Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/31476674331d100530b5dddc31badd35a9e39952.roa
File:                     31476674331d100530b5dddc31badd35a9e39952.roa (raw, json)
Hash identifier:          R3nIFxqWgJY7ha04z1OHTVIy2THSzVn2EbhZFkMPGFM=
Subject key identifier:   4E:40:6C:61:1F:3B:01:D7:B0:D2:56:77:C9:DA:78:BA:E2:CE:E3:32
Certificate issuer:       /CN=021081310b983679c1c39476508572541f96603f
Certificate serial:       1FA12E
Authority key identifier: A3:74:80:FB:FB:A7:C8:7E:4D:A3:B8:D4:D2:D9:5D:03:9F:92:61:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021081310b983679c1c39476508572541f96603f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/31476674331d100530b5dddc31badd35a9e39952.roa
Signing time:             Tue 06 Jun 2023 05:06:52 +0000
ROA not before:           Mon 05 Jun 2023 05:06:51 +0000
ROA not after:            Fri 06 Jun 2025 05:06:51 +0000
asID:                     139235
IP address blocks:        131.196.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072878 (0x1fa12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021081310b983679c1c39476508572541f96603f
        Validity
            Not Before: Jun  5 05:06:51 2023 GMT
            Not After : Jun  6 05:06:51 2025 GMT
        Subject: CN=31476674331d100530b5dddc31badd35a9e39952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f3:f7:d4:af:c9:73:38:22:e4:3f:22:bf:56:
                    b7:97:55:3f:9b:81:3f:0d:45:17:39:6f:a2:88:dd:
                    44:08:e5:43:f5:bf:9c:97:4b:97:06:57:62:7f:5b:
                    78:50:6a:a7:90:0f:81:fd:44:a3:94:cd:a8:a9:7a:
                    d2:2a:01:23:b7:ec:10:1d:a4:b6:73:0f:67:bc:68:
                    eb:92:7e:64:a4:4e:c4:dc:94:6d:44:dd:bc:0d:7e:
                    48:92:59:07:51:a7:ab:dc:67:f6:a5:b9:94:5f:3d:
                    db:3f:bd:4e:fb:2d:3e:58:70:f8:69:95:52:ff:71:
                    72:4d:d1:67:de:9d:e7:c1:63:14:78:e2:f1:51:76:
                    e2:19:c0:ae:f9:60:0b:46:70:68:96:e2:52:6f:d3:
                    a6:f8:86:0a:17:80:e7:71:c1:1b:fa:3a:7c:7b:39:
                    7d:7a:c4:9f:2c:f8:7a:0f:b6:0e:6b:44:c3:0c:dc:
                    f7:4b:0a:21:f3:66:e8:95:68:4d:20:7a:ca:30:fa:
                    0b:f7:c0:4f:7d:0a:97:8e:9e:6d:8a:04:76:19:07:
                    bd:1b:dd:35:c1:70:cf:69:c4:b6:5d:16:55:7b:86:
                    a8:27:be:0d:39:f4:90:ff:0b:5c:ca:06:15:f4:9d:
                    d9:a3:fd:6e:cd:69:2f:01:c4:b0:db:8f:46:0c:84:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:6C:61:1F:3B:01:D7:B0:D2:56:77:C9:DA:78:BA:E2:CE:E3:32
            X509v3 Authority Key Identifier:
                keyid:A3:74:80:FB:FB:A7:C8:7E:4D:A3:B8:D4:D2:D9:5D:03:9F:92:61:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021081310b983679c1c39476508572541f96603f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/31476674331d100530b5dddc31badd35a9e39952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/021081310b983679c1c39476508572541f96603f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:15:dd:ed:ff:b9:42:27:04:3f:38:38:c0:36:b6:95:e4:b5:
         38:42:7e:18:4a:92:6c:99:c5:65:89:ae:9a:75:d2:d9:2f:bd:
         f4:3c:f7:62:db:73:af:0f:e6:b7:3c:84:02:d8:26:e2:eb:5f:
         d8:53:b8:f9:4d:87:74:82:d3:15:05:8b:57:d4:b4:e0:03:0a:
         12:cc:99:9b:8e:70:a5:0e:03:59:49:90:81:6f:7c:80:39:d0:
         9d:71:65:72:ea:34:e5:da:ab:18:10:1e:74:2b:2b:ec:bc:b2:
         7e:3e:ad:26:c9:3d:f5:53:dc:e0:b8:35:c5:df:d2:ec:06:bb:
         e4:16:03:9e:33:3b:74:be:e1:9d:13:86:b4:34:79:5e:d4:cf:
         aa:53:f2:4a:66:e5:4e:ed:5d:43:84:17:41:7f:ab:13:95:fb:
         a7:94:7d:14:91:bb:fd:32:8b:59:65:f8:e1:ac:48:11:12:05:
         36:ab:1e:b2:e7:cd:84:fa:78:85:ce:0d:c7:99:4d:eb:75:f8:
         91:53:4c:df:37:33:8f:9b:e3:87:05:70:e3:7a:b5:d1:4c:49:
         d7:8e:7d:7c:11:d1:67:1f:45:ad:21:93:ae:98:68:e3:6b:9b:
         be:7c:39:93:49:ac:46:4c:72:7a:dd:5b:3e:8e:74:90:a4:56:
         ea:b6:a6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org