Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/3cae7647155b7e1c3f62b90e197905ad28d50bb6.roa
File:                     3cae7647155b7e1c3f62b90e197905ad28d50bb6.roa (raw, json)
Hash identifier:          XZSwLOOSeUoQaMzUFL6sL1vFT2Qtk/5qowQtoZsDssQ=
Subject key identifier:   67:01:42:83:7B:18:7B:41:B3:78:AD:77:0B:20:C4:F4:92:12:C2:B5
Certificate issuer:       /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial:       1420
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/3cae7647155b7e1c3f62b90e197905ad28d50bb6.roa
Signing time:             Tue 27 Jun 2023 19:30:04 +0000
ROA not before:           Mon 26 Jun 2023 19:30:04 +0000
ROA not after:            Fri 27 Jun 2025 19:30:04 +0000
asID:                     28067
IP address blocks:        64.28.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5152 (0x1420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
        Validity
            Not Before: Jun 26 19:30:04 2023 GMT
            Not After : Jun 27 19:30:04 2025 GMT
        Subject: CN=3cae7647155b7e1c3f62b90e197905ad28d50bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:11:c5:e2:29:b1:e5:21:1c:0c:29:11:5c:
                    80:98:b5:71:6c:1b:2b:46:58:fb:0a:6c:71:8e:83:
                    97:3c:f1:0c:80:69:25:a2:40:d0:6b:58:9a:73:aa:
                    8f:4c:1c:4b:b9:52:b2:2b:44:52:06:89:7c:9f:ad:
                    1c:2d:08:db:ad:ec:d1:78:0e:fa:ad:f3:d7:6d:8f:
                    be:37:28:de:c3:70:60:42:2f:ba:64:11:d3:03:aa:
                    5a:8e:e0:d5:85:21:be:91:80:a7:70:d3:7e:54:97:
                    c2:67:42:24:f1:d1:59:9c:5a:c6:b2:aa:88:3e:dd:
                    6a:a0:10:20:79:1c:92:2e:ef:75:8e:7c:c0:46:c1:
                    98:06:7f:2f:dc:c6:c0:e2:8a:d5:de:53:09:fc:fb:
                    de:67:8b:97:b2:37:fb:9e:2e:3c:c9:4a:24:df:61:
                    2e:c7:6e:b0:6d:f9:31:74:d5:6b:46:96:48:f6:26:
                    e3:cc:ff:ea:40:8c:f8:e4:10:ab:d8:f9:5f:37:71:
                    77:5e:f0:c0:c1:a3:9f:fe:63:aa:3e:82:39:3d:76:
                    27:53:6b:ec:8e:97:59:40:3f:eb:82:1b:4c:16:e3:
                    ca:8e:c5:bc:9d:a8:03:9a:f9:53:a7:e5:7c:87:a5:
                    a7:4a:ef:a9:36:55:9a:04:e5:ea:74:a5:14:d3:c1:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:01:42:83:7B:18:7B:41:B3:78:AD:77:0B:20:C4:F4:92:12:C2:B5
            X509v3 Authority Key Identifier:
                keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/3cae7647155b7e1c3f62b90e197905ad28d50bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:a6:d4:35:7c:75:00:d4:11:31:96:81:3b:5f:86:ba:e5:
         fd:3e:c8:74:e3:ac:b2:9b:12:b8:75:ac:e6:cc:89:c4:9c:1d:
         12:b6:fd:ad:c4:29:96:8e:17:fb:5e:5b:ec:54:78:5b:df:88:
         bc:dc:16:48:22:4a:08:c5:83:25:bc:ce:3b:1e:34:c3:c3:16:
         d7:d0:dd:2c:9e:6d:19:d8:a4:f1:9f:3d:91:d8:7b:c3:ed:cc:
         25:22:8e:de:bb:2a:6d:72:30:72:c5:5d:3a:45:e0:d2:1d:9a:
         e4:37:96:5b:2c:d1:c5:6c:20:1d:8c:ac:63:3a:f8:42:f3:b7:
         f9:1d:35:4f:78:39:0a:c1:aa:5e:d1:5a:48:bc:fd:32:ac:a4:
         9b:fd:1d:71:21:66:d8:63:ec:9a:65:0f:11:e5:4e:d1:ae:62:
         cb:0d:a1:12:43:57:a3:19:5d:f0:f7:fd:b3:50:83:af:21:be:
         72:15:c5:fd:7f:5b:7a:62:ba:e8:92:b0:e1:2a:40:88:51:a6:
         12:ec:a0:17:15:48:78:25:b7:af:4a:c8:75:71:da:54:7d:b5:
         51:6c:a4:7f:fc:56:87:fa:ce:90:f5:da:dc:88:3d:0e:3b:4e:
         f0:77:a6:56:f0:17:0b:e8:50:76:bb:0f:b4:91:b3:24:42:9d:
         b8:da:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org