Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/04cd6f906b3e600476dbf182eb5f1b6b86fa4b64.roa
File:                     04cd6f906b3e600476dbf182eb5f1b6b86fa4b64.roa (raw, json)
Hash identifier:          FQJR1b8+hfhjY2OKXNu+CmgRqhcGoSaHC1uQJUtu3D8=
Subject key identifier:   8C:07:A1:83:24:34:E7:4E:71:F7:F7:C1:94:F4:F5:AF:4A:41:CC:EF
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       14174E
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/04cd6f906b3e600476dbf182eb5f1b6b86fa4b64.roa
Signing time:             Mon 07 Mar 2022 22:59:10 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263793
IP address blocks:        167.249.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316686 (0x14174e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=04cd6f906b3e600476dbf182eb5f1b6b86fa4b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:48:30:bf:1e:e4:de:bb:7a:31:5a:1b:c3:48:
                    2e:98:6e:2f:6e:01:4c:d8:93:ce:14:92:b3:f1:87:
                    27:5a:49:3e:04:eb:aa:26:f7:13:d4:21:92:47:d0:
                    0a:04:9f:ff:c1:dc:27:91:d2:c9:87:3c:3d:b4:a3:
                    2b:6c:9b:2c:e2:38:3a:4d:e4:47:c6:0b:4d:09:3d:
                    5c:6b:e3:fe:35:45:c8:65:18:45:5a:d9:ac:73:6f:
                    ed:4b:6d:d4:0a:89:9e:9e:91:31:79:cb:41:ea:3a:
                    a8:03:ba:9f:03:29:65:1a:af:e6:5f:c3:c1:73:51:
                    42:58:63:d6:81:1e:37:7e:41:65:45:70:00:3c:00:
                    fb:4c:02:d1:3d:6a:80:43:fb:58:58:29:42:88:a6:
                    56:1c:8a:1c:df:ec:b4:a8:d7:98:c7:d5:f3:5c:ea:
                    e0:0d:b0:49:2a:c7:a6:e2:79:96:ae:6b:8b:3e:9c:
                    85:01:2b:a0:52:b6:73:f7:9c:e3:f3:a1:81:45:48:
                    9a:eb:77:f2:a4:d5:f1:99:bb:07:e6:d9:1b:5e:cd:
                    04:ec:88:25:83:75:db:86:a1:b7:29:b6:96:62:c2:
                    84:8a:c3:d9:2f:9e:e3:b5:75:fb:20:82:26:a3:2f:
                    a5:df:09:68:ad:86:3a:56:b4:9d:bc:7a:8e:b1:1a:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:A1:83:24:34:E7:4E:71:F7:F7:C1:94:F4:F5:AF:4A:41:CC:EF
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/04cd6f906b3e600476dbf182eb5f1b6b86fa4b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:df:1f:10:28:e0:08:0b:da:84:a5:fb:03:72:f4:22:43:d6:
         f0:d7:3a:6c:7c:b9:7f:9f:95:00:d1:aa:27:9c:db:5a:1c:b6:
         70:d7:c5:78:2b:49:89:dc:3e:76:62:39:02:f0:e4:d0:95:2f:
         67:1d:fc:f8:d3:f5:05:1b:c8:88:e2:ef:2a:c3:24:ea:3f:d8:
         73:e6:47:4a:1d:88:7d:fa:fa:7d:de:13:0a:a9:48:a7:55:19:
         31:d4:58:85:33:94:9e:ec:61:a6:01:d9:6e:e2:96:04:b5:90:
         5b:b7:2f:60:83:26:e8:4d:04:f0:c7:7d:9a:11:4f:4c:10:fb:
         6f:f7:ba:ed:8b:7d:a9:67:50:5f:bd:45:20:ef:13:5c:7c:e1:
         4c:ce:63:3d:2f:38:b3:e5:c1:81:be:e4:7c:20:ab:86:aa:d7:
         13:a8:09:d0:45:66:c2:5f:3a:f2:02:1f:7c:45:eb:c4:29:63:
         d1:fe:40:e0:4b:83:f2:b5:c0:57:ac:83:44:15:ed:8d:9b:ee:
         d7:be:25:20:b5:75:18:a0:d7:30:c4:3a:4e:a5:70:a1:6e:ff:
         a7:a0:3f:62:50:e2:11:bb:2f:9d:28:ee:2c:32:9a:f9:d4:74:
         32:f7:c6:10:87:71:a7:af:d2:89:f5:a8:41:08:4d:8a:af:9c:
         c1:33:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org