Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/63aeef69a4ae2b332a9850cb4468a90a62179957.roa
File:                     63aeef69a4ae2b332a9850cb4468a90a62179957.roa (raw, json)
Hash identifier:          yfe6r8vn/AFSj4yZLDHGOfmZGQQprkk27d/Dk1MeYto=
Subject key identifier:   7F:88:B4:10:F8:64:F1:EC:82:2F:F5:9D:6E:FD:73:3E:62:24:9D:D8
Certificate issuer:       /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial:       0E2519
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/63aeef69a4ae2b332a9850cb4468a90a62179957.roa
Signing time:             Wed 14 Jun 2023 22:06:19 +0000
ROA not before:           Tue 13 Jun 2023 22:06:18 +0000
ROA not after:            Sat 14 Jun 2025 22:06:18 +0000
asID:                     263824
IP address blocks:        131.255.42.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927001 (0xe2519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
        Validity
            Not Before: Jun 13 22:06:18 2023 GMT
            Not After : Jun 14 22:06:18 2025 GMT
        Subject: CN=63aeef69a4ae2b332a9850cb4468a90a62179957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:f5:01:89:5d:70:6b:07:e9:72:5e:0c:c2:
                    e5:ae:d0:73:b6:db:62:de:45:36:e7:6e:83:30:29:
                    aa:34:69:54:8e:e8:c8:2b:67:a0:40:e5:4d:c9:a8:
                    58:93:4d:6f:93:91:5d:9b:1d:7d:30:7d:c8:a8:e7:
                    b0:ab:a7:35:3e:9f:b8:ae:cd:15:e2:30:0a:ba:64:
                    63:d5:a0:12:2c:e1:7d:e2:a8:97:c5:ed:e6:8d:60:
                    32:4f:66:1c:ab:61:5c:a8:83:97:2e:66:4e:79:a3:
                    84:21:9e:1f:4b:63:e2:8a:9e:85:78:26:45:01:ea:
                    ab:2b:9e:af:4e:7e:a3:7a:43:d1:6a:e8:37:ed:6f:
                    e2:39:0a:ac:ab:14:15:26:60:14:9d:89:79:ec:20:
                    1d:f1:71:ee:bc:ca:18:cd:37:7c:d6:23:b7:f2:d7:
                    81:2d:7d:bd:ae:75:a6:80:83:44:0f:48:3a:0f:2d:
                    70:8e:2c:c5:4c:4e:33:9f:00:57:20:00:f6:30:2f:
                    f6:d4:56:1e:a1:47:81:56:83:2e:a5:15:95:b9:5e:
                    81:c3:db:f4:88:97:bb:cf:35:0e:78:fe:c5:86:49:
                    59:75:b3:1c:85:8c:7b:97:5b:9a:f1:e5:d0:b2:63:
                    49:cd:3e:2a:19:3a:8e:6e:80:ee:c6:7c:b6:ec:45:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:B4:10:F8:64:F1:EC:82:2F:F5:9D:6E:FD:73:3E:62:24:9D:D8
            X509v3 Authority Key Identifier:
                keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/63aeef69a4ae2b332a9850cb4468a90a62179957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:92:ac:1d:27:cc:02:bf:6f:07:52:2f:97:53:2f:ca:56:
         77:44:c8:5f:e2:c0:92:40:54:62:43:0d:4c:14:33:9e:f3:a0:
         e3:8a:db:a4:a5:f2:db:dd:00:e6:87:ee:ff:00:7e:94:fc:7f:
         39:13:06:e1:ef:e0:1c:92:cd:6f:bd:f7:a8:d6:8e:49:3e:97:
         2a:1b:10:b3:87:17:8e:23:67:cd:86:66:b7:1c:3c:51:6f:28:
         d4:b0:de:05:13:41:b9:61:54:dd:41:6c:e2:f4:9b:55:79:ad:
         a9:eb:b1:b9:ec:20:0d:0a:b4:6e:44:0a:7b:ce:cb:a7:a7:6f:
         ad:99:1d:7f:e0:d9:ba:0d:a4:8d:7c:58:ad:be:c1:8a:6d:0c:
         cb:43:19:9a:61:ee:68:fe:b2:6e:df:4d:7f:6f:c4:12:ee:f0:
         71:78:45:d1:61:d5:70:85:06:3c:87:72:c4:01:6c:7d:52:eb:
         50:9a:79:19:eb:c4:5a:ab:81:a8:71:b7:10:7a:68:46:16:25:
         af:98:84:ce:3a:a4:c5:2e:f7:b9:9d:89:51:a4:36:7f:ed:71:
         78:22:ba:d0:9a:1b:a5:9a:4a:23:b1:83:a9:1c:10:00:91:ba:
         ab:41:80:66:91:a4:70:fa:68:8c:37:cb:8d:3a:8f:d9:3c:d2:
         da:cd:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org