Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/782da2267712bdcc2451dea98298c3b7755dcf05.roa
File:                     782da2267712bdcc2451dea98298c3b7755dcf05.roa (raw, json)
Hash identifier:          /K1h47A1/B+KVAtA13LYrBMlVIReVJLgyuM/gdQavl0=
Subject key identifier:   89:1D:2B:DD:47:C6:93:6B:AF:49:96:FB:09:6A:76:EF:66:C6:BE:77
Certificate issuer:       /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial:       0E4C22
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/782da2267712bdcc2451dea98298c3b7755dcf05.roa
Signing time:             Fri 16 Jun 2023 17:49:34 +0000
ROA not before:           Thu 15 Jun 2023 17:49:34 +0000
ROA not after:            Mon 16 Jun 2025 17:49:34 +0000
asID:                     266833
IP address blocks:        131.255.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936994 (0xe4c22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
        Validity
            Not Before: Jun 15 17:49:34 2023 GMT
            Not After : Jun 16 17:49:34 2025 GMT
        Subject: CN=782da2267712bdcc2451dea98298c3b7755dcf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d7:11:a7:62:35:2b:07:b9:d5:98:1e:74:15:
                    be:77:ad:6c:fc:36:89:45:2d:6f:f9:a8:e1:e7:be:
                    be:8e:75:f5:dc:fa:63:e9:8b:50:f2:dd:07:d2:bb:
                    10:7c:6b:b2:88:b2:fb:f3:c4:25:6e:f3:16:d4:29:
                    ce:09:d1:f7:56:35:d7:8a:2f:e7:d3:bc:10:a5:84:
                    71:42:89:8f:97:12:a3:5c:d5:59:3c:0c:d8:68:f5:
                    8d:64:79:93:fe:aa:33:dd:29:2e:ee:42:58:fc:e7:
                    7f:6f:eb:67:69:06:5a:6e:ae:0e:a2:0e:14:cf:b0:
                    d8:dd:28:30:36:13:b2:a0:d6:f1:78:b1:f2:2c:70:
                    55:05:0c:ef:82:6c:8e:31:70:2d:c6:a4:a5:9e:60:
                    dc:4f:16:a0:90:e6:0e:09:f0:fb:db:c9:5f:bb:d1:
                    29:44:70:e7:34:d1:ab:38:52:e7:e3:58:e8:92:45:
                    db:d1:84:5e:46:3d:38:f1:2a:6b:e5:20:d0:d7:de:
                    f3:f6:3e:00:08:53:dc:62:fb:05:79:71:28:b4:62:
                    06:2e:b4:cc:19:9f:7a:1a:bf:e0:24:c1:f1:f9:97:
                    1c:01:b9:af:e7:85:59:b7:86:e5:27:c5:29:06:67:
                    c8:5a:89:88:c6:a5:34:a3:b1:7e:47:77:b1:c2:c6:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1D:2B:DD:47:C6:93:6B:AF:49:96:FB:09:6A:76:EF:66:C6:BE:77
            X509v3 Authority Key Identifier:
                keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/782da2267712bdcc2451dea98298c3b7755dcf05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:e9:48:6e:e8:5e:14:cb:15:41:4e:ce:7d:3b:a2:6a:1c:
         e8:21:f7:6e:f3:27:a1:5b:4d:79:35:da:c5:3c:3e:19:05:17:
         6b:15:27:71:b6:8d:40:b6:6f:16:7a:b9:c6:bd:92:d8:ce:ca:
         b3:bf:40:bc:0e:08:9a:f2:8f:a9:47:6d:7a:b7:59:c1:c8:ef:
         87:0a:bb:0d:24:55:ec:26:7b:cc:47:b2:3d:cd:2f:d5:2f:a7:
         65:f0:73:ef:f7:f8:d8:f4:39:97:f8:fa:ca:b5:cb:1d:85:85:
         35:b1:40:18:94:6f:2e:dc:cc:e3:ef:7d:b3:a9:3c:90:c2:3f:
         0b:71:cc:91:dc:41:2c:39:86:83:04:e1:78:31:6b:61:8a:e9:
         3b:27:29:c1:59:c2:ce:92:10:0e:16:9a:0f:7b:80:d1:f3:c8:
         cf:50:ca:a4:b9:d2:d0:86:dd:0a:93:09:5d:42:4d:ba:c8:67:
         6b:49:03:15:46:4e:28:ce:43:f5:3c:c3:29:98:7e:b7:88:b7:
         c6:49:36:a9:8d:5d:06:63:40:42:bf:6d:35:42:bf:44:7b:60:
         5d:17:cf:14:5d:bd:e7:49:ad:34:ad:8d:78:0e:d9:3e:56:98:
         08:70:75:3c:31:9f:b3:50:fc:cd:a2:ce:c2:3e:1a:57:43:03:
         da:ba:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org