Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/a3dc887a585fdbfd7714f0d7db4487231478cbf3.roa
File:                     a3dc887a585fdbfd7714f0d7db4487231478cbf3.roa (raw, json)
Hash identifier:          roXBnO/rOu2GG5YHlGp/vAJARAZUfsZXnovV8sPPsGg=
Subject key identifier:   87:68:3F:8D:D0:BC:86:FB:AC:12:B3:4D:0C:0E:F0:D9:F3:FF:11:04
Certificate issuer:       /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial:       0E2FA0
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/a3dc887a585fdbfd7714f0d7db4487231478cbf3.roa
Signing time:             Wed 14 Jun 2023 22:08:16 +0000
ROA not before:           Tue 13 Jun 2023 22:08:16 +0000
ROA not after:            Sat 14 Jun 2025 22:08:16 +0000
asID:                     266833
IP address blocks:        131.255.40.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929696 (0xe2fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
        Validity
            Not Before: Jun 13 22:08:16 2023 GMT
            Not After : Jun 14 22:08:16 2025 GMT
        Subject: CN=a3dc887a585fdbfd7714f0d7db4487231478cbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:97:75:4d:06:6d:ea:44:a7:d1:c9:00:bb:
                    08:1c:d6:5b:7c:42:17:5b:05:c6:3b:80:1a:d9:d3:
                    b4:5d:b3:35:4b:f6:03:3f:dc:4f:13:b5:79:45:3c:
                    ab:37:7d:41:5b:f2:94:47:52:a4:e8:fb:78:1b:ef:
                    e2:ab:e9:24:30:f5:17:c5:0f:86:ae:e6:a1:09:47:
                    62:03:48:17:3a:5e:f7:c6:e9:aa:c4:07:82:48:61:
                    34:fe:64:ba:43:6a:b9:c3:53:05:17:3f:83:e6:50:
                    a4:b0:74:d0:1d:44:04:92:15:cc:a4:eb:1f:49:9f:
                    b8:2b:7e:9c:cc:e2:4f:31:da:5f:78:a9:03:d4:8f:
                    f1:04:7a:7a:67:18:d4:d3:64:28:ff:4a:8b:de:46:
                    d3:04:3e:9f:c3:cc:2c:0c:c9:e6:50:94:8a:0a:ce:
                    bc:a5:02:ed:9c:1d:52:b2:61:01:c4:9a:3e:6b:ee:
                    a2:2e:a6:fe:bf:0a:c6:73:ef:99:16:15:b6:12:94:
                    ff:ca:3d:fa:59:2b:08:ef:f3:1b:1e:c6:5d:12:2f:
                    1d:28:05:5a:e3:17:63:43:1f:f1:c9:97:9d:44:ed:
                    d1:77:ed:f0:95:16:c3:ac:10:f2:19:9e:d1:66:ad:
                    a6:4d:f3:bf:0f:97:52:bb:2b:05:ce:b8:c8:52:49:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:3F:8D:D0:BC:86:FB:AC:12:B3:4D:0C:0E:F0:D9:F3:FF:11:04
            X509v3 Authority Key Identifier:
                keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/a3dc887a585fdbfd7714f0d7db4487231478cbf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:8b:90:e1:97:e7:56:0c:eb:31:47:cd:01:ec:31:e1:6c:
         5c:55:49:7e:a6:a5:52:b7:c8:25:d4:39:9e:11:ce:92:9d:c6:
         26:2b:a1:f2:bc:2d:83:ff:ab:40:02:69:5a:02:95:cd:ca:91:
         cd:b7:7a:89:b2:cc:93:a0:c3:13:f5:0e:05:df:f1:30:26:3e:
         fd:ee:de:9b:1e:7a:1f:9f:35:5c:94:d3:0d:66:66:14:3c:bb:
         76:bc:27:b7:50:cc:d3:a1:bf:18:51:35:ac:a8:d0:b3:b5:86:
         3b:9a:92:bd:cc:01:32:55:8c:e6:cb:b5:cd:80:af:66:a1:3c:
         ff:5c:97:a6:da:eb:33:e9:7c:31:d0:a5:16:7a:97:66:14:4d:
         2b:bf:60:1d:64:25:ce:05:39:8a:da:59:5a:15:42:9d:07:36:
         d7:53:80:8f:d6:21:94:ea:74:28:c7:14:3b:2e:64:3b:63:a3:
         64:07:c0:e8:7b:5f:72:a2:61:b0:7e:b0:3b:2c:f8:77:18:45:
         64:fc:bc:91:6d:4e:19:31:66:7e:25:b0:62:13:20:ad:b1:e3:
         db:b3:a4:9b:4a:da:0b:16:5c:e2:ea:11:dd:71:24:7c:61:48:
         86:b7:52:c2:98:9e:cb:95:0e:59:8b:4f:ce:f3:92:e0:2a:c2:
         ed:b7:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org