecece57be40d2d7acbf686245f6860d943ed3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3e7e4dd4-a549-4f57-a66b-2e5e3b777142/13048e6e79a39916777c95abab64a6ad40131d6a.roa
Signing time:             Wed 24 Mar 2021 14:42:13 +0000
ROA not before:           Wed 24 Mar 2021 14:42:13 +0000
ROA not after:            Tue 24 Mar 2026 14:42:13 +0000
asID:                     264694
IP address blocks:        168.232.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883672 (0xd7bd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7ecece57be40d2d7acbf686245f6860d943ed3
        Validity
            Not Before: Mar 24 14:42:13 2021 GMT
            Not After : Mar 24 14:42:13 2026 GMT
        Subject: CN=13048e6e79a39916777c95abab64a6ad40131d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:b5:48:87:e2:e3:54:d5:7c:3f:6f:4d:ea:
                    f7:62:51:08:42:a1:f6:8f:29:4c:86:72:5c:2a:2f:
                    44:06:75:8a:5b:0d:96:e7:97:2e:7c:b1:6f:e7:ba:
                    65:b6:ff:93:0e:e5:0d:4c:bb:f8:68:94:61:df:77:
                    03:1f:62:ac:17:97:b6:35:ef:a4:0b:08:6a:c9:33:
                    02:22:2c:46:f9:65:e0:8c:ea:e8:a1:0c:41:54:99:
                    85:01:2e:e3:c5:53:5a:d5:b1:05:bf:e2:96:f8:e0:
                    fa:a1:c4:e1:4b:ce:59:f2:fa:d4:7b:2c:8e:15:bb:
                    a2:ef:1b:a0:c2:35:f4:da:0d:4c:27:3b:ca:0f:24:
                    1d:48:86:07:7e:f4:8f:8f:2d:44:7a:fc:90:a3:4c:
                    ed:12:fb:c6:17:a4:41:20:c2:cf:05:cd:d9:d7:a6:
                    bc:dc:d8:cb:d6:f9:bc:37:9a:ad:9b:91:90:c4:3e:
                    98:24:72:d8:d8:02:b1:9c:88:47:e1:a4:98:a3:f3:
                    bf:70:6a:09:ae:75:c8:50:ef:8f:dc:a8:8d:ad:32:
                    67:19:4f:3d:fc:1e:cc:77:4a:61:26:4c:fc:d3:df:
                    78:f0:80:ee:95:ff:76:87:d8:4f:c5:ff:52:d7:83:
                    33:69:6e:16:6c:6e:1a:bf:17:11:95:84:17:f4:eb:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:BD:04:01:BF:BF:26:6D:8D:F7:44:0E:15:A5:2E:FE:FA:AC:05
            X509v3 Authority Key Identifier:
                keyid:11:17:AD:16:CC:FE:8E:9D:9D:24:74:36:4F:2B:44:9A:6D:21:E3:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7ecece57be40d2d7acbf686245f6860d943ed3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3e7e4dd4-a549-4f57-a66b-2e5e3b777142/13048e6e79a39916777c95abab64a6ad40131d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3e7e4dd4-a549-4f57-a66b-2e5e3b777142/5b7ecece57be40d2d7acbf686245f6860d943ed3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:0a:b9:73:6b:26:ec:7d:84:52:1b:34:22:37:ba:1a:75:ee:
         80:78:e7:0f:22:5b:f2:20:a6:a7:29:31:d5:63:32:83:c2:d5:
         64:46:3e:d9:fd:47:a0:be:d3:a7:ff:eb:c3:25:4a:e1:33:ea:
         e1:24:98:53:00:ee:0e:11:d3:f0:f2:c0:e3:af:7d:35:e2:d2:
         56:2d:f5:6b:c1:07:e1:45:bc:5c:99:6b:ad:35:6f:b0:06:95:
         67:19:e5:0d:b6:61:de:0f:67:a7:0d:78:90:eb:5c:e7:70:04:
         f8:48:b7:20:1f:14:a9:5a:68:c6:d7:56:6b:45:ee:35:fa:b0:
         5e:7d:1f:5a:2d:d4:a9:ac:5c:53:1f:7e:29:69:96:be:ee:0f:
         52:2c:45:37:e0:ac:16:0e:5b:52:fb:1f:e7:63:24:e0:54:98:
         5f:29:3f:49:be:3e:c6:0b:49:e1:31:eb:d5:1d:13:8a:bc:9d:
         48:cf:f7:27:b0:d3:12:b9:88:25:ce:f5:7a:87:31:31:9c:03:
         45:16:0d:74:31:95:21:dc:27:d1:fd:9f:1a:cc:ed:dd:e0:c5:
         f9:45:69:47:dd:b3:2e:b6:ea:c7:ce:b3:24:b4:75:c0:25:4c:
         1a:73:38:8b:4c:f6:eb:1f:83:67:d9:b2:53:8b:85:87:a2:a9:
         a4:df:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-ams.rpki-client.org