Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/ee6d2321547b8ef8ef4abd055f86e9e384ac737c.roa
File:                     ee6d2321547b8ef8ef4abd055f86e9e384ac737c.roa (raw, json)
Hash identifier:          ivHo+gI6+Z8nfF32iSKq0dwLWt/BucH0nSdzorZei6M=
Subject key identifier:   2E:1A:1D:F5:E9:59:BB:D5:62:E7:6A:8D:4B:43:F0:44:6B:F9:E5:43
Certificate issuer:       /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial:       1C48DE
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/ee6d2321547b8ef8ef4abd055f86e9e384ac737c.roa
Signing time:             Mon 05 Feb 2024 19:08:11 +0000
ROA not before:           Mon 05 Feb 2024 19:08:11 +0000
ROA not after:            Thu 05 Feb 2026 19:08:11 +0000
asID:                     262186
IP address blocks:        131.221.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853662 (0x1c48de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
        Validity
            Not Before: Feb  5 19:08:11 2024 GMT
            Not After : Feb  5 19:08:11 2026 GMT
        Subject: CN=ee6d2321547b8ef8ef4abd055f86e9e384ac737c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:ee:a0:22:d7:ce:77:fa:6e:80:a6:88:f4:
                    7c:68:11:54:fe:32:b7:13:c1:00:17:17:e9:93:55:
                    c0:b1:54:26:34:f2:4a:a1:a3:fd:8d:db:20:c2:77:
                    f6:b6:52:e6:37:6a:ff:83:75:7d:b9:8d:e7:fa:7d:
                    c5:ed:a3:09:37:be:c9:4d:00:23:0f:7c:cf:f9:70:
                    ff:2b:54:ae:7a:07:dd:a7:19:95:80:76:a5:35:09:
                    d5:68:5b:85:42:28:47:93:be:d9:57:b4:aa:26:ee:
                    fe:90:ed:ee:4b:03:56:5b:3d:0f:fd:35:8b:c4:29:
                    2f:b3:19:5c:40:c2:1a:97:f6:b6:36:ae:f6:b1:59:
                    79:11:73:5a:e9:d4:97:3c:21:49:c9:9c:a8:b6:7c:
                    a4:b4:86:30:5c:a4:b2:05:25:28:0c:6e:73:67:17:
                    7d:da:a6:85:f4:6f:1a:3a:0e:82:6c:70:f9:25:51:
                    c1:e3:6d:9c:58:5b:7f:13:1d:f1:df:73:60:65:e0:
                    4a:23:4b:ab:5a:a4:72:7f:97:93:7d:c4:d2:5b:92:
                    9f:67:39:51:a9:ca:f2:51:26:09:a0:19:b5:05:90:
                    84:06:c9:ac:c1:7c:6d:4a:44:3a:94:9c:09:8f:11:
                    59:5a:3e:69:79:93:8a:04:fc:26:16:f4:71:cf:7f:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1A:1D:F5:E9:59:BB:D5:62:E7:6A:8D:4B:43:F0:44:6B:F9:E5:43
            X509v3 Authority Key Identifier:
                keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/ee6d2321547b8ef8ef4abd055f86e9e384ac737c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:eb:3b:7c:ae:18:d0:34:46:dc:0d:34:39:bb:52:5d:8b:
         9d:46:bd:c6:da:3b:4d:ce:00:59:fd:88:56:07:73:8f:88:26:
         aa:0c:23:b7:77:50:b5:bf:27:7a:9f:ce:23:2b:52:a6:90:d2:
         d0:17:03:3f:cd:02:86:2a:63:05:63:07:40:76:fc:bb:db:53:
         30:a9:4e:cc:fb:7a:44:e2:23:62:05:ae:e8:8f:0d:0d:db:4e:
         61:2e:57:48:4c:f4:8d:20:e6:9f:24:d7:1e:41:21:d2:06:b7:
         b9:92:2e:43:86:4f:ba:58:54:63:52:a5:6c:c5:7c:73:95:34:
         d4:2e:4c:21:b2:13:f8:51:4c:74:12:1f:17:f2:b0:1b:ae:47:
         92:7c:ea:8e:84:48:ed:a4:ff:46:ba:49:1d:8a:d0:52:b9:cd:
         25:5d:3a:65:41:ac:f9:19:b5:01:3c:d7:1d:fd:34:e5:cd:17:
         7d:ea:2b:80:6f:9a:cd:2a:5d:1c:bd:33:93:79:ed:a9:33:f0:
         9f:89:1a:d8:8f:b4:fd:06:4e:d2:b1:5b:65:af:99:f4:dc:98:
         a8:79:b0:2e:17:1d:98:af:f2:91:b2:9d:be:74:ce:9b:b7:0a:
         cb:53:0b:1e:4e:31:f6:d0:86:8c:eb:46:b1:58:a0:f8:26:ff:
         2f:66:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org