Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/e72bd47358c4fab06a0d7c6df2d49fca258c4979.roa
File:                     e72bd47358c4fab06a0d7c6df2d49fca258c4979.roa (raw, json)
Hash identifier:          P+gwPWLW/Opo13otNqo4PzyDDbBfXDtcNLKS/IL0VS8=
Subject key identifier:   55:64:EA:22:77:9A:B4:03:8E:08:00:BF:A4:9B:1D:BF:3B:6A:1A:8B
Certificate issuer:       /CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Certificate serial:       4D40
Authority key identifier: 1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/e72bd47358c4fab06a0d7c6df2d49fca258c4979.roa
Signing time:             Thu 14 Dec 2023 22:34:49 +0000
ROA not before:           Thu 14 Dec 2023 22:34:49 +0000
ROA not after:            Sun 14 Dec 2025 22:34:49 +0000
asID:                     14795
IP address blocks:        161.131.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19776 (0x4d40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
        Validity
            Not Before: Dec 14 22:34:49 2023 GMT
            Not After : Dec 14 22:34:49 2025 GMT
        Subject: CN=e72bd47358c4fab06a0d7c6df2d49fca258c4979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:ea:3b:68:04:d5:85:cc:0d:f4:44:23:ea:
                    21:b3:af:ea:3f:96:b5:80:8c:ca:90:d4:af:a2:6b:
                    dc:b0:56:a0:6f:b7:2e:d6:1a:8a:a4:c0:5f:cb:14:
                    ce:2c:0f:88:9a:f9:d7:6c:3f:4a:c9:6e:c8:9c:1e:
                    67:bd:9c:f7:6a:a6:4a:02:1a:25:63:29:d4:6a:a6:
                    a7:f2:e8:cb:88:02:87:c7:85:69:5c:e4:b4:a3:61:
                    d4:22:ff:31:e4:07:67:d8:f5:12:9a:c7:ac:ad:bc:
                    23:13:5b:d9:a0:fc:14:76:a3:5e:7c:76:10:a5:bf:
                    16:c5:0c:a9:04:ff:5b:44:b6:38:4e:f1:f7:5d:78:
                    1d:20:f6:1e:22:9f:f8:fd:1b:1f:4b:9a:9e:8d:29:
                    11:68:1f:98:e7:5d:b7:c7:4c:f0:32:1b:30:07:41:
                    ff:78:ec:82:5a:b2:6f:49:1e:a0:8e:e2:95:6d:20:
                    64:42:ea:22:4f:e8:3d:67:17:5a:77:a8:17:13:14:
                    54:b5:3e:d3:d1:58:14:28:2c:71:0e:08:58:e9:75:
                    2d:c3:91:f9:f9:1f:e6:b5:da:a2:c7:81:c2:d5:b3:
                    06:d6:e0:07:42:e5:88:62:1c:a9:be:91:32:e5:f7:
                    79:07:10:19:f2:8f:78:98:84:5a:3c:ea:b4:bf:89:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:EA:22:77:9A:B4:03:8E:08:00:BF:A4:9B:1D:BF:3B:6A:1A:8B
            X509v3 Authority Key Identifier:
                keyid:1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/e72bd47358c4fab06a0d7c6df2d49fca258c4979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:ef:a4:7d:15:bd:c4:63:6a:d2:4a:ac:6f:c6:47:2b:58:
         a2:51:67:00:1e:8a:db:14:11:be:a3:45:10:43:0d:5f:e3:43:
         ce:0c:2f:79:89:df:4a:47:8d:8b:02:d1:12:5b:f3:68:ee:8e:
         43:dc:42:fa:95:e5:54:d3:4a:c0:e0:3f:c5:f4:41:ed:ae:29:
         6c:75:a8:7c:68:12:f6:d4:1f:03:ad:2e:94:c7:75:df:b3:6f:
         7c:f7:fe:6f:8a:45:d2:d3:dc:4d:2b:cd:a8:d4:b1:8b:51:44:
         57:42:67:7a:5e:41:56:cc:ff:69:90:78:61:54:f2:7a:c1:29:
         d8:35:2e:5c:01:31:40:95:fe:bf:6b:55:8c:72:ae:ce:8b:89:
         70:6d:b8:0a:a4:e0:6f:7a:a8:91:8e:92:9b:db:eb:c7:f9:2f:
         59:60:31:70:87:03:a5:c2:05:73:ac:bd:6e:0d:8d:2f:b4:29:
         8d:a7:b5:da:31:80:a9:13:88:97:eb:c0:f3:ce:75:30:a6:80:
         ef:59:57:a8:e0:92:b9:6d:9f:10:c3:c8:41:7a:ca:a2:34:94:
         1b:5b:27:b0:d9:fa:4b:ae:eb:db:4f:1d:06:32:e2:b4:b8:89:
         75:f8:b9:95:99:53:be:77:62:67:f3:1d:c5:6a:af:92:f0:19:
         f8:9e:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org