Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/932dc7661499e13aa6532c59eb97363914168553.roa
File:                     932dc7661499e13aa6532c59eb97363914168553.roa (raw, json)
Hash identifier:          14o4tphL7O6rMclVPonp4U6bcKz53x38/nLL95MmUO0=
Subject key identifier:   5D:60:0B:89:9D:3E:D3:F4:E6:AE:AA:B9:A1:A4:56:9C:20:55:E5:E0
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       142C39
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/932dc7661499e13aa6532c59eb97363914168553.roa
Signing time:             Tue 18 Jan 2022 16:10:55 +0000
ROA not before:           Tue 18 Jan 2022 03:00:00 +0000
ROA not after:            Thu 18 Jan 2024 03:00:00 +0000
asID:                     271975
IP address blocks:        66.231.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322041 (0x142c39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Jan 18 03:00:00 2022 GMT
            Not After : Jan 18 03:00:00 2024 GMT
        Subject: CN=932dc7661499e13aa6532c59eb97363914168553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:1a:9c:d7:21:2d:54:b2:7b:64:4f:fe:2f:
                    15:4f:b1:30:ec:08:63:c6:50:46:66:5d:fe:51:07:
                    a6:5c:d1:40:3b:b3:2e:90:92:f8:3a:96:79:ef:97:
                    28:67:b1:58:0b:f4:e7:5d:14:7f:58:2b:5f:9d:3b:
                    07:de:5b:d8:ef:3a:d3:33:2a:10:de:91:0b:ec:d9:
                    69:95:f9:88:30:e4:6e:46:74:45:65:15:54:f0:32:
                    73:c7:ee:71:76:e7:07:8f:4e:38:07:c5:dc:02:22:
                    c3:df:2a:f4:ec:7f:7d:d0:50:a4:66:f7:b6:a2:ef:
                    45:92:73:6b:13:dc:85:71:64:a1:ab:6c:46:84:c5:
                    2c:cd:e3:e2:2b:68:b6:3e:1e:5d:50:b9:c8:30:61:
                    15:07:07:73:6b:83:bd:17:77:7e:49:98:82:0f:ea:
                    6b:9a:7f:72:d5:f9:84:0f:fa:e3:d2:05:f1:40:80:
                    7b:72:3a:17:3d:4c:f1:68:15:1e:c6:26:52:6a:6e:
                    59:03:c7:38:2e:e9:d2:d7:91:1a:c0:47:39:fc:4f:
                    f7:d5:97:99:4f:5a:36:1a:90:f9:3d:39:39:0b:6a:
                    b5:1d:60:1e:11:3b:4b:b5:f1:4b:7b:6e:8c:3a:c5:
                    8d:f7:d1:f8:56:12:87:e1:e6:27:8b:91:e3:63:ff:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:60:0B:89:9D:3E:D3:F4:E6:AE:AA:B9:A1:A4:56:9C:20:55:E5:E0
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/932dc7661499e13aa6532c59eb97363914168553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:b2:bd:50:13:88:e5:de:5b:60:e3:d6:e5:ee:96:2b:0f:
         c9:84:b3:dd:8c:10:59:dc:2d:ea:48:1f:a0:02:46:7d:1f:6f:
         21:3a:2e:7e:22:d7:77:0f:4d:59:d7:ab:f0:7c:c1:cd:4e:40:
         90:54:b7:7a:36:30:d4:5d:7c:9b:e9:2f:a2:d3:5c:0e:8d:2b:
         85:5e:58:cf:95:7b:5b:00:c5:5d:fa:b9:fd:d3:fa:15:d2:c7:
         16:dc:7c:f9:e7:f6:f3:9a:13:6f:8d:0a:12:68:4a:62:39:d6:
         85:71:43:2b:fa:fe:e8:1a:a8:24:cd:43:5b:a5:d4:e8:66:72:
         ef:df:00:c6:5c:9b:77:e2:38:28:54:0e:40:ab:23:d0:8a:f8:
         d2:05:70:11:f5:5a:5e:5b:a7:56:4e:0e:97:ea:5b:69:cc:3f:
         28:3e:fd:1a:09:38:e4:a1:32:84:f7:45:18:1f:4d:e5:87:29:
         08:44:ba:28:eb:2c:43:48:9b:2f:0d:8b:14:7a:b1:5a:74:26:
         17:95:ac:4f:8f:99:93:ff:2a:fd:c9:0c:d4:e0:f1:ab:fd:be:
         24:c6:f6:3b:cf:50:63:1e:5a:1c:34:38:90:39:1e:74:7d:2f:
         30:81:43:bf:73:c9:64:cd:60:9e:d5:62:14:c1:85:a7:6b:98:
         bb:da:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org