Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa.roa
File:                     7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa.roa (raw, json)
Hash identifier:          pSH8Mih+ZI25Y5yMcV76uXyMdPLqoe+pR4aEQqYtf/0=
Subject key identifier:   AA:4B:8B:25:68:D9:59:FE:6B:2A:A1:2E:90:42:5E:CD:65:54:3E:1D
Certificate issuer:       /CN=7cd1ba1c4f2170f7f3f283070d2f069edc42eeef
Certificate serial:       3245
Authority key identifier: 8F:31:10:80:6C:2F:2C:5B:E3:65:90:C1:B5:59:B5:9F:E3:15:DC:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa.roa
Signing time:             Thu 13 Oct 2022 16:30:56 +0000
ROA not before:           Wed 05 Oct 2022 22:13:33 +0000
ROA not after:            Mon 07 Oct 2024 22:13:33 +0000
asID:                     10778
IP address blocks:        168.196.184.0/22 maxlen: 22
                          168.196.184.0/23 maxlen: 24
                          168.196.186.0/23 maxlen: 24
                          168.196.184.0/24 maxlen: 24
                          168.196.185.0/24 maxlen: 24
                          168.196.186.0/24 maxlen: 24
                          168.196.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12869 (0x3245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd1ba1c4f2170f7f3f283070d2f069edc42eeef
        Validity
            Not Before: Oct  5 22:13:33 2022 GMT
            Not After : Oct  7 22:13:33 2024 GMT
        Subject: CN=7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:c2:c7:34:81:18:57:53:5f:d2:29:1a:4d:
                    aa:1a:dd:d8:b2:20:d8:6c:04:84:ae:22:b0:8f:d5:
                    ae:0f:fe:ad:73:27:a3:48:c3:e5:c0:19:4f:cf:bc:
                    4e:9e:db:94:3d:a2:2e:52:fe:e3:a9:76:9f:7c:69:
                    cb:a3:b7:a0:e8:fc:dd:b8:65:47:b3:f3:f7:b0:fb:
                    d9:a0:8d:16:3a:9a:ee:ed:40:5a:ae:94:db:1f:44:
                    68:83:80:43:03:bb:be:1a:06:35:d3:82:54:89:68:
                    b6:d7:9a:bf:c4:3d:cb:70:67:38:e3:80:53:0d:ef:
                    4a:1f:2f:e3:d1:64:56:36:9d:34:42:33:a1:93:8c:
                    38:a3:16:5a:d3:cc:63:20:e1:30:7d:b1:b9:8e:d9:
                    63:7a:5c:c3:0a:ac:75:ba:3b:0b:2b:b9:32:29:f4:
                    d7:27:0e:5c:7b:2e:77:6c:0f:1f:8c:9d:b8:45:dd:
                    2b:94:e7:07:5c:03:34:bc:a1:52:2b:9c:e0:14:a8:
                    d2:99:94:90:93:48:4a:0b:65:f3:5e:c5:c1:3d:88:
                    e2:fa:84:1c:55:06:5b:a4:ba:dd:d0:9b:9b:03:a4:
                    55:62:b3:8f:52:78:80:d7:2b:19:df:de:03:36:e3:
                    2b:36:67:bc:ff:a1:08:59:47:c4:47:dd:92:42:62:
                    f5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4B:8B:25:68:D9:59:FE:6B:2A:A1:2E:90:42:5E:CD:65:54:3E:1D
            X509v3 Authority Key Identifier:
                keyid:8F:31:10:80:6C:2F:2C:5B:E3:65:90:C1:B5:59:B5:9F:E3:15:DC:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7faf133ed4ffdf39a079ceca8f442d7f6db5d7aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:8b:49:b1:4c:2f:ac:f1:89:c4:83:06:64:58:05:e5:47:
         d5:46:dd:fa:3b:0b:16:80:a1:36:30:a2:48:23:da:2b:77:41:
         4f:f1:44:b1:54:a3:e0:de:c6:cc:6c:f0:5b:1d:95:6f:a1:af:
         90:24:ae:0b:05:9c:e1:6b:dc:52:b1:d4:7c:a4:18:0a:e6:60:
         bc:be:17:fd:77:9a:06:88:56:35:18:f6:cc:a5:12:6d:33:2b:
         19:b9:74:db:47:36:c0:75:db:6b:46:b2:d8:71:d0:e2:e9:f2:
         98:7c:e3:c4:3b:6a:94:73:f8:ee:77:1a:a7:1b:97:65:40:2b:
         ad:e2:b4:20:94:27:81:c8:b3:5f:7e:2c:62:db:c2:54:45:0a:
         39:24:13:77:3a:b2:4e:55:4e:73:b8:d4:b8:e9:51:1c:4a:d4:
         54:ca:4f:88:b4:91:03:21:2b:2d:05:78:79:16:97:d9:66:73:
         df:b1:61:8a:78:a8:e9:f0:26:40:77:fb:05:8b:5b:3f:b7:36:
         a4:b4:25:21:c5:18:99:4d:2b:98:92:59:ac:83:b9:bf:8a:43:
         2f:d0:a0:73:50:6f:5c:83:d6:54:6b:bd:3b:5a:cc:af:f9:a2:
         cb:47:42:9e:2a:63:ad:03:f9:35:60:73:96:97:af:4f:76:bc:
         7b:a5:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org