Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa
File:                     3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          7KCJaDUv9Bgm5QPtS0OKl1d2pWLnLsCQj4gm/MCVL/4=
Subject key identifier:   28:04:81:50:F2:D3:7E:F9:07:81:F6:13:56:DC:BE:A5:9A:9B:D4:7A
Certificate issuer:       /CN=9C94A58A94636E064E4950C338D30E56C1D31CB2
Certificate serial:       35FEAE27289B1987F64345837F4DB8015C87994F
Authority key identifier: 9C:94:A5:8A:94:63:6E:06:4E:49:50:C3:38:D3:0E:56:C1:D3:1C:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C94A58A94636E064E4950C338D30E56C1D31CB2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 03:45:00 +0000
ROA not before:           Tue 17 Sep 2024 03:40:00 +0000
ROA not after:            Tue 16 Sep 2025 03:45:00 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fe:ae:27:28:9b:19:87:f6:43:45:83:7f:4d:b8:01:5c:87:99:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C94A58A94636E064E4950C338D30E56C1D31CB2
        Validity
            Not Before: Sep 17 03:40:00 2024 GMT
            Not After : Sep 16 03:45:00 2025 GMT
        Subject: CN=28048150F2D37EF90781F61356DCBEA59A9BD47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3d:fc:a9:09:c9:1e:5d:5e:bd:86:ce:f4:f4:
                    be:7a:04:a3:91:8c:69:d4:91:64:d8:df:e0:26:a6:
                    11:9a:2b:81:15:47:b6:df:99:2c:5a:14:fe:35:ab:
                    79:3b:32:7e:3b:50:10:f4:85:00:ca:38:06:c5:25:
                    48:81:88:8b:b2:76:fa:09:0c:40:d8:19:af:4a:60:
                    3a:fd:0d:91:99:47:4d:dd:1f:8b:92:a7:b7:7e:67:
                    3f:41:9e:af:09:7d:e1:bd:7a:e7:8d:04:83:3f:93:
                    4c:14:c7:dc:f5:cd:68:70:d0:19:9e:a5:e2:39:9b:
                    ee:43:9e:38:96:84:88:61:71:35:ee:9a:6a:eb:62:
                    34:d0:71:49:11:e5:21:c9:28:88:0b:b3:73:1e:d1:
                    32:06:68:09:95:82:13:37:75:6b:43:96:9c:30:d8:
                    b5:65:1f:75:06:90:7e:10:4b:b7:ee:79:99:da:d3:
                    0c:a5:c3:d6:f1:66:07:87:f1:fe:b7:8c:2e:d3:91:
                    87:55:1f:ab:88:17:2d:86:5d:4f:6d:8b:ee:88:0a:
                    7b:3e:95:d8:e2:9a:d7:b2:8b:35:fc:78:4a:8b:90:
                    b0:65:aa:78:3d:40:b1:d5:ac:a6:e5:6e:96:1a:db:
                    aa:d4:73:96:1e:f7:91:45:ec:4f:f3:f3:ac:65:2e:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:81:50:F2:D3:7E:F9:07:81:F6:13:56:DC:BE:A5:9A:9B:D4:7A
            X509v3 Authority Key Identifier:
                keyid:9C:94:A5:8A:94:63:6E:06:4E:49:50:C3:38:D3:0E:56:C1:D3:1C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9C94A58A94636E064E4950C338D30E56C1D31CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C94A58A94636E064E4950C338D30E56C1D31CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:bc:09:54:cf:83:15:69:d2:a7:5c:db:39:f3:af:3a:84:
         85:f5:b9:b4:e6:07:d7:86:d1:e4:b3:af:26:04:c9:55:5c:2d:
         9c:a9:10:f1:2a:ff:55:2f:94:c9:be:f9:6b:93:fd:2c:79:62:
         76:ae:37:b1:fc:aa:89:55:89:70:3f:d0:81:1d:df:58:ea:07:
         ae:d7:94:6c:9b:8c:6d:79:80:af:ea:be:86:a9:96:c0:36:bc:
         ca:f1:91:ef:30:da:28:c4:b8:d5:59:1c:00:50:89:65:ac:a0:
         e0:e6:c6:2d:21:bf:b6:ce:12:1d:ab:13:79:e7:16:24:fa:df:
         2f:60:62:a1:9e:01:db:17:82:51:02:03:73:c7:7e:bd:31:9b:
         19:12:20:75:c7:08:d1:0a:f3:43:f3:4a:e3:4d:f7:50:09:74:
         b8:df:d6:83:6c:60:af:15:73:36:aa:d0:2c:ab:46:5c:c8:ee:
         34:f5:9c:a1:29:25:89:c4:e5:73:a6:e3:bb:82:6d:57:25:f0:
         d7:7a:33:7e:11:8c:1d:bb:6d:99:87:72:78:3f:ce:6f:cc:75:
         da:68:9f:8c:50:a8:32:3a:67:25:0f:16:7c:16:ed:3f:03:41:
         ec:ce:a6:f4:af:a6:35:f4:e8:36:32:8e:8a:7f:d3:df:9e:8a:
         84:b2:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 19:07:41 2024 by rpki-client on console-fra.rpki-client.org