Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/d956c7a8f3e37d7d55f8c5a3abc38aec8e1a9439.roa
File:                     d956c7a8f3e37d7d55f8c5a3abc38aec8e1a9439.roa (raw, json)
Hash identifier:          6DDKKvWyDHAWKo0wIH3rOEuuLCPLiYbgOvB2xn2WaQs=
Subject key identifier:   F1:25:F7:00:C4:19:79:DD:14:CE:C6:C2:C4:C2:50:BA:4A:76:99:78
Certificate issuer:       /CN=098bd67d41529269ed3f8480514d1dc399560651
Certificate serial:       015B00
Authority key identifier: D1:4E:AD:7A:D8:EE:39:C8:B6:11:49:1F:7C:11:B8:AD:67:68:FA:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/098bd67d41529269ed3f8480514d1dc399560651.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/d956c7a8f3e37d7d55f8c5a3abc38aec8e1a9439.roa
Signing time:             Thu 19 Oct 2023 19:05:15 +0000
ROA not before:           Thu 19 Oct 2023 19:05:15 +0000
ROA not after:            Sun 19 Oct 2025 19:05:15 +0000
asID:                     52396
IP address blocks:        166.75.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88832 (0x15b00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098bd67d41529269ed3f8480514d1dc399560651
        Validity
            Not Before: Oct 19 19:05:15 2023 GMT
            Not After : Oct 19 19:05:15 2025 GMT
        Subject: CN=d956c7a8f3e37d7d55f8c5a3abc38aec8e1a9439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:c2:15:2c:a2:c0:a3:d3:fa:bc:c7:77:04:
                    b7:9e:be:89:44:7f:c0:76:48:c6:b9:ad:f9:bc:49:
                    40:05:bb:5c:e4:f8:3d:19:32:f0:38:e5:16:4e:9a:
                    60:36:1b:d8:cd:72:54:6f:d5:c8:56:1c:49:6e:5b:
                    ac:55:82:ec:89:e0:68:b0:03:6f:af:59:65:93:e7:
                    34:3d:99:30:dd:cb:11:7f:21:d4:83:d8:16:a3:60:
                    8e:31:f6:bf:6d:0b:84:24:2c:7a:9d:d2:c5:0f:03:
                    fd:d2:a7:77:0d:0f:c7:45:52:a8:42:ef:ff:0d:db:
                    dd:23:0c:de:49:a6:c1:58:31:c2:50:1e:9c:f4:60:
                    f5:f9:31:8b:f7:46:ab:2a:ad:15:21:94:25:f9:c1:
                    c2:aa:da:de:a9:58:9a:4d:7e:a7:33:b9:87:9d:25:
                    64:f5:f7:2e:da:43:22:14:dc:96:d2:03:11:b1:d3:
                    47:00:83:b4:dc:5e:13:65:12:c1:55:49:09:33:e5:
                    21:a3:d9:ca:75:10:ab:d9:dc:0d:06:e8:da:91:b4:
                    91:2a:79:84:99:25:ae:f8:78:6e:e9:1b:10:73:17:
                    b3:8a:41:54:c9:8f:51:9b:fa:69:12:bd:c6:ff:88:
                    61:ca:bf:e9:7a:7e:ab:3b:72:db:dd:90:9d:79:60:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:25:F7:00:C4:19:79:DD:14:CE:C6:C2:C4:C2:50:BA:4A:76:99:78
            X509v3 Authority Key Identifier:
                keyid:D1:4E:AD:7A:D8:EE:39:C8:B6:11:49:1F:7C:11:B8:AD:67:68:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/098bd67d41529269ed3f8480514d1dc399560651.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/d956c7a8f3e37d7d55f8c5a3abc38aec8e1a9439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/098bd67d41529269ed3f8480514d1dc399560651.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.75.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:f1:62:5d:c4:ea:d6:f1:72:50:a5:cf:46:dc:a9:d9:25:7e:
         f6:07:34:99:25:e1:41:c1:55:a0:31:6b:ff:26:ad:15:19:a5:
         01:76:a2:db:0f:50:15:2c:98:bb:d5:cf:62:65:16:70:16:01:
         14:92:91:47:4d:f0:74:d8:84:b3:1f:a2:a0:da:5e:8f:e3:59:
         ee:26:1f:09:9a:0a:08:b0:c2:c5:e1:48:1c:ed:8b:59:dd:64:
         59:18:25:f4:2b:b1:a0:b4:03:e0:c8:30:c1:18:ed:7e:06:59:
         96:8a:46:f0:52:4a:be:6f:6b:60:2e:51:9c:f5:3b:b1:66:08:
         4f:95:49:c2:5a:54:d8:37:38:00:33:a8:a6:45:4b:13:16:87:
         4f:15:db:71:d2:89:75:d3:4b:47:56:21:46:98:9d:1e:c5:4b:
         79:4b:cb:c0:3c:01:3a:3a:55:c4:55:65:ae:e2:3b:64:c0:bf:
         f2:e1:f7:60:4a:d0:db:41:fb:fe:ce:2d:bd:ef:59:19:d3:b8:
         49:35:c1:bb:88:e8:81:49:dd:ca:6b:a6:52:9c:7a:71:45:ca:
         97:f2:ae:8f:50:7f:09:65:59:ad:94:be:c5:43:81:d7:17:bd:
         0a:14:8f:da:d6:7b:9c:b3:7b:40:b5:3b:dd:bd:82:a5:c6:29:
         6c:37:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org