Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/481b9e28-6565-420b-a6d9-55db43f37cb9/ea63a9922614193d18b3e5f6b7cfaf5725b0cfca.roa
File:                     ea63a9922614193d18b3e5f6b7cfaf5725b0cfca.roa (raw, json)
Hash identifier:          zJ/Jvzi/skgdAjHwrRPOCbhyMgQQHcLyPX8EKOLclbs=
Subject key identifier:   2D:27:AD:E9:68:64:88:53:D2:5C:C9:DA:7D:AF:66:2C:2E:DE:98:8D
Certificate issuer:       /CN=fc1acf9f98493b58faee8fb1fd400eba063cc985
Certificate serial:       1C5E78
Authority key identifier: 87:C6:3B:A8:64:65:A4:3B:D6:73:24:36:55:B3:4E:56:EB:0C:F4:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc1acf9f98493b58faee8fb1fd400eba063cc985.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/481b9e28-6565-420b-a6d9-55db43f37cb9/ea63a9922614193d18b3e5f6b7cfaf5725b0cfca.roa
Signing time:             Thu 17 Nov 2022 21:09:48 +0000
ROA not before:           Wed 16 Nov 2022 21:09:26 +0000
ROA not after:            Sun 17 Nov 2024 21:09:26 +0000
asID:                     264743
IP address blocks:        168.194.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859192 (0x1c5e78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1acf9f98493b58faee8fb1fd400eba063cc985
        Validity
            Not Before: Nov 16 21:09:26 2022 GMT
            Not After : Nov 17 21:09:26 2024 GMT
        Subject: CN=ea63a9922614193d18b3e5f6b7cfaf5725b0cfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:3e:74:7f:89:7c:5b:0c:4d:01:ff:c8:7a:
                    cf:1a:c9:1d:ff:fc:86:39:a9:c0:3f:c0:16:0e:9e:
                    03:42:8b:4f:55:da:5d:e8:15:ee:7c:67:4b:92:a0:
                    3d:28:8f:48:71:c5:f9:87:bb:74:10:c3:3d:3d:43:
                    80:80:3b:ee:a8:53:91:d9:03:e0:ca:c9:1c:e3:d4:
                    b7:2c:95:6e:87:d0:80:58:71:aa:6f:70:db:2f:c0:
                    15:0c:c3:cd:9a:5e:b2:b8:0b:82:4c:e3:4e:f9:29:
                    54:2c:37:ca:08:c2:6c:bb:97:e8:6e:dd:db:8b:6c:
                    79:ff:08:18:d8:8e:02:b7:d1:ab:69:07:71:3e:bc:
                    bf:e8:cc:cb:77:aa:f9:9c:98:97:70:bd:1f:a1:64:
                    27:f5:5b:e7:9f:74:de:00:ba:02:2d:7e:3a:e9:3a:
                    41:b7:f6:40:34:4f:0e:22:aa:45:c2:6e:c1:38:d6:
                    38:36:6a:61:1e:9d:d5:c7:2b:24:f5:f6:01:4c:94:
                    a7:76:0f:b2:27:a1:18:4a:70:49:0e:36:3c:7c:9e:
                    5f:4c:86:d5:f0:44:ce:9d:27:49:d1:c5:7b:2f:0b:
                    06:63:65:f2:62:ad:74:cb:3f:3f:21:ec:6c:c9:31:
                    63:8f:ac:8e:36:c5:7d:9d:86:99:70:72:99:ef:95:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:27:AD:E9:68:64:88:53:D2:5C:C9:DA:7D:AF:66:2C:2E:DE:98:8D
            X509v3 Authority Key Identifier:
                keyid:87:C6:3B:A8:64:65:A4:3B:D6:73:24:36:55:B3:4E:56:EB:0C:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc1acf9f98493b58faee8fb1fd400eba063cc985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/481b9e28-6565-420b-a6d9-55db43f37cb9/ea63a9922614193d18b3e5f6b7cfaf5725b0cfca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/481b9e28-6565-420b-a6d9-55db43f37cb9/fc1acf9f98493b58faee8fb1fd400eba063cc985.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:e0:ee:6f:0e:45:16:1b:46:e0:20:2c:bd:c2:4a:37:7b:
         40:a7:49:ba:13:05:23:27:e7:f2:6f:fd:a6:2c:bb:ac:d4:5b:
         87:60:6d:82:f5:03:20:c9:8a:c8:33:cd:18:12:e5:cb:1e:1a:
         1f:1f:4c:a6:89:cb:6e:93:bc:1a:be:8f:c9:f9:da:95:64:f3:
         a9:83:d2:5f:14:13:f0:dc:da:c4:72:38:1b:27:2b:e0:18:4a:
         9e:c0:94:a9:1c:75:48:21:01:0d:19:a7:76:c8:cc:4c:f1:c4:
         01:72:c8:1e:25:47:53:2d:31:a6:8c:61:a7:eb:46:ee:fc:93:
         ae:4e:33:a7:8c:e4:07:4c:99:a7:f3:d0:61:3c:8d:62:d5:9a:
         3e:97:9b:9b:91:de:05:f3:cf:50:b0:df:c8:ac:cf:3d:fa:02:
         d6:a1:3d:1d:2e:3b:69:eb:e4:cc:4d:87:85:ec:26:62:0f:c1:
         d6:f1:86:86:89:31:af:65:35:26:56:dd:12:ba:82:6f:92:92:
         f8:95:fc:e7:0a:6a:2b:c6:90:1b:48:bc:7e:16:c6:81:32:a1:
         83:c5:cd:a7:57:18:f1:c3:e3:45:a5:91:82:3c:8a:41:34:93:
         40:e1:9b:eb:ac:b6:5e:0b:50:9d:e3:60:ad:ee:8b:65:84:4d:
         5d:01:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org