Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/385005ed9e6c48aedcd03c54bef742972521dff4.roa
File:                     385005ed9e6c48aedcd03c54bef742972521dff4.roa (raw, json)
Hash identifier:          85uLviqOQ3eiFo0IgGT4dkLeCBaVoNPgr46sVlqCU5Q=
Subject key identifier:   BB:06:C5:2B:28:73:D3:21:99:06:55:BA:99:77:FA:F5:AF:2D:96:24
Certificate issuer:       /CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
Certificate serial:       223621
Authority key identifier: 73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/385005ed9e6c48aedcd03c54bef742972521dff4.roa
Signing time:             Thu 06 Jul 2023 04:41:11 +0000
ROA not before:           Wed 05 Jul 2023 04:41:11 +0000
ROA not after:            Sun 06 Jul 2025 04:41:11 +0000
asID:                     52468
IP address blocks:        131.196.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242081 (0x223621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
        Validity
            Not Before: Jul  5 04:41:11 2023 GMT
            Not After : Jul  6 04:41:11 2025 GMT
        Subject: CN=385005ed9e6c48aedcd03c54bef742972521dff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:f5:81:a4:67:e8:58:45:98:6f:1d:c3:11:
                    5b:23:a6:4f:2a:e4:df:53:e6:a5:0e:8b:5c:72:8f:
                    b4:cd:0f:bf:b3:d5:c6:5f:24:29:a4:b1:18:b3:d2:
                    e1:9a:46:6e:e4:17:4a:dc:e4:03:6f:09:30:05:88:
                    00:bc:c7:0b:b4:94:65:60:e5:f8:f4:55:df:47:2e:
                    4a:27:24:f5:1c:79:ed:b4:cb:30:46:9a:b6:7a:db:
                    c9:4c:68:6f:62:a9:7f:ae:5d:3f:93:c8:e4:eb:40:
                    06:14:a1:ef:0d:64:80:18:ba:c2:2e:93:95:84:c3:
                    9a:fb:75:00:be:96:15:82:0f:e9:e8:b0:17:75:7f:
                    13:d7:92:e9:a2:b9:48:11:d6:6d:f7:2f:a2:74:c1:
                    44:a0:63:64:87:27:52:ba:62:8d:dc:62:da:1b:cf:
                    b0:98:a3:9d:8b:16:af:02:c7:e3:a9:12:8f:1f:66:
                    35:84:95:ac:e2:bd:08:d5:0d:2f:15:a3:15:7e:b9:
                    30:11:aa:c9:69:b0:5a:3a:32:7e:d0:bb:68:79:32:
                    43:6a:0e:07:b6:56:74:a0:5e:98:ad:38:27:5b:81:
                    cc:cb:5c:5a:60:ac:09:60:7f:3b:6b:fe:e9:89:48:
                    ce:52:8b:e1:8f:3e:f1:15:ab:42:4f:35:ea:5e:74:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:06:C5:2B:28:73:D3:21:99:06:55:BA:99:77:FA:F5:AF:2D:96:24
            X509v3 Authority Key Identifier:
                keyid:73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/385005ed9e6c48aedcd03c54bef742972521dff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:36:45:e4:73:0e:ac:41:76:de:69:e7:f1:b5:82:8f:18:
         b8:7c:68:61:00:c3:60:2a:a1:7b:28:3a:78:88:46:ac:dc:cf:
         c3:56:fb:11:35:fd:00:eb:08:43:99:ab:85:08:2d:15:f4:cd:
         0b:18:84:70:6c:e3:a2:96:45:f7:e7:a5:95:bb:08:b2:2b:5a:
         46:66:a5:f8:b0:ef:4f:44:5c:f6:c1:c8:12:61:04:95:1d:c9:
         a9:54:63:32:ab:94:c0:49:95:93:36:61:a6:1e:3b:39:ae:8b:
         39:c9:0c:b1:d5:c9:a4:9b:dc:51:ea:92:08:55:2d:1a:44:e9:
         ce:55:e8:19:2f:74:96:41:ed:f8:7e:ce:f9:72:98:96:70:e9:
         7c:fc:22:76:7b:9e:98:b3:19:d8:1a:75:7e:02:6d:46:c2:d0:
         a1:02:57:5e:94:88:d0:c2:c3:aa:41:26:1f:d9:cf:2b:ac:b6:
         b6:42:e1:b0:fb:c2:d7:88:cd:45:b9:f6:91:55:cf:09:60:07:
         3d:77:40:ec:0f:77:ed:20:c9:41:b0:72:15:a6:bd:92:51:7d:
         19:1e:4a:05:df:f1:fb:b8:23:9e:e1:e0:ad:ae:41:3f:8f:22:
         ce:a0:44:8c:85:5f:5b:24:82:76:b2:03:f1:6e:a2:fc:a6:f1:
         b9:2c:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org