Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ffbdfc99dd93ffdedc86b4424153358bc4cd9537.roa
File:                     ffbdfc99dd93ffdedc86b4424153358bc4cd9537.roa (raw, json)
Hash identifier:          fLKNdFjgdGGPtJa5MfYrtjdp5w2ixGGt/67ImPXzjfE=
Subject key identifier:   0B:53:E6:FB:68:8C:F3:C6:0C:18:E2:BB:EE:26:22:11:4E:78:06:85
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       23DC06
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ffbdfc99dd93ffdedc86b4424153358bc4cd9537.roa
Signing time:             Tue 11 Jul 2023 17:10:53 +0000
ROA not before:           Mon 10 Jul 2023 17:10:53 +0000
ROA not after:            Fri 11 Jul 2025 17:10:53 +0000
asID:                     28075
IP address blocks:        198.12.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350086 (0x23dc06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Jul 10 17:10:53 2023 GMT
            Not After : Jul 11 17:10:53 2025 GMT
        Subject: CN=ffbdfc99dd93ffdedc86b4424153358bc4cd9537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:52:12:d7:5e:0d:4d:fa:ee:44:70:14:4c:
                    40:75:5e:cf:f6:3c:a4:a2:ba:38:d7:6e:31:78:93:
                    b9:cb:44:67:4f:41:89:83:4b:e0:10:b4:ff:b7:35:
                    b4:f5:a0:c0:44:ff:7d:4e:a2:42:60:f8:a7:ea:e0:
                    f8:c1:f3:b4:2f:be:4b:f2:ba:72:93:c0:01:e6:0c:
                    4d:e1:f4:f5:15:ea:dc:07:46:14:de:18:17:83:18:
                    a3:5a:78:60:36:26:72:c9:fa:52:d1:45:11:15:6b:
                    95:eb:24:a7:49:65:11:87:49:b8:07:f1:bb:19:19:
                    4d:60:b2:af:b2:6b:4b:79:ae:b2:a4:e9:7f:e3:d6:
                    a4:d7:0f:40:70:71:c9:4b:8b:98:18:f2:67:dd:5e:
                    7f:5b:5e:db:ab:42:02:08:5c:47:c5:11:27:2d:04:
                    6a:0c:0f:f4:83:cf:b1:83:f3:1f:01:84:dd:57:4f:
                    fd:bd:11:65:ac:8c:00:80:68:a1:b2:10:fc:ba:91:
                    56:bf:7d:93:1a:9a:95:1a:8c:db:14:ae:61:9b:2c:
                    72:53:8c:be:d0:17:1f:bf:2f:a0:a6:7a:8c:b6:8f:
                    8e:de:d6:f0:53:9b:b4:f3:dd:c2:ee:d6:be:d2:a4:
                    d6:36:91:9d:07:43:ff:14:a1:40:52:f6:ed:77:4d:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:E6:FB:68:8C:F3:C6:0C:18:E2:BB:EE:26:22:11:4E:78:06:85
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ffbdfc99dd93ffdedc86b4424153358bc4cd9537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:dc:65:db:2d:e8:22:d8:8b:ca:f9:c5:10:36:ec:cc:a7:
         6b:46:f7:2e:f5:1e:7d:9c:50:8c:3f:a9:f4:22:ee:8f:8c:c1:
         9e:8c:f8:dd:8a:6c:4a:fd:7e:8e:c4:87:13:f0:63:06:8d:5a:
         a8:da:82:59:29:b9:52:80:6f:e6:6e:d9:1e:98:a7:0c:3c:d9:
         fb:1b:25:a4:38:e7:26:13:1e:78:3d:de:95:ff:66:cb:4c:0b:
         97:26:3d:4a:d9:8e:21:45:57:de:95:d9:5b:02:11:37:4d:31:
         cb:b5:fc:08:6f:ad:01:6d:7a:58:4c:4e:de:9e:da:eb:d2:29:
         9f:22:96:dd:f0:80:9d:9e:f9:6a:21:2b:bf:0b:d6:a6:fe:7b:
         20:23:49:41:66:32:ce:85:f8:f1:c0:7e:db:c8:43:d6:90:47:
         c5:b0:51:79:47:b3:c7:47:67:99:d1:b5:7c:5c:21:e0:4d:a6:
         1e:4f:c8:e9:3f:44:a6:e4:49:01:62:07:68:95:5a:df:33:5c:
         00:fe:fe:45:d0:a0:c3:80:6b:9f:87:93:8f:a1:9f:29:80:8d:
         f3:f9:38:3d:a7:7b:be:37:3e:64:a1:be:ed:de:dc:7e:33:20:
         ab:d1:e6:b6:b3:27:15:0b:35:fd:b9:a5:ee:2d:9f:18:82:a4:
         90:95:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org