Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/65f7997deccde40d7ffa2fcea4a6cdceb5d08479.roa
File:                     65f7997deccde40d7ffa2fcea4a6cdceb5d08479.roa (raw, json)
Hash identifier:          6YwL78tpqcdVBbYp0Fy4DWTMkP/ivgu8WMGseERfLDA=
Subject key identifier:   21:A2:1D:E5:75:FB:5E:C8:59:36:F6:27:51:AD:AC:79:11:77:53:15
Certificate issuer:       /CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
Certificate serial:       12117A
Authority key identifier: E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/65f7997deccde40d7ffa2fcea4a6cdceb5d08479.roa
Signing time:             Wed 31 May 2023 21:35:41 +0000
ROA not before:           Tue 30 May 2023 21:35:41 +0000
ROA not after:            Sat 31 May 2025 21:35:41 +0000
asID:                     264758
IP address blocks:        168.196.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184122 (0x12117a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
        Validity
            Not Before: May 30 21:35:41 2023 GMT
            Not After : May 31 21:35:41 2025 GMT
        Subject: CN=65f7997deccde40d7ffa2fcea4a6cdceb5d08479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:35:40:37:33:bb:c0:cc:7b:6f:e9:f8:63:
                    53:92:77:bc:ee:5b:ea:1c:0d:23:c6:e3:35:7d:31:
                    91:ba:cb:e9:ad:f9:6e:65:6a:96:98:70:0e:1a:03:
                    87:94:5d:94:a4:00:07:86:43:de:b2:a3:52:f1:23:
                    6a:13:3a:a6:b1:a9:ee:41:be:2c:1a:8e:6f:e2:66:
                    c0:93:d3:db:16:84:f3:5b:fa:11:8a:79:9b:1d:48:
                    e6:39:a1:e4:c2:65:66:5d:ce:04:48:ec:43:64:f0:
                    8e:70:5d:68:e8:e3:6f:b7:d0:77:21:aa:2b:e9:5f:
                    61:59:d9:77:79:0e:02:81:27:ff:b1:05:7e:f3:ae:
                    52:e1:b5:20:fb:6f:8d:7a:79:b4:56:9e:0c:69:cb:
                    23:58:2c:19:29:b4:9f:4f:9f:d8:fb:de:45:00:ef:
                    8e:41:f7:7a:0f:e6:b3:7e:89:39:45:e5:54:70:df:
                    e4:fc:b7:71:2c:f1:8f:68:91:f1:33:43:a1:52:c9:
                    dc:bf:7c:7c:17:38:60:d0:80:e8:79:3b:28:f6:3b:
                    15:27:a1:58:b9:c0:37:ca:3e:07:0f:0a:9f:e9:b8:
                    60:b9:57:7c:47:ce:64:4a:6c:61:49:0e:4a:ff:83:
                    5a:09:46:b0:7c:70:cd:7a:c2:01:3b:dc:dd:2c:b3:
                    1e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A2:1D:E5:75:FB:5E:C8:59:36:F6:27:51:AD:AC:79:11:77:53:15
            X509v3 Authority Key Identifier:
                keyid:E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/65f7997deccde40d7ffa2fcea4a6cdceb5d08479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:72:9a:00:25:d0:ac:1d:cf:01:f2:fa:8e:e4:74:e4:20:4c:
         7f:71:4d:c4:12:e2:ca:42:c2:e5:fe:4a:82:99:e2:13:bb:dd:
         90:97:b8:31:3f:af:b8:22:39:bc:67:44:fa:47:23:13:dd:ce:
         cd:e0:99:bc:b6:15:e2:e2:e6:93:03:e2:1a:b4:ad:8c:ec:0a:
         13:5c:19:d1:26:9a:f8:b5:8d:cd:3c:2d:54:f3:79:58:2b:b1:
         a9:21:ce:1b:fb:67:94:66:84:c9:fa:8f:0c:82:3d:61:6c:7a:
         5a:db:71:31:66:19:8f:46:19:1a:12:f4:33:04:5a:ec:05:0e:
         de:33:ec:04:6d:3f:58:f1:c6:6c:87:40:79:22:f0:51:87:5c:
         46:bc:4a:47:70:7f:5c:2d:64:02:39:3a:e4:9b:30:aa:99:3e:
         13:97:06:ec:77:85:19:57:66:79:bb:1f:ef:c8:07:85:c8:ed:
         7f:54:f0:88:3f:08:8a:c3:81:2e:a4:7e:4b:4a:2e:8f:52:e9:
         7b:56:18:93:e2:7b:97:e8:88:07:7e:c9:d5:eb:61:f7:82:c3:
         c8:7e:3d:5b:c7:49:7a:e4:ba:ca:07:15:78:10:f4:c8:5e:67:
         4b:2f:48:d4:50:1c:d6:e3:51:63:14:7e:cc:19:85:b0:a8:32:
         1e:17:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org