Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/09d3bfa0654b95fab89a3834b25d9a901135b78d.roa
File:                     09d3bfa0654b95fab89a3834b25d9a901135b78d.roa (raw, json)
Hash identifier:          6viRoHZdNDQWhhZVmSMDRHUgkn80E/y81dZlpaCvNAc=
Subject key identifier:   BF:F3:80:45:CB:53:8D:D7:32:DC:BD:F3:75:AA:4C:EB:01:68:62:D0
Certificate issuer:       /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial:       1B13
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/09d3bfa0654b95fab89a3834b25d9a901135b78d.roa
Signing time:             Mon 08 Nov 2021 18:12:28 +0000
ROA not before:           Mon 08 Nov 2021 02:00:00 +0000
ROA not after:            Wed 08 Nov 2023 02:00:00 +0000
asID:                     265504
IP address blocks:        168.0.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6931 (0x1b13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
        Validity
            Not Before: Nov  8 02:00:00 2021 GMT
            Not After : Nov  8 02:00:00 2023 GMT
        Subject: CN=09d3bfa0654b95fab89a3834b25d9a901135b78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:2c:0d:5b:25:e2:45:6c:c2:e7:74:38:3f:
                    b4:9d:25:d2:78:a2:a8:07:e1:c1:a8:9e:64:38:7a:
                    c0:49:16:41:9e:60:16:26:b2:c6:14:91:ec:ca:65:
                    e3:52:ae:57:8b:c5:f7:c8:cf:d2:ba:7d:15:b9:af:
                    e3:82:ee:57:4f:20:6d:4e:49:14:98:fb:9f:f0:db:
                    7e:67:a4:a0:39:8d:2e:af:d8:bf:7a:6e:5c:a1:3e:
                    73:b4:74:19:14:b4:b3:7a:9d:07:2f:3f:cc:8a:6e:
                    46:f7:24:de:ee:ed:cd:96:67:77:b2:84:71:bb:30:
                    82:30:ae:30:9b:fc:95:9b:9d:10:75:49:ad:d0:7e:
                    27:5e:90:ea:0f:2d:e4:4b:73:c7:36:a2:c9:7a:77:
                    8d:8b:51:00:43:88:2a:3f:3d:94:95:2a:61:19:21:
                    45:bb:e9:3f:bb:00:1c:94:aa:cf:03:e3:f0:9d:bf:
                    5c:f8:cb:3c:35:74:6b:32:bc:fc:6a:a3:9e:14:67:
                    02:78:16:83:e5:35:12:ca:83:52:e8:2a:31:46:b3:
                    17:db:49:24:41:b2:0b:ce:71:fc:50:df:a7:20:7b:
                    63:92:87:11:cf:be:6b:17:ac:aa:89:4c:bb:51:04:
                    d3:e4:fb:4a:b3:64:2b:99:02:04:01:6a:98:1b:32:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:80:45:CB:53:8D:D7:32:DC:BD:F3:75:AA:4C:EB:01:68:62:D0
            X509v3 Authority Key Identifier:
                keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/09d3bfa0654b95fab89a3834b25d9a901135b78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7c:ad:f6:43:be:90:32:ba:d6:cf:36:b0:d3:8e:60:9f:e1:
         05:29:06:1f:9d:ae:eb:a3:99:ad:56:e1:b5:f5:9a:56:85:fa:
         ac:cc:16:08:d7:0b:60:c6:ef:02:e4:0d:0e:f5:c0:ea:48:25:
         b6:4c:c2:b0:20:e3:c0:58:bd:08:6b:0b:16:6a:51:d4:bd:bf:
         fc:36:3f:f4:e3:d5:83:c2:e3:06:66:4d:bb:4a:91:da:28:39:
         67:7c:cb:10:84:84:73:c6:50:6d:12:e8:40:9c:89:ee:8b:5f:
         c5:0a:ac:3f:d9:d7:cf:86:00:3c:be:94:ee:33:29:0e:90:b1:
         d0:11:18:32:09:d0:b2:ef:03:77:d9:a9:99:67:cd:83:89:28:
         f2:c1:fe:b9:d9:e9:32:b1:ba:82:f4:d7:61:c2:92:80:20:0f:
         d7:54:13:8e:b0:f8:d8:1a:c5:d8:e5:60:c1:b1:a4:7b:34:ae:
         d3:55:04:96:27:3d:6d:77:de:96:38:4e:be:8e:3e:97:67:99:
         8b:59:f9:b1:44:b2:0f:ad:b4:ce:7f:37:c5:39:ad:ab:bc:7e:
         9e:48:0f:05:46:0b:7e:92:ff:e0:60:08:b6:21:f9:d8:5d:3b:
         82:a3:dc:f9:74:2f:4c:fc:3c:58:94:3a:0a:5d:3d:76:20:82:
         1d:1c:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org