Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/61d0ce2878f086ab714322d826380684907260ea.roa
File:                     61d0ce2878f086ab714322d826380684907260ea.roa (raw, json)
Hash identifier:          ukjEGOpD/63IXR8hFZjI3PhhHjM1YocTbOv+r5ppC6c=
Subject key identifier:   FA:58:2C:E3:7F:89:BC:AA:90:DF:CE:F2:86:EE:F2:3A:35:18:82:7E
Certificate issuer:       /CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
Certificate serial:       0D7F14
Authority key identifier: 08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/61d0ce2878f086ab714322d826380684907260ea.roa
Signing time:             Wed 24 Mar 2021 14:37:16 +0000
ROA not before:           Wed 24 Mar 2021 14:37:16 +0000
ROA not after:            Tue 24 Mar 2026 14:37:16 +0000
asID:                     16973
IP address blocks:        168.205.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884500 (0xd7f14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
        Validity
            Not Before: Mar 24 14:37:16 2021 GMT
            Not After : Mar 24 14:37:16 2026 GMT
        Subject: CN=61d0ce2878f086ab714322d826380684907260ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:da:66:da:f5:f2:38:cf:cf:35:95:42:16:
                    e2:f2:f4:e7:5c:61:b1:5b:b2:57:99:89:8d:3e:72:
                    0a:6e:e5:24:16:5b:73:6d:d0:1b:41:25:5d:bd:59:
                    d3:af:5a:0f:83:03:26:39:30:fe:9a:f6:d1:e1:7e:
                    6a:59:78:ee:43:82:09:4f:0b:89:41:52:86:cd:ba:
                    08:3b:2c:e1:fb:7c:d5:0b:cf:d8:47:b9:79:aa:50:
                    95:94:1e:59:f6:53:fd:44:63:32:37:2c:7b:00:68:
                    7a:8b:03:f7:b7:e6:68:b5:5a:b7:41:43:53:3b:01:
                    c8:43:a1:ee:45:65:13:fc:50:e1:00:b2:0f:6a:f8:
                    ac:54:e9:92:91:f6:17:f2:68:7b:1e:c2:ed:4e:3d:
                    c2:8f:46:fe:11:2b:af:08:51:a1:bb:03:8d:0d:64:
                    af:30:bf:db:66:fb:19:03:21:45:06:3b:bc:72:f4:
                    d0:ed:21:bd:47:2a:a5:bd:69:7e:b7:88:67:0e:e7:
                    a2:25:f8:66:bb:e6:82:13:10:bb:5c:28:f2:08:27:
                    3c:85:4f:1a:20:cc:1e:74:3d:36:94:1d:3b:c4:dc:
                    de:98:4d:47:83:15:a4:93:d3:a3:e7:50:36:ca:a3:
                    df:5b:be:b7:fe:98:79:a4:e9:c4:81:67:8c:cf:6d:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:58:2C:E3:7F:89:BC:AA:90:DF:CE:F2:86:EE:F2:3A:35:18:82:7E
            X509v3 Authority Key Identifier:
                keyid:08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/61d0ce2878f086ab714322d826380684907260ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/41f7ad2592489a8e238bbf1d55399b9278c418a6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:39:79:ef:e5:42:c6:77:a2:e7:43:f8:56:ea:29:62:8c:
         df:71:0e:52:05:88:bf:8d:35:7c:ea:cd:a8:2a:43:12:cc:ba:
         c1:2d:f2:0e:2e:99:e3:54:96:50:83:6d:20:1b:98:97:b8:0d:
         4b:77:3d:9f:ee:fb:40:55:9d:e0:0a:0b:04:ab:c6:42:5d:ea:
         ea:af:8b:39:eb:5b:5b:83:db:d2:84:20:f0:b6:23:c9:48:3e:
         44:60:2d:d4:34:b1:6a:df:70:82:1e:08:88:2b:cd:37:80:fd:
         86:1f:46:cd:67:78:38:34:6b:e5:c3:a8:de:45:a4:87:85:ca:
         ed:51:68:d7:1a:aa:2f:38:10:13:c9:d6:e2:37:6c:7a:80:85:
         e3:75:ae:fe:87:a0:e4:d7:74:3f:38:85:9c:18:58:66:ad:21:
         d9:71:4b:06:19:62:0e:f1:bb:3d:49:8e:23:f9:18:f6:7b:ee:
         08:bd:30:fa:1b:75:86:10:f9:1e:f0:05:33:f3:5d:2e:6d:11:
         f3:f5:b2:72:d9:3e:65:4c:5c:5f:e9:a3:7d:ca:82:21:ed:64:
         61:5b:01:c4:a2:36:c8:00:79:af:26:ce:cb:c4:90:cf:04:61:
         c8:6f:48:ec:75:26:47:ee:24:8c:47:e9:00:3e:08:b1:d6:fa:
         f8:16:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org