Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c6d0222-0a1e-4695-be49-649d4f73870c/9f392a45e8cf290aa7cf5da1553279e259a4ab11.roa
File:                     9f392a45e8cf290aa7cf5da1553279e259a4ab11.roa (raw, json)
Hash identifier:          w2wDJaLdU6VodRKjc+cnzzHRnOLhrCx9PBtuaVSglxE=
Subject key identifier:   58:21:B5:FA:6C:B1:11:43:21:64:C0:87:33:5E:8D:78:AA:1F:DA:CE
Certificate issuer:       /CN=e8368733ed05969d5936bf1ba2d658850a15cd68
Certificate serial:       021DB2
Authority key identifier: 7D:79:31:50:F0:B4:34:8E:6A:45:33:39:16:1D:07:27:8E:71:27:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8368733ed05969d5936bf1ba2d658850a15cd68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c6d0222-0a1e-4695-be49-649d4f73870c/9f392a45e8cf290aa7cf5da1553279e259a4ab11.roa
Signing time:             Thu 29 Jun 2023 20:43:30 +0000
ROA not before:           Wed 28 Jun 2023 20:43:30 +0000
ROA not after:            Sun 29 Jun 2025 20:43:30 +0000
asID:                     272963
IP address blocks:        206.15.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138674 (0x21db2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8368733ed05969d5936bf1ba2d658850a15cd68
        Validity
            Not Before: Jun 28 20:43:30 2023 GMT
            Not After : Jun 29 20:43:30 2025 GMT
        Subject: CN=9f392a45e8cf290aa7cf5da1553279e259a4ab11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:69:cc:84:a0:10:65:e0:11:67:bf:5b:f8:98:
                    bf:48:97:03:e4:ae:b4:35:aa:23:85:9b:ff:17:43:
                    e9:0f:59:02:72:09:15:d8:5c:e1:4c:80:0c:76:5c:
                    99:38:be:2c:d4:ac:b7:a7:11:7f:a3:36:bf:6b:30:
                    13:8e:05:33:25:8d:4f:17:d8:0f:78:b7:cc:05:a3:
                    fd:b6:4d:6e:43:cd:8c:3f:26:e1:4f:1f:19:e0:b3:
                    33:6c:39:a8:79:0e:31:29:23:a4:4c:b2:23:9f:cb:
                    41:75:4a:8e:3b:33:56:8d:94:af:bf:48:6d:2d:f9:
                    cc:93:b6:40:fd:cd:fb:35:8d:cb:11:9d:6b:c0:dd:
                    07:fc:5a:12:28:d9:12:03:2f:64:e0:8d:7d:d4:43:
                    fa:59:0a:22:30:2d:a5:83:d7:95:20:74:bc:05:62:
                    66:b8:b4:24:b4:03:c7:16:9c:8c:eb:3a:d8:da:8d:
                    03:c3:e9:35:2f:96:19:6e:74:70:db:c6:40:80:85:
                    a9:ff:73:ee:4e:12:e8:97:0c:e3:4a:67:ef:14:af:
                    2c:f9:84:40:bd:a6:68:6c:b2:71:1b:57:de:ca:97:
                    40:65:05:b9:67:ac:b3:af:32:bf:ed:54:5d:2a:02:
                    7d:52:6f:b4:e6:31:cb:77:2c:2f:40:26:54:a5:40:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:21:B5:FA:6C:B1:11:43:21:64:C0:87:33:5E:8D:78:AA:1F:DA:CE
            X509v3 Authority Key Identifier:
                keyid:7D:79:31:50:F0:B4:34:8E:6A:45:33:39:16:1D:07:27:8E:71:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8368733ed05969d5936bf1ba2d658850a15cd68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c6d0222-0a1e-4695-be49-649d4f73870c/9f392a45e8cf290aa7cf5da1553279e259a4ab11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c6d0222-0a1e-4695-be49-649d4f73870c/e8368733ed05969d5936bf1ba2d658850a15cd68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:d1:30:73:16:77:f7:e0:6e:cc:d6:47:d3:97:9d:e1:b3:
         e0:ae:e7:c6:bc:2a:82:78:8e:94:63:f9:17:16:7f:ce:ba:79:
         ea:0e:b3:9b:9c:03:04:ed:9c:b0:b2:5d:d2:58:ff:c3:1c:18:
         ac:fb:46:fa:2b:ba:0e:f3:8e:e5:e6:fa:b9:45:73:4d:84:7c:
         b2:32:f1:bc:49:11:48:5d:8d:9f:87:0a:a1:5b:4d:aa:77:b1:
         a0:0d:75:4e:9f:bb:b0:e8:af:a1:70:bb:42:f5:82:9d:3b:e6:
         b1:0e:48:a8:11:e2:54:6d:27:de:46:bd:8f:31:6f:04:77:15:
         c6:c8:6b:6f:17:94:db:a4:f8:9d:b0:a2:54:20:04:49:fa:12:
         44:06:08:fe:b6:79:36:4c:fb:a0:9d:d9:b1:80:7a:d5:29:0b:
         ac:a6:3f:c3:c7:12:fd:5e:cb:e9:8c:a3:ef:ee:77:b9:80:d6:
         f1:f0:c7:53:d7:0c:af:c2:a9:2f:c0:44:47:2f:b3:03:5e:85:
         a8:a3:94:a6:07:80:4c:bd:a6:2e:fd:08:1b:68:29:31:df:f9:
         9f:03:bb:a7:7b:0a:c3:e0:96:80:ba:e1:86:56:94:29:84:6b:
         f4:23:5b:c1:3e:b7:eb:32:5c:61:4b:7f:96:6e:09:90:cf:eb:
         ed:c8:00:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org