Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/faf57ae44dcad268a693eacef3de7a65c07dbdf2.roa
File:                     faf57ae44dcad268a693eacef3de7a65c07dbdf2.roa (raw, json)
Hash identifier:          TlCbR3w71cCm3Xg/NQe5LKHpcA2b+Ye8sQtl0bH5gl4=
Subject key identifier:   61:47:5A:C6:0E:2D:4C:C9:3D:33:61:59:51:2A:38:4C:7E:A2:22:DE
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06289D
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/faf57ae44dcad268a693eacef3de7a65c07dbdf2.roa
Signing time:             Wed 24 Mar 2021 14:33:34 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     29713
IP address blocks:        191.96.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403613 (0x6289d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=faf57ae44dcad268a693eacef3de7a65c07dbdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a7:b2:58:ce:e5:8a:8b:8a:76:19:85:ed:a5:
                    06:47:d0:47:4e:26:bf:d6:d9:7c:16:c5:f3:b5:3c:
                    e3:62:11:44:ec:01:01:b6:91:e1:d6:0d:d9:99:b8:
                    03:ce:26:8b:c2:48:a2:c8:be:9b:38:04:a9:cd:1a:
                    0a:51:aa:81:78:59:30:b6:31:62:0b:66:12:64:9d:
                    1e:af:5f:b5:75:0c:2d:fb:49:0f:9e:ef:e0:12:16:
                    9c:e1:62:5b:63:4e:eb:11:dc:d1:a2:53:08:54:39:
                    0e:24:c4:d0:f3:e6:26:d8:e9:68:70:5c:49:b2:7a:
                    67:78:50:d1:f2:b5:7e:98:9a:9a:0b:f0:0a:fe:53:
                    76:d2:22:8c:b5:9b:c2:70:6b:87:16:68:7e:65:85:
                    55:5d:5d:54:df:04:a4:0c:92:26:4f:0b:bb:a6:02:
                    74:ef:67:2e:db:b2:f0:a4:05:e7:f4:db:fe:bf:af:
                    77:0f:49:c4:0a:4f:91:40:7c:be:2d:f1:42:55:91:
                    41:18:6f:b9:c2:52:88:a8:6a:53:f7:06:17:6a:67:
                    8a:e1:95:ef:20:3a:a2:fe:d3:2d:32:af:34:7a:b7:
                    ce:62:83:f7:15:f0:fc:e0:ff:9b:e1:4e:c4:7e:34:
                    81:ae:be:33:72:1b:5b:b3:e7:43:94:c8:26:bb:e7:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:47:5A:C6:0E:2D:4C:C9:3D:33:61:59:51:2A:38:4C:7E:A2:22:DE
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/faf57ae44dcad268a693eacef3de7a65c07dbdf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:eb:47:25:2b:24:36:da:55:a4:8c:f9:7e:d4:7d:6c:6e:af:
         96:a8:a7:f6:9f:32:27:87:9c:07:ef:bb:9e:9c:16:2e:f1:7b:
         9e:43:33:a7:85:e1:93:fc:ef:af:64:cc:19:db:8c:04:dc:79:
         be:ef:65:9c:9d:50:50:a6:65:c1:c6:5b:f3:33:5c:25:93:36:
         ad:4e:4c:12:b4:fb:de:61:7b:a6:ea:81:9c:dd:6e:87:1c:ca:
         d5:7d:68:a2:b6:02:c6:32:39:80:6c:a9:86:f9:06:09:cf:29:
         ed:e1:36:89:e5:ba:94:99:1f:7e:49:94:02:6d:f5:e5:24:09:
         97:68:cf:6e:1b:2e:16:cb:f3:7c:6e:11:77:ba:bd:db:3f:f3:
         d7:81:62:d0:4e:4f:d5:5a:76:26:c5:e4:9e:cb:be:27:ba:fd:
         18:49:f5:44:f4:f3:a1:6b:80:67:95:32:e7:ea:f0:52:3c:ec:
         77:78:88:1a:9a:4b:2d:17:cd:77:49:d8:f1:e5:fb:1f:ae:06:
         30:0a:d1:73:f5:55:31:e9:8c:9f:d1:61:9f:04:cf:03:7b:40:
         c0:80:d5:cf:88:89:a9:51:a9:a7:66:0e:18:c0:83:d6:8d:dd:
         8b:16:06:7a:99:03:aa:ec:47:7b:c6:94:ec:9d:cf:8c:a9:7f:
         fd:b2:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org