Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d53d95c3400d5d1d643af0bda2819c092fb5da.roa
File:                     83d53d95c3400d5d1d643af0bda2819c092fb5da.roa (raw, json)
Hash identifier:          obIgSN+CTkUm5mApYx8uXcpO6GYFmjXN/MjX2eZlsKg=
Subject key identifier:   31:09:59:43:64:4D:5E:15:A4:FE:92:13:20:F3:ED:7E:6E:90:7C:FF
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       1EF1D8
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d53d95c3400d5d1d643af0bda2819c092fb5da.roa
Signing time:             Fri 20 Jan 2023 17:45:14 +0000
ROA not before:           Thu 19 Jan 2023 17:45:07 +0000
ROA not after:            Mon 20 Jan 2025 17:45:07 +0000
asID:                     61452
IP address blocks:        198.12.41.0/24 maxlen: 24
                          198.12.42.0/24 maxlen: 24
                          198.12.59.0/24 maxlen: 24
                          198.12.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027992 (0x1ef1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Jan 19 17:45:07 2023 GMT
            Not After : Jan 20 17:45:07 2025 GMT
        Subject: CN=83d53d95c3400d5d1d643af0bda2819c092fb5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:f0:d4:9f:ea:13:98:0b:2b:c7:bf:9e:b7:
                    30:2c:dd:82:7b:8d:ab:50:62:5c:10:8f:9c:24:1e:
                    0d:6d:0b:18:5f:de:04:33:62:49:7b:d5:87:6b:31:
                    8c:47:8c:54:02:9f:de:c3:25:5b:23:3b:55:44:64:
                    e2:44:58:c3:83:2e:85:cd:90:d7:e7:17:c7:a7:09:
                    1c:a0:7c:b9:98:d2:ca:3d:22:40:7c:3b:f2:22:4b:
                    61:04:64:14:4a:b5:7f:47:40:f6:92:ed:bd:20:03:
                    a9:4d:62:d8:64:07:9f:e9:9b:21:2c:bc:53:80:f1:
                    fa:f2:6c:64:ef:5c:98:bc:f8:64:e2:6c:dc:d6:5b:
                    4a:67:56:75:56:88:42:91:e5:01:7c:15:ee:f5:18:
                    bb:d5:b8:94:b5:6b:78:0f:83:b5:81:5a:36:e1:ba:
                    71:d8:56:b9:b2:53:5f:33:26:c6:9f:21:5e:6f:3b:
                    58:8c:85:59:fa:a5:55:08:2f:fd:8a:4c:03:0f:75:
                    a0:88:73:90:08:80:ee:f3:8d:75:b6:8f:19:69:69:
                    9c:32:59:f2:82:a6:fb:c1:ea:98:61:a9:be:95:bf:
                    9c:15:af:c4:4a:f2:17:6d:f5:58:bd:3d:33:f1:4a:
                    c9:e5:d0:dc:36:32:e9:eb:92:e5:b7:bc:fb:db:96:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:59:43:64:4D:5E:15:A4:FE:92:13:20:F3:ED:7E:6E:90:7C:FF
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d53d95c3400d5d1d643af0bda2819c092fb5da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.41.0-198.12.42.255
                  198.12.59.0/24
                  198.12.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:78:bc:a0:61:1a:2f:69:d5:f7:1f:7f:80:7f:ac:bd:ad:d5:
         94:d8:d8:f5:16:e0:da:9d:cb:69:30:2e:07:3d:32:9d:fc:e1:
         9c:33:55:5c:7e:7a:4b:23:2b:23:0e:0f:88:cf:2f:aa:c9:26:
         4e:91:5e:14:b2:ed:4a:bb:a6:76:c5:95:ef:13:24:bb:8e:0f:
         a1:c1:36:c3:1f:ba:e9:d7:8d:74:53:41:78:91:4f:b0:80:c1:
         f2:fe:c3:66:99:b8:ba:6a:3e:14:c6:01:3a:74:77:fa:18:91:
         ca:5b:82:a5:f0:22:69:08:a3:b4:b4:fa:00:16:07:e9:ac:08:
         65:b9:42:de:e6:e6:d4:e7:bb:dd:ab:b2:62:79:ed:32:57:d2:
         4e:0e:1a:95:fd:d8:fa:0d:02:52:f4:d7:6d:6b:75:29:fd:60:
         a2:a5:bc:22:ac:03:2d:ae:60:21:10:6b:05:ea:ef:65:29:0f:
         0e:37:a4:07:3c:b5:c1:da:d8:48:86:74:f3:ff:bc:c8:2a:43:
         6a:73:5d:62:34:d3:27:93:96:5b:6a:c3:3a:89:32:bf:4d:56:
         c7:81:a9:87:4a:98:15:c9:88:45:c4:b7:eb:18:ba:c6:e7:61:
         63:a5:84:88:10:5c:05:9f:67:a8:76:be:b7:d3:46:93:e9:0c:
         32:fd:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org