Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c37cf745c75f46270a21f0eb7f6097d539464ef4.roa
File:                     c37cf745c75f46270a21f0eb7f6097d539464ef4.roa (raw, json)
Hash identifier:          sFTplfiJNsMjwc1DropCyemgwvEvM2SWCZDRkhmPVgo=
Subject key identifier:   4B:71:CC:EF:8D:97:D7:CB:DE:BE:40:5E:D8:5B:94:13:6F:B5:FF:6E
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       223932
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c37cf745c75f46270a21f0eb7f6097d539464ef4.roa
Signing time:             Fri 14 Jul 2023 20:39:22 +0000
ROA not before:           Thu 13 Jul 2023 20:39:21 +0000
ROA not after:            Mon 14 Jul 2025 20:39:21 +0000
asID:                     271975
IP address blocks:        66.231.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242866 (0x223932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Jul 13 20:39:21 2023 GMT
            Not After : Jul 14 20:39:21 2025 GMT
        Subject: CN=c37cf745c75f46270a21f0eb7f6097d539464ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:93:3e:5d:8b:49:21:b3:73:a8:a0:9b:b9:
                    4d:53:22:8f:4d:99:44:6c:08:5e:0f:be:cd:b5:c8:
                    d2:ba:be:4b:bb:89:03:a7:96:ea:c1:75:1d:de:c6:
                    d9:3d:79:48:ed:25:06:ae:58:07:40:dd:63:c3:d6:
                    b3:58:28:c6:88:59:cc:2b:ea:cb:76:15:a0:d4:e8:
                    a0:98:49:75:d1:10:17:f9:12:7d:19:05:71:9d:2f:
                    81:b7:01:00:da:6c:b8:1c:f5:b6:71:32:68:93:22:
                    92:48:96:e2:4b:16:39:f0:98:0b:97:ee:3a:ae:f4:
                    1b:77:41:30:03:34:5c:b6:64:cc:93:a0:6b:a8:69:
                    be:06:fc:de:fe:8e:29:25:d4:fb:a2:e4:a4:cb:eb:
                    e1:18:15:cd:3e:0a:c1:06:9e:04:d3:21:9d:07:0b:
                    ee:72:41:ab:a0:5e:ff:56:22:46:60:69:23:59:89:
                    3b:5a:45:ee:04:71:df:33:f0:a5:99:f2:18:91:ed:
                    6f:71:62:c4:19:50:be:d3:50:46:fb:0d:3f:d3:8e:
                    b8:43:36:4c:03:78:bc:a2:c0:16:4d:a4:80:2e:7c:
                    bd:7f:be:d2:47:79:ea:05:5f:21:ef:2a:fc:0f:ef:
                    17:a9:46:af:be:67:30:79:b4:70:2b:b8:d7:0f:a3:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:71:CC:EF:8D:97:D7:CB:DE:BE:40:5E:D8:5B:94:13:6F:B5:FF:6E
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/c37cf745c75f46270a21f0eb7f6097d539464ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:3c:82:9e:04:a8:29:99:88:a9:08:e5:c6:88:a6:75:aa:
         12:cd:38:27:1a:7d:f0:6e:db:8c:83:b3:c9:54:e3:14:b0:c1:
         5e:b9:f5:90:03:41:cf:d9:64:31:d5:0f:47:26:bc:7f:09:cc:
         a3:f1:6e:b1:33:50:2e:c2:a0:09:ff:04:1c:d5:74:10:b7:91:
         d4:b6:9a:a1:7c:18:cd:78:40:a3:39:d3:56:fe:86:ac:2c:d6:
         9f:43:26:62:b9:f4:8f:19:bf:b3:2f:3a:a4:d6:5c:e8:04:e1:
         6c:68:4a:31:6e:b6:26:a5:22:63:d8:a6:05:35:87:d7:ea:f6:
         4d:6f:3e:d4:20:15:5f:69:54:b8:8a:98:86:f0:e4:46:e7:65:
         db:33:26:dd:c2:a9:34:aa:53:be:31:31:45:ce:32:eb:58:c8:
         4f:b4:9a:3f:a0:b0:66:d6:d3:a6:fe:c4:51:2d:fd:fe:82:c8:
         23:44:0c:b8:70:03:0f:f0:1c:ad:a4:3f:83:79:6c:ba:06:c3:
         38:6f:79:eb:f8:ca:52:ad:1b:0a:ca:64:b4:f9:3f:f0:77:c5:
         70:7a:2d:90:a1:9d:b5:dd:2c:ac:25:f9:f1:33:75:49:a9:f2:
         ba:37:98:34:0b:1a:e8:77:23:54:82:be:55:19:ee:cd:17:19:
         42:dc:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org