Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/5ba69aaf132a24936119a721d6ca452a003c65c7.roa
File:                     5ba69aaf132a24936119a721d6ca452a003c65c7.roa (raw, json)
Hash identifier:          5G8Nomj9hMpXTHcevJ0cihWx4HtIPlv6mcgv5+lT2P0=
Subject key identifier:   19:77:A4:75:E0:30:34:02:DE:AD:76:5E:1E:4B:F5:0A:A1:01:76:88
Certificate issuer:       /CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
Certificate serial:       1204B4
Authority key identifier: E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/5ba69aaf132a24936119a721d6ca452a003c65c7.roa
Signing time:             Tue 30 May 2023 14:15:41 +0000
ROA not before:           Mon 29 May 2023 14:15:41 +0000
ROA not after:            Fri 30 May 2025 14:15:41 +0000
asID:                     264758
IP address blocks:        168.196.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180852 (0x1204b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
        Validity
            Not Before: May 29 14:15:41 2023 GMT
            Not After : May 30 14:15:41 2025 GMT
        Subject: CN=5ba69aaf132a24936119a721d6ca452a003c65c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b0:66:3e:4a:73:34:76:78:42:8c:49:98:a6:
                    bd:0b:cb:e0:a4:eb:3d:db:e5:d0:c4:48:1c:b4:87:
                    7d:95:e2:34:8e:98:de:b0:17:84:ae:33:d2:b6:b0:
                    43:a9:3a:04:c7:7a:30:c4:b6:ee:db:28:ec:50:c2:
                    c1:4e:c9:a5:72:da:62:48:eb:40:2a:81:cd:33:04:
                    23:d4:7d:43:30:65:72:7b:6f:3b:15:8c:ca:b8:03:
                    7e:3e:2d:d8:3f:fa:08:e9:70:45:f3:8a:9c:31:37:
                    2c:77:ef:d7:26:3a:0f:a4:60:58:45:31:89:85:48:
                    63:42:af:c4:99:62:ca:a9:ea:07:ad:b2:17:60:6f:
                    28:f4:c8:34:4a:94:10:a8:31:5a:98:93:a6:17:dd:
                    18:ff:b6:da:f1:83:80:08:e2:db:14:ec:03:81:d8:
                    a6:e7:e2:36:ee:00:9e:73:b6:77:86:e0:6c:3a:ee:
                    ed:fb:63:85:8c:38:e3:95:26:03:73:be:be:b5:fe:
                    f5:0b:66:da:1c:ca:12:02:3e:a7:92:c6:1c:ab:8f:
                    59:06:55:67:27:ab:17:fe:5f:ce:c7:53:01:b6:ab:
                    56:c1:fa:33:c9:97:d0:d9:02:55:1e:05:1d:be:fb:
                    f0:87:ac:9c:56:8d:68:0a:46:63:71:9d:ea:31:97:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:77:A4:75:E0:30:34:02:DE:AD:76:5E:1E:4B:F5:0A:A1:01:76:88
            X509v3 Authority Key Identifier:
                keyid:E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/5ba69aaf132a24936119a721d6ca452a003c65c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:40:86:7a:3a:ea:70:f3:d6:61:05:59:a3:b4:c8:41:e4:ed:
         4e:1a:61:bb:cc:3e:f1:a2:5e:6e:d4:38:43:9c:d1:47:6d:43:
         bf:3d:00:12:8c:2e:de:2f:ff:5c:69:60:2e:17:5c:33:ed:bd:
         01:01:6c:3d:bb:22:03:7c:b8:2e:bc:2c:85:56:0b:01:a5:00:
         db:db:61:22:b6:dc:39:fc:d7:fa:70:dd:b5:83:6c:e8:f6:e1:
         f6:95:7f:53:af:c9:cc:24:61:0a:d5:4b:48:17:fa:5c:22:ef:
         9e:e3:89:5f:96:99:15:9e:45:e8:2c:e7:6a:f9:f0:39:20:14:
         bb:66:82:79:f0:59:c9:62:48:bf:84:06:90:96:c4:8f:a7:e1:
         ac:40:20:2b:80:21:0a:90:5c:28:e8:b9:0c:4d:57:8e:19:84:
         55:cd:a1:ca:11:e4:4d:35:88:f9:2a:73:03:0a:3e:3f:53:56:
         d2:22:fc:a4:98:96:c3:75:2d:15:23:ad:a7:b1:ae:9a:9b:ef:
         b0:cd:0e:2b:fd:33:b2:4a:44:e3:d2:af:00:a3:e2:c0:cc:83:
         98:d9:cb:94:bf:f3:86:fc:41:ae:db:ce:f5:56:79:dd:b7:bf:
         43:11:ad:51:a6:76:9e:a8:60:c6:9d:54:09:8c:e0:d5:01:6a:
         ee:0b:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org