Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/a7b4c9de5db63e59c23c7f7da8e3c8951f1eabd7.roa
File:                     a7b4c9de5db63e59c23c7f7da8e3c8951f1eabd7.roa (raw, json)
Hash identifier:          faWsIdr1XwlRkFi8YdvmjM+WZFolmBNB+BaoWGnwi5g=
Subject key identifier:   9A:36:7A:F5:4A:29:CD:D9:06:0A:E1:D1:B6:9A:67:05:14:84:15:41
Certificate issuer:       /CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Certificate serial:       43D2
Authority key identifier: 1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/a7b4c9de5db63e59c23c7f7da8e3c8951f1eabd7.roa
Signing time:             Thu 14 Dec 2023 22:14:08 +0000
ROA not before:           Thu 14 Dec 2023 22:14:08 +0000
ROA not after:            Sun 14 Dec 2025 22:14:08 +0000
asID:                     14795
IP address blocks:        161.131.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17362 (0x43d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
        Validity
            Not Before: Dec 14 22:14:08 2023 GMT
            Not After : Dec 14 22:14:08 2025 GMT
        Subject: CN=a7b4c9de5db63e59c23c7f7da8e3c8951f1eabd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:ab:64:f7:25:1f:1f:ae:31:0a:7d:ab:d2:
                    d2:0d:30:ed:ea:ef:ee:5a:3a:3d:b5:37:52:86:d7:
                    3a:1c:c4:71:d1:7f:0d:2d:43:a8:e4:91:69:1f:e5:
                    bd:9a:92:8c:ae:7d:53:19:4b:90:01:00:11:2a:51:
                    54:a1:7b:83:7e:d6:82:86:70:4e:50:fe:44:c9:97:
                    f8:85:c9:69:17:49:3f:1f:42:d4:33:13:c8:7c:9f:
                    a7:e3:34:3a:0b:82:25:d4:95:9d:13:ea:6d:37:8f:
                    f7:cd:7b:f6:a3:29:cc:28:67:d6:02:56:1b:26:5b:
                    12:fc:91:cf:10:a1:cc:bd:68:c6:61:60:87:7d:18:
                    ba:96:1b:52:73:bb:03:26:95:da:3b:58:0d:2a:04:
                    81:58:38:61:15:5d:bb:9a:3b:eb:81:97:e6:2d:4b:
                    a8:90:6a:ec:bd:90:67:01:30:7b:b5:b0:54:9c:a9:
                    fe:25:d3:12:1f:40:0e:d2:cc:31:be:b8:f6:0d:e4:
                    41:0d:a0:18:ca:42:e4:ca:fe:63:3f:ef:3c:99:e5:
                    26:a7:eb:9a:06:d9:9b:64:c3:c0:a5:ad:51:79:98:
                    39:97:5b:43:c7:85:39:8d:2c:40:4d:04:7d:6f:95:
                    14:74:c4:7f:86:a5:24:1a:b2:80:fd:df:a4:16:e9:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:7A:F5:4A:29:CD:D9:06:0A:E1:D1:B6:9A:67:05:14:84:15:41
            X509v3 Authority Key Identifier:
                keyid:1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/a7b4c9de5db63e59c23c7f7da8e3c8951f1eabd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:49:75:d9:18:d0:7c:92:61:6a:42:8f:31:f7:1f:ca:8b:
         ba:1e:ee:35:cb:8e:2d:ae:d8:54:91:79:46:33:7b:f5:81:4c:
         d5:2f:c2:6f:ea:58:f1:37:83:cd:85:1a:20:24:e4:16:62:e0:
         38:91:44:1d:31:60:3e:91:45:88:e9:e1:c5:19:28:f3:1b:4b:
         c6:d1:e8:bd:83:8a:40:67:07:42:77:c9:71:eb:04:07:db:65:
         d6:05:8a:87:fe:80:01:8a:8d:a8:66:30:04:97:39:76:ea:7e:
         ee:b0:58:2c:79:b1:0e:ee:d2:60:24:a4:58:84:c0:88:f2:c6:
         42:db:12:ce:32:1d:92:d6:9d:aa:c1:ee:1c:63:48:0d:53:20:
         07:de:5c:66:df:85:48:4c:7f:66:7c:2e:d0:85:c0:be:43:68:
         84:a4:7f:9f:15:6a:d2:eb:94:66:bc:19:38:59:25:41:7b:f1:
         dd:d7:0c:ba:1b:34:01:c0:97:e4:8f:3f:88:84:1f:70:cf:3f:
         90:cc:6f:9d:eb:52:e7:6b:f8:78:9e:df:58:5e:c8:3a:e7:9f:
         a8:0f:cd:cf:6d:d4:2e:12:43:2b:eb:bd:13:89:c6:d7:3c:27:
         c0:2a:7a:6c:b0:a9:68:05:35:3a:a9:b8:fc:f2:71:a9:26:9e:
         02:61:aa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org