Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/527e263af985958930a91141621f0e0320194163.roa
File:                     527e263af985958930a91141621f0e0320194163.roa (raw, json)
Hash identifier:          8nY0vhiYJq9CMjoKDS+Qpu0yN52W080zCDW3S2yKe3c=
Subject key identifier:   3F:0F:AC:7A:00:FF:CC:AC:97:65:66:42:3A:DF:95:83:19:B3:A9:03
Certificate issuer:       /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial:       278F6E
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/527e263af985958930a91141621f0e0320194163.roa
Signing time:             Sat 27 Jan 2024 05:56:24 +0000
ROA not before:           Sat 27 Jan 2024 05:56:23 +0000
ROA not after:            Tue 27 Jan 2026 05:56:23 +0000
asID:                     52228
IP address blocks:        152.231.128.0/17 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2592622 (0x278f6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Validity
            Not Before: Jan 27 05:56:23 2024 GMT
            Not After : Jan 27 05:56:23 2026 GMT
        Subject: CN=527e263af985958930a91141621f0e0320194163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:47:50:b4:25:4c:03:de:c2:34:9a:35:f8:
                    0b:aa:da:04:d0:ec:2a:7c:33:96:50:9d:43:c5:65:
                    6f:23:2b:32:7f:74:26:33:0b:6f:99:93:9d:53:c1:
                    7b:cf:e8:d6:6a:23:89:09:4b:39:09:f0:81:61:a7:
                    ab:5a:4d:90:25:ff:de:d7:6f:0e:bc:ba:16:88:14:
                    f3:8f:da:83:29:f8:9c:7d:a3:84:5c:8d:b6:25:bd:
                    3f:93:b9:b7:df:a1:15:c7:ad:01:40:19:6d:86:43:
                    6d:ce:3c:d0:90:69:1b:75:5f:23:f5:db:ad:72:03:
                    73:34:7f:52:98:45:05:9d:ad:3d:e4:0c:13:fb:f3:
                    ba:b6:ed:d7:d0:c7:45:f7:5b:2d:bd:1d:f6:78:13:
                    bb:ac:a7:4c:fb:28:3c:41:29:5c:68:d2:3f:0c:9f:
                    5a:6f:7d:6d:91:97:45:70:9a:3e:87:92:66:67:ac:
                    8b:f9:51:5e:88:9a:6c:fd:3d:ba:e2:4b:e9:7b:f4:
                    27:af:97:2d:5c:9f:bf:97:9d:b7:67:41:bd:ad:f3:
                    f2:fd:5b:b9:53:22:3b:e9:2a:5c:7f:b9:c1:1e:89:
                    8a:23:79:e2:24:90:90:a7:d5:2d:36:01:ad:36:4f:
                    f9:7d:2a:28:39:92:db:0d:e1:ba:23:63:a7:93:f0:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0F:AC:7A:00:FF:CC:AC:97:65:66:42:3A:DF:95:83:19:B3:A9:03
            X509v3 Authority Key Identifier:
                keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/527e263af985958930a91141621f0e0320194163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         08:45:16:ab:17:13:02:4e:42:8a:18:70:73:27:a9:68:4f:09:
         45:74:43:80:69:81:48:72:75:78:07:81:81:c5:17:6d:31:78:
         c3:1a:94:71:2d:46:f7:06:26:25:81:1a:14:bd:02:4a:db:d8:
         b3:f1:3f:09:59:f8:d2:3a:ec:9a:65:8c:45:98:bd:5c:32:f4:
         69:cb:04:21:61:63:d3:6c:c2:00:3c:0c:b5:69:3f:50:b4:30:
         00:3c:d2:c9:94:69:b0:ef:77:74:32:d7:e9:d4:74:66:1b:5a:
         e8:ee:fa:40:d9:3e:5e:98:36:58:b9:40:af:6d:b8:93:4f:de:
         01:f7:88:f6:e3:0c:11:ec:19:72:0b:14:38:d4:17:86:98:9b:
         ac:d4:b0:07:3c:ed:77:61:47:c2:86:eb:68:4f:2d:3f:ea:b3:
         a9:b8:ac:27:0e:ba:d3:35:ec:05:10:9f:12:ab:9e:a0:4f:52:
         3e:a7:da:ba:e3:8b:93:2b:da:58:e3:f7:3c:a0:31:08:68:8d:
         81:a4:75:89:bf:95:84:2d:88:47:af:95:70:89:f2:89:29:37:
         11:ce:63:e9:1c:c8:37:44:83:f9:05:2f:51:70:c3:22:06:14:
         31:99:b4:aa:b3:28:95:1f:1a:ab:3e:bd:c7:dc:8e:f6:96:c6:
         b0:78:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org