Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/183f25c63e6f1b7a0c0fcddd180f1207eb8296ae.roa
File:                     183f25c63e6f1b7a0c0fcddd180f1207eb8296ae.roa (raw, json)
Hash identifier:          x3N5KlQJ4X8m++GrBQZF/Y4DjwVlCU0hiRzfrRy5qbg=
Subject key identifier:   2C:E3:CD:1F:3E:16:65:7C:4D:4D:53:46:D5:34:CB:16:58:E4:79:2B
Certificate issuer:       /CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
Certificate serial:       11C4F6
Authority key identifier: 6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/183f25c63e6f1b7a0c0fcddd180f1207eb8296ae.roa
Signing time:             Wed 10 May 2023 23:00:14 +0000
ROA not before:           Tue 09 May 2023 23:00:13 +0000
ROA not after:            Sat 10 May 2025 23:00:13 +0000
asID:                     28409
IP address blocks:        168.121.60.0/24 maxlen: 24
                          168.121.61.0/24 maxlen: 24
                          168.121.62.0/24 maxlen: 24
                          168.121.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164534 (0x11c4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
        Validity
            Not Before: May  9 23:00:13 2023 GMT
            Not After : May 10 23:00:13 2025 GMT
        Subject: CN=183f25c63e6f1b7a0c0fcddd180f1207eb8296ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:05:f6:e9:cb:28:cc:30:29:71:cc:26:9e:
                    36:99:3d:c6:6f:99:b9:ff:58:1f:39:f0:6f:69:d8:
                    8c:49:0c:99:04:bc:72:2b:fb:b3:f5:73:39:99:07:
                    b3:89:85:df:2b:c1:56:87:c9:5b:44:b6:b5:7e:09:
                    64:ef:72:89:7e:66:92:68:d3:05:76:9a:71:ba:ae:
                    80:a2:1f:00:38:02:47:6b:57:01:29:17:7e:34:4f:
                    c1:2f:b7:71:24:8c:c2:02:61:91:71:4c:49:d1:39:
                    5b:18:69:25:0b:b9:66:b6:14:5f:06:31:2f:59:7a:
                    a6:ab:9c:c3:87:7d:ba:43:4b:1a:e7:01:70:3d:d6:
                    5e:18:f3:da:ca:d4:32:04:b0:de:47:59:2a:d4:64:
                    55:50:08:d0:54:d8:af:91:24:5c:f3:fd:3c:35:75:
                    3d:e2:f1:74:da:fd:de:b3:c3:b6:4f:36:cc:27:16:
                    e3:91:62:fc:ac:ba:df:7a:b2:51:7c:ab:69:90:f8:
                    85:62:61:18:26:ca:64:5c:81:11:a3:af:d4:96:41:
                    47:12:d1:d2:16:64:6d:d6:19:67:7a:41:70:9c:01:
                    cf:51:4a:7a:dc:60:04:69:c2:12:e0:2c:c2:7d:6f:
                    c9:f5:de:ea:7b:48:f2:e0:6c:77:9b:ab:a2:95:63:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E3:CD:1F:3E:16:65:7C:4D:4D:53:46:D5:34:CB:16:58:E4:79:2B
            X509v3 Authority Key Identifier:
                keyid:6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/183f25c63e6f1b7a0c0fcddd180f1207eb8296ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:58:c6:fe:d0:12:07:fa:b1:f6:e3:bd:80:98:03:07:28:88:
         a7:7d:1d:b5:1b:66:d9:f5:3f:c2:8e:fc:9e:c3:71:7b:6c:33:
         b4:f8:df:26:0b:2a:7c:e6:3c:3e:80:17:54:10:06:de:43:d5:
         a3:c2:c2:e9:47:1b:05:b6:ee:80:5d:60:ec:6d:b3:ef:9a:ff:
         fd:3a:8a:52:1d:5f:a3:cd:9b:9e:a1:8a:43:53:a7:29:fe:b5:
         61:71:d1:93:41:45:d5:c0:61:8d:c5:99:6f:8a:31:83:b0:5a:
         8e:70:00:28:62:30:a7:13:2d:a9:af:96:10:ef:9f:3b:43:f5:
         da:4c:fa:ec:6e:af:de:9e:6c:3e:31:e2:94:4d:7f:66:d7:0a:
         07:6c:1f:cc:c8:ff:33:16:98:12:92:b0:56:39:50:c8:2f:07:
         df:bd:a1:d9:f6:a6:60:bf:e1:cb:57:8f:02:2a:bb:0f:ca:e3:
         14:3c:12:17:d1:7d:f4:6e:ea:3c:fd:ca:64:e6:92:85:f5:16:
         c7:16:4c:2b:c8:e1:95:27:26:d0:b6:00:92:73:c9:b0:13:c3:
         06:04:e8:d4:e4:9d:44:b7:6d:4f:dc:bf:fb:31:ac:78:9f:9b:
         f3:42:47:e9:5a:78:9d:82:03:2a:64:ec:8a:e9:9d:64:f3:34:
         84:19:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org