Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/e7faec4616c32f7ea591953de041f2a5442737bf.roa
File:                     e7faec4616c32f7ea591953de041f2a5442737bf.roa (raw, json)
Hash identifier:          88IjnBriwmSrtuKzVKNyeXEyzNks9NrHdUG2JEavPog=
Subject key identifier:   06:53:C5:71:1F:61:92:DA:FE:24:F9:1A:D7:34:3C:69:D0:ED:30:0B
Certificate issuer:       /CN=8c041e50afd913d8324a7c556750cd4fc1dafbbe
Certificate serial:       2059AB
Authority key identifier: A6:C1:19:CB:89:C0:24:64:6D:FE:6B:06:8A:28:7C:60:C0:CB:D5:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c041e50afd913d8324a7c556750cd4fc1dafbbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/e7faec4616c32f7ea591953de041f2a5442737bf.roa
Signing time:             Sat 24 Jun 2023 16:40:23 +0000
ROA not before:           Fri 23 Jun 2023 16:40:22 +0000
ROA not after:            Tue 24 Jun 2025 16:40:22 +0000
asID:                     265743
IP address blocks:        128.201.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120107 (0x2059ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c041e50afd913d8324a7c556750cd4fc1dafbbe
        Validity
            Not Before: Jun 23 16:40:22 2023 GMT
            Not After : Jun 24 16:40:22 2025 GMT
        Subject: CN=e7faec4616c32f7ea591953de041f2a5442737bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:c2:81:9f:c5:9b:a0:67:b1:5d:de:12:0c:
                    d7:29:bb:37:f2:8e:30:ae:4d:c5:81:6c:cb:3c:ad:
                    1d:45:f1:a6:57:1f:83:9c:8c:4a:78:74:de:24:3b:
                    8b:f0:f9:bd:fa:b2:fc:e9:f6:1b:81:0d:60:1b:8f:
                    de:6d:af:5f:66:3b:83:17:93:2b:1a:59:49:b6:ba:
                    ab:d8:b6:b8:f0:17:f6:1a:9c:fd:d3:09:09:41:0b:
                    bb:d3:ae:e0:20:06:85:44:f2:46:37:00:bb:46:15:
                    aa:a2:2a:66:bb:3c:94:22:00:24:11:3a:83:e0:0c:
                    16:fd:fe:66:29:a3:00:d4:e2:d0:b2:9f:9f:b2:2b:
                    eb:ec:43:80:85:05:50:16:4a:37:b4:66:ac:ac:2b:
                    d3:c8:d1:93:c2:d0:a6:38:13:80:07:d8:d3:b6:6e:
                    12:83:93:68:8b:a7:9d:0c:58:0b:34:c2:0d:44:76:
                    a9:2a:9a:85:e1:6a:e7:f2:39:c4:d3:0e:49:5f:0d:
                    a6:81:a3:71:f1:32:25:0a:39:f2:07:9b:d9:94:06:
                    3a:65:85:0b:37:4a:1b:dc:b7:98:fb:24:12:03:42:
                    94:46:19:d6:f0:1d:4e:2d:ea:fb:d6:dc:76:6f:2e:
                    91:1f:5c:3c:53:3a:ed:6c:a2:66:c6:ae:2c:85:14:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:53:C5:71:1F:61:92:DA:FE:24:F9:1A:D7:34:3C:69:D0:ED:30:0B
            X509v3 Authority Key Identifier:
                keyid:A6:C1:19:CB:89:C0:24:64:6D:FE:6B:06:8A:28:7C:60:C0:CB:D5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c041e50afd913d8324a7c556750cd4fc1dafbbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/e7faec4616c32f7ea591953de041f2a5442737bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/8c041e50afd913d8324a7c556750cd4fc1dafbbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:dd:44:84:56:73:03:db:ed:96:b7:c0:94:0b:01:89:1c:39:
         96:2d:19:99:a8:dd:0f:97:e4:18:1e:6c:0c:7a:cf:07:cc:f3:
         a2:a6:b1:6c:f8:79:ec:47:22:38:7b:8b:7a:00:71:65:b1:40:
         36:d2:51:73:26:f4:13:d2:57:01:f5:1a:5c:46:45:11:8b:16:
         b4:a5:01:08:1f:13:b9:c0:3b:75:25:e5:17:52:06:0e:15:e3:
         bf:22:c9:c0:4e:6f:2f:42:f3:30:58:82:0e:63:bd:ee:ca:6c:
         1e:19:8f:3b:6d:f8:6f:25:39:69:cb:a2:78:9d:e4:a6:91:be:
         c4:7c:83:33:29:fa:69:35:6d:07:e8:fc:a8:32:04:63:99:a1:
         5a:ab:43:42:fc:be:65:65:e3:cd:15:00:90:f2:c7:72:fc:31:
         cd:ca:b6:f5:34:0e:ac:77:58:68:a9:f1:59:93:27:06:f2:69:
         97:60:70:5a:a5:09:63:82:e2:1a:b0:29:38:d0:8a:20:63:98:
         f7:6c:1f:31:22:da:3a:ee:c0:86:e7:ed:7a:48:56:52:51:ba:
         48:21:76:1b:15:0a:c9:25:a2:a8:e5:e1:59:6b:8e:14:ed:29:
         15:a2:68:8d:c1:62:64:e2:8d:2f:ea:96:83:df:76:c4:1a:d7:
         87:46:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org