Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/71c668f56360345e07a22396da09da773f2aed49.roa
File:                     71c668f56360345e07a22396da09da773f2aed49.roa (raw, json)
Hash identifier:          jo/f7L1rte1IPsIGmpD9Mume0oKxsXiHs/u6yyZ/Nj4=
Subject key identifier:   FC:8B:02:37:7D:F3:DD:F6:15:1C:0D:A5:D3:98:D0:C3:F6:9E:B4:E3
Certificate issuer:       /CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Certificate serial:       536A
Authority key identifier: 1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/71c668f56360345e07a22396da09da773f2aed49.roa
Signing time:             Thu 14 Dec 2023 22:35:34 +0000
ROA not before:           Thu 14 Dec 2023 22:35:34 +0000
ROA not after:            Sun 14 Dec 2025 22:35:34 +0000
asID:                     14795
IP address blocks:        161.131.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21354 (0x536a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
        Validity
            Not Before: Dec 14 22:35:34 2023 GMT
            Not After : Dec 14 22:35:34 2025 GMT
        Subject: CN=71c668f56360345e07a22396da09da773f2aed49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:cb:25:e2:bc:65:60:b6:88:65:b1:7b:35:
                    43:05:45:19:a6:0f:fd:22:03:21:d6:40:ef:46:c5:
                    25:ed:7e:90:f2:85:e5:fe:c4:8f:e3:18:e0:7f:ab:
                    7f:13:53:ab:36:fc:73:29:5a:8b:58:2e:9e:54:86:
                    e2:44:ab:8b:4c:c8:4b:e0:28:dc:c4:bb:90:ec:fd:
                    c6:b9:13:64:63:e5:5c:19:76:6a:a9:31:95:4e:e0:
                    15:3e:e8:21:a5:f9:2f:ca:bf:69:53:27:06:9b:2e:
                    b4:16:ad:8a:24:2d:09:9e:a0:d9:59:82:90:c0:33:
                    f4:62:8f:21:06:27:b6:77:1d:96:49:4b:d1:fd:84:
                    bc:0c:cb:c1:88:6b:13:ce:65:c6:1e:4d:42:84:18:
                    62:95:c1:bc:75:c3:49:24:a4:65:c5:86:00:9f:09:
                    d8:8b:3e:8b:da:fd:21:fd:9d:9c:11:e9:57:88:6b:
                    cb:49:cd:86:cf:56:b0:1b:95:37:5a:ff:65:76:56:
                    d0:5a:d7:99:b7:4a:7f:39:8d:fe:b7:86:26:d5:a2:
                    fe:59:32:db:99:78:6a:44:1f:13:4c:aa:de:80:51:
                    9c:d0:16:d8:e5:91:e5:29:8d:34:d3:03:2e:19:7d:
                    52:ba:96:db:75:50:4b:36:d2:9d:9e:1f:77:f8:76:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:02:37:7D:F3:DD:F6:15:1C:0D:A5:D3:98:D0:C3:F6:9E:B4:E3
            X509v3 Authority Key Identifier:
                keyid:1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/71c668f56360345e07a22396da09da773f2aed49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f6:62:62:4c:9d:cf:76:32:ee:c8:4f:90:74:c5:83:74:8e:
         b3:f5:54:ae:87:7d:3d:04:35:75:f0:42:bf:43:e7:42:0f:85:
         f0:39:6f:e3:02:b9:ab:60:f8:b4:d6:77:67:a4:6a:c8:d7:2e:
         a5:c3:68:f0:33:f7:b2:1e:a5:71:66:f9:c5:3f:05:fb:6c:77:
         65:75:d0:ea:c1:a2:59:64:ac:f7:fa:af:97:6e:fb:4f:a5:34:
         b4:c7:50:da:ad:e1:25:c0:1e:b4:d6:f7:b0:25:48:10:7e:5c:
         2c:a9:8d:3d:4c:a8:e8:a7:5a:ea:76:65:31:f6:5d:9f:87:64:
         ca:bb:97:2d:e5:28:92:2b:64:fc:70:d1:ed:0e:fe:71:cb:e1:
         cd:16:29:83:27:44:e3:a7:93:c5:1c:ea:7c:15:99:21:c6:fa:
         2f:f7:c0:8a:cd:a0:02:98:1b:3f:76:b0:bf:34:b4:c4:7d:f8:
         49:73:59:06:1e:9b:6f:5d:35:70:72:45:c2:23:f5:7e:cb:e6:
         21:e0:e3:d6:77:3e:83:43:c2:95:ca:f0:65:0d:d0:16:04:79:
         e5:8b:66:0b:9d:fc:ed:24:58:37:b6:8b:27:61:05:b2:6e:ee:
         32:7b:28:01:55:d5:9b:67:c0:41:db:36:a4:34:f4:8a:e1:26:
         79:14:44:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org