Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/016c3d1af587c196ead5dc4d7cf8bb03acc1885c.roa
File:                     016c3d1af587c196ead5dc4d7cf8bb03acc1885c.roa (raw, json)
Hash identifier:          EiktRw0yqFZOX+bDceAe3wdohFDibz2jIqy806yatrs=
Subject key identifier:   1F:71:3D:63:1C:A7:97:4E:EA:30:A8:F5:A9:93:DC:A0:FD:C3:0E:CF
Certificate issuer:       /CN=8977e71e589f7dff93910384f64766de5bd105bb
Certificate serial:       165B01
Authority key identifier: 1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/016c3d1af587c196ead5dc4d7cf8bb03acc1885c.roa
Signing time:             Mon 04 Sep 2023 08:30:01 +0000
ROA not before:           Sun 03 Sep 2023 08:30:01 +0000
ROA not after:            Tue 02 Sep 2025 08:30:01 +0000
asID:                     269991
IP address blocks:        191.102.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465089 (0x165b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8977e71e589f7dff93910384f64766de5bd105bb
        Validity
            Not Before: Sep  3 08:30:01 2023 GMT
            Not After : Sep  2 08:30:01 2025 GMT
        Subject: CN=016c3d1af587c196ead5dc4d7cf8bb03acc1885c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8e:65:f3:ff:ea:17:b0:c8:2d:c6:27:60:f7:
                    1a:07:42:d1:15:0a:7f:2f:c1:b0:0d:fe:fb:4b:67:
                    e3:13:3d:24:3b:e7:62:5b:5f:f9:8b:2f:16:89:7d:
                    24:c1:b8:a1:57:84:fc:3f:32:b7:1d:9b:48:7c:06:
                    37:57:ca:2e:34:76:8d:36:d4:e9:97:44:9b:af:2d:
                    07:de:0b:0f:72:7e:12:ac:ee:c5:fe:b2:46:15:4b:
                    de:a7:69:68:dc:8b:30:a8:f2:b7:e2:91:bb:08:b3:
                    3f:24:0e:80:26:f7:9f:e8:34:7b:2e:ab:f6:62:a7:
                    5b:df:eb:a1:1f:2c:17:e9:21:08:74:1a:53:dc:82:
                    d1:53:90:7e:e0:86:16:30:7b:75:fe:3e:ca:8a:2d:
                    3e:f9:bc:6b:0e:bf:56:a1:6c:d4:3d:25:0d:19:53:
                    d1:ad:f0:0e:1f:fb:81:f9:03:c2:d7:4f:aa:9d:d7:
                    92:47:c4:12:2c:ba:e1:9f:13:b7:78:36:db:77:4a:
                    7f:bd:c6:59:67:8b:31:8a:14:b0:9b:45:59:3d:e9:
                    d0:08:00:68:25:42:1b:33:41:0b:26:3c:ea:4f:1f:
                    22:47:40:26:b5:c2:2b:04:0e:99:ac:54:27:11:ad:
                    bd:52:71:eb:38:52:ad:70:d6:d9:3f:7e:3b:57:2d:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:71:3D:63:1C:A7:97:4E:EA:30:A8:F5:A9:93:DC:A0:FD:C3:0E:CF
            X509v3 Authority Key Identifier:
                keyid:1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/016c3d1af587c196ead5dc4d7cf8bb03acc1885c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:28:0d:3e:fb:3a:2b:06:e3:a0:70:a4:ba:69:19:40:3b:17:
         03:97:cc:85:fc:b2:04:be:cb:18:4e:79:5e:8e:5c:ed:66:7f:
         8e:03:01:1b:65:17:b6:42:a6:f1:d9:2b:4a:26:53:71:fc:27:
         82:c4:67:3c:bb:8b:f3:d2:51:3c:49:80:40:2e:f9:86:e1:e9:
         5d:e3:3a:5b:73:f7:f5:ca:e8:1d:84:ab:a5:34:d8:f2:7c:8b:
         94:36:05:ba:76:c7:7f:c6:dd:6a:be:d2:be:e4:b7:f3:bb:bf:
         b6:07:0d:34:62:28:e0:70:4c:27:ac:2b:f4:35:1f:ee:ec:0e:
         47:e8:91:90:19:f4:d2:60:cb:bf:2e:5a:2e:ff:7b:bd:95:9d:
         10:97:d6:9d:17:c0:8f:ff:75:e5:bd:8f:db:8f:3f:14:e9:eb:
         ad:52:19:81:53:cf:e4:13:6c:33:4e:cf:40:e1:d2:94:d3:e8:
         e2:f2:2f:43:ac:c3:09:bd:a1:b5:99:af:02:5c:6c:6a:2c:25:
         78:23:62:41:9c:97:4b:00:cd:89:83:86:e1:83:65:b0:35:fa:
         55:39:a6:01:ac:0a:9a:54:7b:83:23:58:14:14:4a:b7:aa:22:
         11:39:a9:23:a2:a3:1f:ae:15:b9:a4:a4:fb:4f:a7:41:c6:6a:
         c5:68:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org