Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/6d41e7ee1f64b891e976e6de6b16b6a3c328bdf9.roa
File:                     6d41e7ee1f64b891e976e6de6b16b6a3c328bdf9.roa (raw, json)
Hash identifier:          t5cBrWZt4mGd5aj6ff0+HljutaPkMr0EgjxpkPmY77E=
Subject key identifier:   6A:32:82:8F:46:2B:1A:5C:AF:06:56:6C:17:CB:12:FC:4F:43:BB:4C
Certificate issuer:       /CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
Certificate serial:       0D7E27
Authority key identifier: 08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/6d41e7ee1f64b891e976e6de6b16b6a3c328bdf9.roa
Signing time:             Wed 24 Mar 2021 14:37:16 +0000
ROA not before:           Wed 24 Mar 2021 14:37:16 +0000
ROA not after:            Tue 24 Mar 2026 14:37:16 +0000
asID:                     16973
IP address blocks:        168.205.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884263 (0xd7e27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
        Validity
            Not Before: Mar 24 14:37:16 2021 GMT
            Not After : Mar 24 14:37:16 2026 GMT
        Subject: CN=6d41e7ee1f64b891e976e6de6b16b6a3c328bdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:9b:7e:6c:6b:c5:6c:a6:a8:b6:98:04:cf:
                    1b:b8:b1:43:32:5e:ae:fa:d9:f5:d4:ed:67:df:e5:
                    0e:bc:89:b5:31:71:4e:41:2a:6f:5a:22:a4:d4:db:
                    dc:2b:36:61:cb:51:ed:b9:e2:5e:8d:22:96:63:b8:
                    7d:79:27:03:3d:41:0f:88:5d:a3:bf:89:2f:5b:e4:
                    41:f0:1e:49:77:12:5f:67:96:3c:ef:61:87:21:b6:
                    7b:10:4b:e4:18:2c:06:aa:60:7d:88:9c:c5:c8:f0:
                    02:f2:2a:ac:52:b1:d5:7a:2d:fb:77:db:11:2a:4e:
                    6d:1f:81:d0:d1:90:ef:66:57:7a:0c:59:97:10:bf:
                    88:73:0b:e6:9d:63:1f:20:4d:d9:cf:4a:52:4e:a5:
                    5a:8b:2b:5e:81:c9:6f:67:b6:87:9c:60:4f:d0:70:
                    b7:27:9f:2c:ca:b4:b7:de:73:14:e1:99:9b:a8:ab:
                    af:3e:5b:15:a9:e5:de:6e:5a:f4:98:17:95:d0:d3:
                    c4:5c:c2:1d:db:23:16:97:78:ce:70:2b:31:86:ef:
                    90:75:64:fe:26:bf:ce:3d:2d:5c:fc:9d:4d:60:c3:
                    e3:6b:cd:66:3b:d8:2d:62:6c:b6:51:3f:6c:76:39:
                    83:5e:c7:ad:9b:3a:48:ac:b5:40:6a:1b:9e:67:10:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:82:8F:46:2B:1A:5C:AF:06:56:6C:17:CB:12:FC:4F:43:BB:4C
            X509v3 Authority Key Identifier:
                keyid:08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/6d41e7ee1f64b891e976e6de6b16b6a3c328bdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/41f7ad2592489a8e238bbf1d55399b9278c418a6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:63:d5:83:fa:2f:98:a4:90:ab:e1:4e:38:a5:11:a1:48:92:
         ae:a3:55:ba:31:4e:e1:5f:87:41:5c:29:eb:06:0c:45:d4:1b:
         3f:a9:cb:88:9c:15:83:f0:90:1f:f9:d9:39:f4:14:a2:ef:8d:
         3f:98:70:8a:7c:52:65:d8:99:87:f4:c5:7b:84:5f:62:4a:20:
         91:40:c9:a0:bd:d2:6a:10:b4:2f:4a:39:a0:9b:d3:a2:bd:64:
         3f:2b:56:b5:2e:6a:c7:08:69:f0:ea:4c:e4:f3:a7:8e:12:db:
         66:ed:98:1d:09:2a:f0:c9:35:5d:1d:27:15:6d:15:f4:1d:ba:
         5f:10:65:14:22:2f:ec:ae:4a:22:9b:72:25:8c:04:af:a6:50:
         d2:8e:25:42:73:34:df:a4:9c:8a:b8:8e:a9:01:be:81:b6:f9:
         25:8a:bd:ae:ee:f1:dd:2b:d9:6a:03:c4:c1:a9:ce:85:a4:37:
         f1:fc:63:f7:a4:d7:77:8c:29:ee:c9:71:e4:b7:99:b7:18:27:
         c1:8f:db:2a:16:5c:a1:d8:cc:b0:d8:02:82:50:70:59:0f:e9:
         0b:cf:1e:75:25:c5:ac:3f:b3:da:7a:0f:6b:d7:8c:b3:f1:23:
         c6:b3:b2:19:44:72:20:ae:aa:85:0f:5e:c3:97:62:bb:5f:4c:
         cf:41:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org