Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/96375bfbef92875ea26e2fe773516a45c57f959e.roa
File:                     96375bfbef92875ea26e2fe773516a45c57f959e.roa (raw, json)
Hash identifier:          Zrqure1y8ZGkuQCKYRCIrzElebRlP1/Mxasj8N8XVsw=
Subject key identifier:   E9:77:37:B9:C6:C2:9B:7A:DB:7B:9E:23:60:A2:AB:3F:A5:FB:A5:D6
Certificate issuer:       /CN=697f7b62a9effacb2f280acd01e6e06384827e4d
Certificate serial:       0D2AB9
Authority key identifier: B4:2B:DF:40:82:FA:C1:81:C2:46:57:25:EE:17:B7:E7:E0:7A:06:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/697f7b62a9effacb2f280acd01e6e06384827e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/96375bfbef92875ea26e2fe773516a45c57f959e.roa
Signing time:             Wed 24 Mar 2021 14:39:25 +0000
ROA not before:           Wed 24 Mar 2021 14:39:25 +0000
ROA not after:            Tue 24 Mar 2026 14:39:25 +0000
asID:                     262212
IP address blocks:        192.188.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862905 (0xd2ab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697f7b62a9effacb2f280acd01e6e06384827e4d
        Validity
            Not Before: Mar 24 14:39:25 2021 GMT
            Not After : Mar 24 14:39:25 2026 GMT
        Subject: CN=96375bfbef92875ea26e2fe773516a45c57f959e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:d2:2c:d8:3f:a0:41:a8:23:33:6f:3d:f1:
                    57:1c:18:da:c9:c9:76:37:38:7d:fb:99:8e:7e:d9:
                    92:87:cb:dc:8e:83:4a:28:e7:af:d1:32:bc:8f:c7:
                    bf:24:9d:5d:1e:51:9d:e6:2e:5a:ea:71:cd:7f:7f:
                    89:11:a1:40:92:07:1a:52:f0:e9:df:61:8a:94:8e:
                    3b:44:18:52:b3:29:69:be:7c:c5:b8:b6:5e:37:18:
                    cd:09:0a:fd:44:19:d0:f7:22:47:cc:f0:d3:c7:fc:
                    a7:48:c2:bd:93:5b:47:cc:cc:15:04:17:a1:0a:88:
                    60:0b:09:74:bc:f1:e7:d6:7d:d0:3b:82:ab:ad:a6:
                    37:63:b5:3f:1e:8b:c9:41:5a:f1:00:2e:b6:3f:0a:
                    86:d5:c5:1b:c4:88:c3:27:a7:63:4b:9f:e5:8b:bb:
                    91:69:5d:8d:f7:98:80:06:fd:ee:1a:99:93:ac:72:
                    28:bf:4b:fc:34:f5:cc:43:e0:7d:c8:1c:87:0f:9e:
                    9a:e7:63:3d:9b:73:86:c2:6b:8e:87:fd:57:e8:8f:
                    6e:b5:e4:e4:1a:97:43:5a:f4:e2:a1:5d:88:9b:53:
                    75:85:2f:76:44:59:bc:85:77:04:6a:97:df:9e:ae:
                    25:60:01:84:16:21:5e:ca:11:92:56:8e:62:b2:c7:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:77:37:B9:C6:C2:9B:7A:DB:7B:9E:23:60:A2:AB:3F:A5:FB:A5:D6
            X509v3 Authority Key Identifier:
                keyid:B4:2B:DF:40:82:FA:C1:81:C2:46:57:25:EE:17:B7:E7:E0:7A:06:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/697f7b62a9effacb2f280acd01e6e06384827e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/96375bfbef92875ea26e2fe773516a45c57f959e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/697f7b62a9effacb2f280acd01e6e06384827e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:cf:6c:34:5b:52:91:c8:1d:b2:11:c2:64:4e:20:8f:02:ba:
         d2:09:09:d8:5d:44:ab:60:4d:99:6a:10:39:c8:d1:43:4c:71:
         8a:37:f9:74:24:21:d5:57:d8:8f:94:04:cd:a3:c6:d8:bf:ba:
         13:35:0f:35:44:ea:a3:16:b9:28:b0:89:de:88:68:79:fe:8b:
         73:ac:df:47:ab:7c:f7:85:71:b2:cf:9f:15:5e:9b:91:f8:4d:
         f3:ea:6d:1f:57:f9:ab:a0:af:75:3b:58:c7:66:4b:0a:80:00:
         94:50:62:dc:41:37:9f:05:b3:fd:97:5d:3f:39:f6:5c:38:d1:
         91:07:93:7e:63:26:13:aa:ad:99:eb:b4:28:ca:55:61:9e:72:
         91:36:57:d4:d5:96:f5:41:a8:2d:13:f7:53:d5:29:dc:1b:ef:
         1e:9a:2d:99:ca:df:50:7f:92:9c:2d:9a:56:3a:ac:a0:31:0e:
         1c:09:fa:66:d8:04:a3:88:82:a1:e6:1d:b7:5f:26:2d:86:46:
         d4:d1:7b:e4:09:1e:b7:b1:e5:44:a5:b3:9e:32:23:aa:f8:ee:
         be:85:7d:d1:33:01:a8:0c:34:65:38:fa:db:58:83:61:b4:72:
         84:68:67:94:d7:bb:01:a7:dc:39:69:f3:39:2c:62:15:c5:01:
         d5:50:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-ams.rpki-client.org