Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/6ed254289232826864441bdbce0cfd86fa53176e.roa
File:                     6ed254289232826864441bdbce0cfd86fa53176e.roa (raw, json)
Hash identifier:          rESVayXck/uH3BJ5iPc+iPR1VcCsICNfTOXJyAcsdWc=
Subject key identifier:   57:EE:D4:45:34:FA:6B:50:DD:66:E1:E0:44:26:FF:8F:D0:29:71:3D
Certificate issuer:       /CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
Certificate serial:       20F3E0
Authority key identifier: 77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/6ed254289232826864441bdbce0cfd86fa53176e.roa
Signing time:             Sat 10 Jun 2023 18:43:22 +0000
ROA not before:           Fri 09 Jun 2023 18:43:22 +0000
ROA not after:            Tue 10 Jun 2025 18:43:22 +0000
asID:                     263766
IP address blocks:        131.196.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159584 (0x20f3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
        Validity
            Not Before: Jun  9 18:43:22 2023 GMT
            Not After : Jun 10 18:43:22 2025 GMT
        Subject: CN=6ed254289232826864441bdbce0cfd86fa53176e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:95:79:3f:2c:3e:6d:03:98:af:c6:23:d2:
                    d7:32:f9:15:f6:ca:19:09:60:63:83:cd:a9:6c:af:
                    cc:3e:cd:90:2f:b7:3d:21:b4:53:0b:bc:d9:1a:bc:
                    83:91:1f:60:38:a6:77:ef:a8:07:d8:a1:c7:cb:57:
                    33:03:dd:23:d6:4b:5b:c6:ce:a0:be:fd:a1:27:1e:
                    30:5a:95:90:80:29:ed:d3:78:ad:12:fc:8e:42:1e:
                    07:cc:60:5f:5d:45:99:f0:99:e3:64:92:d2:01:c2:
                    34:f6:b2:59:bf:c9:a4:3c:45:c7:75:82:c6:dd:bb:
                    4f:e3:83:24:48:e8:14:45:4f:b1:40:8e:59:8d:a7:
                    a3:b5:90:9c:ff:88:9e:36:5c:20:ca:75:34:1d:09:
                    72:d9:70:0f:df:ac:d5:df:81:3e:cb:56:a5:83:03:
                    0c:ca:f4:99:9d:34:7e:c6:0a:73:f8:48:d0:d9:c5:
                    47:5b:41:84:d4:77:b0:21:1c:96:80:2f:50:1d:aa:
                    9a:f4:a1:77:f6:6a:e2:a1:5c:57:1c:d7:58:16:bf:
                    84:f1:9c:f2:94:0a:83:f5:f7:9d:61:99:04:fc:67:
                    08:6f:a7:50:54:b0:ad:c4:05:8c:dc:3e:c9:44:ef:
                    f4:9f:18:9a:e6:3c:16:b0:55:91:cf:bd:21:e2:06:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EE:D4:45:34:FA:6B:50:DD:66:E1:E0:44:26:FF:8F:D0:29:71:3D
            X509v3 Authority Key Identifier:
                keyid:77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/6ed254289232826864441bdbce0cfd86fa53176e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/dbd36e815108aff3b7b3a80ea6302316bea35e09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:e0:22:21:83:2e:8d:9b:d2:b0:bc:b2:57:f7:e6:7a:c8:
         cc:81:4d:48:95:e8:55:ab:06:76:1b:f9:12:63:8c:9e:4f:89:
         df:86:bc:5a:eb:f6:75:ea:f1:6b:22:7d:83:e3:9d:27:e4:3d:
         7a:2f:a5:89:2e:46:39:80:d8:c8:53:b1:c6:73:41:3e:b3:e4:
         2e:10:c8:84:44:ad:bd:7e:d0:68:31:69:ca:d3:55:92:0c:3d:
         81:92:4e:14:f6:f8:20:27:38:30:eb:24:c3:0f:66:55:4f:e6:
         c9:50:bf:ba:3a:7e:81:53:74:ac:7f:d9:4c:2d:15:5b:2b:e3:
         6a:5c:b7:fc:b8:79:23:7f:cd:67:ca:bd:eb:c7:c3:9b:28:b9:
         85:b3:cb:3d:b4:29:ff:21:63:ed:cc:bf:ff:ba:8c:16:e7:2a:
         56:ac:19:70:9b:7d:9f:56:fa:9d:0f:73:e9:96:06:da:e7:c4:
         58:41:61:8a:5d:5a:2b:bd:60:3b:30:93:91:6e:c3:6d:0f:4a:
         e9:b5:45:8d:1e:7a:c1:e7:50:f1:44:a1:34:a3:42:e1:bc:04:
         1e:55:e8:ac:64:1f:5d:5a:6a:1c:c4:ae:b4:75:6b:99:bb:00:
         2c:ab:f1:ce:4d:f5:47:f0:82:f1:4d:ea:a2:c3:b2:30:69:e3:
         82:0b:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org