Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/5caa14c8bdaabb422269decea25f52bef72e056a.roa
File:                     5caa14c8bdaabb422269decea25f52bef72e056a.roa (raw, json)
Hash identifier:          2EH6tGx0sv7RBx5MDIKuk+wFW3QIvK3o0mrQPmlAEPs=
Subject key identifier:   8A:66:EF:4D:26:BD:EC:DF:F6:C8:28:6B:2D:F0:45:0C:CB:29:C2:B6
Certificate issuer:       /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial:       16A5
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/5caa14c8bdaabb422269decea25f52bef72e056a.roa
Signing time:             Tue 27 Jun 2023 19:30:39 +0000
ROA not before:           Mon 26 Jun 2023 19:30:39 +0000
ROA not after:            Fri 27 Jun 2025 19:30:39 +0000
asID:                     28067
IP address blocks:        64.28.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5797 (0x16a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
        Validity
            Not Before: Jun 26 19:30:39 2023 GMT
            Not After : Jun 27 19:30:39 2025 GMT
        Subject: CN=5caa14c8bdaabb422269decea25f52bef72e056a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:f3:5f:6f:9a:bb:30:b1:01:6a:a7:aa:78:
                    62:25:c2:c3:a7:4e:bd:82:ca:d4:1d:fd:a9:e2:90:
                    4a:5f:c7:07:19:89:9b:77:19:53:e6:61:b2:d5:80:
                    47:a6:5a:2b:eb:bc:4c:ed:2a:73:a0:75:dc:fd:9a:
                    5f:5a:4a:35:0f:1a:84:4e:0e:3f:fe:ce:e4:50:f7:
                    78:33:ac:2a:94:16:08:94:27:e3:1b:1c:3e:ad:7e:
                    d2:c5:8a:38:90:f6:5f:a6:08:9c:48:9e:6a:00:a5:
                    08:e6:6f:ff:a5:59:40:81:73:ef:5d:55:cd:a6:5c:
                    1d:cc:a0:c8:dc:cb:86:ec:4e:6c:f5:fc:60:28:62:
                    26:cf:b3:a8:0b:72:69:78:57:36:08:96:c3:35:30:
                    20:47:2e:1e:1c:fc:81:ba:e3:1d:92:d1:51:b2:e3:
                    10:70:0d:68:e4:3a:77:0f:4a:bb:67:95:d9:e9:87:
                    11:e7:0b:fd:8d:f5:32:26:df:13:41:b3:44:ea:94:
                    50:cf:ed:11:03:70:ea:c6:45:4a:3d:c6:1a:65:17:
                    31:52:15:41:15:ff:50:48:bf:53:ca:24:c9:d6:72:
                    cc:48:59:a8:9a:34:b1:d6:cc:c7:40:4f:0d:ce:be:
                    1d:0b:fe:52:6b:de:73:15:c1:3b:a6:4a:f0:48:a8:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:66:EF:4D:26:BD:EC:DF:F6:C8:28:6B:2D:F0:45:0C:CB:29:C2:B6
            X509v3 Authority Key Identifier:
                keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/5caa14c8bdaabb422269decea25f52bef72e056a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:01:ee:a5:3b:02:a5:e4:52:5a:00:7b:c3:ec:5d:17:5c:
         f9:f6:15:c4:0e:7f:99:e3:9f:3e:99:7d:63:16:c2:54:21:89:
         8b:72:04:b8:ed:d1:70:1f:77:a1:4e:68:92:c4:07:05:b5:63:
         5f:7f:cc:32:d0:73:60:ed:fc:1c:33:90:31:ef:94:5e:6a:01:
         4b:22:10:69:28:63:9f:31:c7:40:74:9e:12:1b:16:e4:d8:4c:
         c0:b8:0d:00:68:60:fa:36:89:f3:32:b3:ae:81:e7:40:2e:ec:
         47:35:67:2d:f9:b7:24:a0:32:9d:a8:37:8f:c2:03:bb:44:eb:
         9b:53:6d:7a:8e:08:c0:bf:f0:c4:3b:53:2d:9c:8a:2c:52:4d:
         9c:d8:1f:71:86:f6:16:14:68:f9:54:cf:43:c4:6e:1a:86:0d:
         99:21:4e:2c:10:b7:00:81:65:44:1a:51:7c:34:62:55:20:d9:
         83:fc:f4:8f:d1:8a:75:6c:65:e1:e0:96:41:cf:ac:54:16:d2:
         1a:bd:05:48:5f:a2:ee:a8:88:6f:84:0d:01:5d:00:24:44:44:
         ce:6c:00:83:a0:f8:96:b8:81:58:6f:6b:d5:57:15:29:fb:ea:
         89:39:53:52:3b:39:ce:d3:db:e3:c8:79:7e:9b:65:ed:64:b0:
         3e:63:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org