Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/d057db76b6ad7220b92537a3fd7a8421661ea9e4.roa
File:                     d057db76b6ad7220b92537a3fd7a8421661ea9e4.roa (raw, json)
Hash identifier:          oQzNBWeK6iapVnHNvQs77L+7zsEjZ9LWK2kJ99cfcSg=
Subject key identifier:   5C:1D:02:9F:A8:9C:44:9D:06:DB:BD:0E:A3:DC:05:D9:43:24:76:1C
Certificate issuer:       /CN=c355af2587e04fcb2db519de3ca0af885d613b77
Certificate serial:       23F768
Authority key identifier: BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/d057db76b6ad7220b92537a3fd7a8421661ea9e4.roa
Signing time:             Mon 02 Oct 2023 18:28:44 +0000
ROA not before:           Sun 01 Oct 2023 18:28:43 +0000
ROA not after:            Thu 02 Oct 2025 19:28:43 +0000
asID:                     1
IP address blocks:        168.227.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2357096 (0x23f768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c355af2587e04fcb2db519de3ca0af885d613b77
        Validity
            Not Before: Oct  1 18:28:43 2023 GMT
            Not After : Oct  2 19:28:43 2025 GMT
        Subject: CN=d057db76b6ad7220b92537a3fd7a8421661ea9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d4:4c:a8:90:5b:97:12:e7:50:d5:2a:38:bd:
                    66:58:28:fe:8b:eb:1a:ff:51:f9:5b:d2:04:99:d5:
                    b5:c1:18:5e:be:fb:6e:73:39:3e:8a:9b:5b:79:5d:
                    40:61:6d:76:59:e5:fe:94:f7:1b:81:e7:27:6f:5f:
                    b6:89:86:5f:47:9a:64:05:9f:63:f2:eb:bb:0f:d7:
                    2e:0c:60:af:14:70:25:60:e6:44:e5:50:f0:fc:af:
                    6b:82:15:92:5d:86:9b:53:79:4b:9f:6b:8d:21:2e:
                    8a:4f:b4:d4:35:bd:ac:e4:ac:55:ac:08:77:cf:97:
                    a5:e7:cc:25:e2:61:3f:fa:c1:c2:06:8b:16:ad:ca:
                    51:47:c0:b3:ef:64:40:b2:e5:63:02:41:40:2a:0b:
                    53:70:e5:90:8f:33:68:ee:47:49:5a:70:b3:c2:9b:
                    62:6e:b1:ca:ba:7f:dc:09:88:5f:32:5c:fa:b9:7a:
                    f2:3c:a1:d0:91:38:14:3e:51:f5:56:fe:dc:5e:58:
                    98:82:fd:0c:2c:e6:a6:30:24:35:3f:cf:4e:f5:ee:
                    68:47:80:eb:39:a2:9a:25:2b:bb:8e:8d:27:18:23:
                    63:ab:3e:7d:01:90:4d:32:da:0f:5c:5d:2e:20:5d:
                    7b:09:8c:7d:2c:57:30:b9:2e:4c:3f:11:01:94:36:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1D:02:9F:A8:9C:44:9D:06:DB:BD:0E:A3:DC:05:D9:43:24:76:1C
            X509v3 Authority Key Identifier:
                keyid:BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/d057db76b6ad7220b92537a3fd7a8421661ea9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:80:e5:a0:67:5a:6f:8d:3c:41:b0:4a:52:38:80:67:ed:
         79:4e:e1:b7:28:05:ff:a5:e3:5f:ea:ba:f5:15:7f:ea:3e:9e:
         d8:a7:23:a6:e3:af:c1:f9:b2:27:54:87:c8:a5:de:35:db:25:
         51:f2:a7:11:4c:f3:3f:ca:ef:e8:2d:fa:4d:c0:9a:6a:7b:81:
         d8:51:43:28:17:3d:30:2c:18:dd:82:00:c5:02:11:f9:11:7e:
         94:b2:b2:ec:e1:02:00:c1:82:cd:42:7b:77:6b:f3:d1:3f:0a:
         12:71:1c:82:38:6f:7f:31:69:14:b2:67:c5:77:4d:b5:ec:59:
         04:72:7d:2f:13:a2:3f:b0:b2:79:65:53:91:38:ac:c3:12:05:
         c5:13:83:bf:f6:54:a6:89:5a:91:3a:b3:f6:64:1f:1c:de:b4:
         5a:11:7c:4f:96:86:30:eb:e3:34:48:c6:6e:5b:f1:5b:fc:e2:
         cb:bc:86:4c:43:cb:d7:d3:98:44:cf:2d:02:b1:21:05:57:3e:
         c9:47:0d:fd:3e:f4:37:38:78:7f:9c:ba:c7:4f:9e:d2:59:b2:
         09:e0:cc:7f:0d:63:8b:fc:90:d4:82:88:d4:b2:d2:1c:21:56:
         ea:c2:f0:a7:f7:65:fb:c6:28:4d:a3:61:50:ce:28:b2:a2:87:
         c7:e2:aa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org