Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8cfc6036a0f1c49fb7f9a7e847c877e2cd22e00c.roa
File:                     8cfc6036a0f1c49fb7f9a7e847c877e2cd22e00c.roa (raw, json)
Hash identifier:          Sb6zP3ovppf+/fY36HrNxZOJ/rqB5+sNoI9U0Qg/DJc=
Subject key identifier:   3F:21:E6:4F:DA:88:4D:8D:7A:01:EB:34:0D:AB:0C:C2:50:D3:2D:C6
Certificate issuer:       /CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Certificate serial:       49F4
Authority key identifier: 1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8cfc6036a0f1c49fb7f9a7e847c877e2cd22e00c.roa
Signing time:             Thu 14 Dec 2023 22:34:31 +0000
ROA not before:           Thu 14 Dec 2023 22:34:31 +0000
ROA not after:            Sun 14 Dec 2025 22:34:31 +0000
asID:                     14795
IP address blocks:        161.131.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18932 (0x49f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
        Validity
            Not Before: Dec 14 22:34:31 2023 GMT
            Not After : Dec 14 22:34:31 2025 GMT
        Subject: CN=8cfc6036a0f1c49fb7f9a7e847c877e2cd22e00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:ca:34:c5:2f:71:a2:7f:76:8f:da:03:e0:
                    5a:ec:b3:89:82:e1:cf:6b:e9:91:46:f6:e8:fd:6d:
                    b5:23:7f:c6:10:c1:38:0a:2c:09:df:f8:70:bb:0a:
                    6a:3a:20:74:b5:cc:7c:b2:0b:5f:14:10:62:a0:59:
                    34:26:44:59:bc:c1:ec:d1:a7:47:10:2e:56:53:ae:
                    62:c7:34:87:fc:9b:3b:73:52:19:67:24:9e:ab:98:
                    04:99:fb:33:68:d7:c7:9b:2e:31:86:2e:36:b3:66:
                    38:b1:55:c6:a5:40:ef:41:db:04:04:dd:56:db:f3:
                    fd:b6:60:88:e1:76:21:f3:73:d7:5d:ac:7c:82:a6:
                    18:ae:ec:26:cd:65:46:43:37:07:cb:d8:4d:7a:47:
                    3b:02:f3:0c:b1:d7:8a:be:c8:5d:fa:2a:9c:fe:36:
                    99:21:38:bc:ed:e2:da:a8:72:dd:5b:2b:5f:60:5d:
                    19:f7:31:a4:cc:0b:12:5e:59:c4:c8:ba:8a:6f:03:
                    2f:42:7b:5b:f9:b8:24:ee:0b:d6:86:e9:86:69:10:
                    8c:fd:68:06:94:59:e6:47:25:d4:26:76:0f:dc:84:
                    e8:fa:3c:74:9c:d1:c3:14:3f:4b:a8:36:33:6a:b7:
                    2b:36:28:1d:e8:ae:b9:d8:1c:09:8b:f1:67:c5:34:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:E6:4F:DA:88:4D:8D:7A:01:EB:34:0D:AB:0C:C2:50:D3:2D:C6
            X509v3 Authority Key Identifier:
                keyid:1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8cfc6036a0f1c49fb7f9a7e847c877e2cd22e00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3d:86:59:16:8d:78:d9:f2:11:7a:d8:5e:61:26:a8:d5:ce:
         b5:33:ca:4c:35:1e:d9:a3:33:91:59:d5:61:47:f9:58:93:d7:
         9e:14:02:e8:a7:9d:1e:72:57:d8:f1:af:90:c8:cc:ce:a4:fe:
         35:32:44:24:2a:d8:d6:ca:a6:fd:6d:19:2b:0b:25:93:74:3c:
         d2:c3:82:45:11:cf:54:cc:4e:0f:a7:f2:fb:e2:0c:73:b8:64:
         78:c4:28:9e:65:95:5f:99:89:fe:11:aa:52:51:60:f4:3d:1e:
         47:c3:b2:1e:73:32:d2:73:da:d4:4d:38:aa:7d:21:8c:b4:ec:
         0a:5f:42:85:eb:a9:13:90:3e:ee:96:a1:d5:b5:80:2f:75:37:
         c2:df:82:61:be:97:cf:dd:ef:33:cb:5f:c3:6e:24:88:a8:11:
         f8:44:9f:05:b3:af:8d:0c:25:d6:6f:1b:f0:4d:15:ba:df:a6:
         81:e4:46:24:3d:7c:ea:fb:57:f8:78:f0:cd:13:76:40:5d:97:
         6c:3a:00:96:4d:3a:9a:c0:49:4f:36:39:c5:91:b1:ed:15:08:
         c5:88:6c:51:05:80:af:63:dc:21:19:52:5d:47:89:22:95:bb:
         d3:48:5e:d6:a2:fc:ea:42:d7:b5:47:b0:ed:f9:3e:e4:e2:9a:
         2a:c1:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org