Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/309dcd0f88f874ced6bfa1b4a585b972a54dc5a0.roa
File:                     309dcd0f88f874ced6bfa1b4a585b972a54dc5a0.roa (raw, json)
Hash identifier:          KrxlalshtTJhRaR6y9MDDjFV6ReLnTHSyZxDFwqbQ28=
Subject key identifier:   CD:54:95:8A:B5:A3:91:E5:FE:34:55:59:DA:C6:6C:39:55:6D:F3:59
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       011BB4
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/309dcd0f88f874ced6bfa1b4a585b972a54dc5a0.roa
Signing time:             Wed 14 Sep 2022 14:13:35 +0000
ROA not before:           Fri 19 Aug 2022 16:18:28 +0000
ROA not after:            Mon 19 Aug 2024 16:18:28 +0000
asID:                     27823
IP address blocks:        168.197.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72628 (0x11bb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:18:28 2022 GMT
            Not After : Aug 19 16:18:28 2024 GMT
        Subject: CN=309dcd0f88f874ced6bfa1b4a585b972a54dc5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:1b:ed:47:be:f4:a9:5e:0b:70:05:51:10:
                    f6:e9:c7:a7:5f:39:74:7c:e6:b5:77:88:97:dc:82:
                    4c:c9:c1:b0:74:54:fb:de:23:b2:58:5f:41:b7:c9:
                    67:ed:2d:48:b7:2d:92:fa:32:7a:56:4a:3c:2e:35:
                    d6:33:e6:75:cb:8e:ac:35:1a:d4:0c:9a:64:a2:73:
                    1b:44:b9:65:90:eb:9f:0c:73:e0:24:dd:8f:d8:16:
                    18:e8:be:70:f6:87:e5:1d:4f:21:f5:6c:6c:f8:b5:
                    50:4a:f4:db:3e:85:1d:0c:7d:ca:a3:ae:6d:31:b6:
                    23:c8:9d:4f:3f:1f:7f:54:8a:fe:0d:1b:b2:7d:ba:
                    a4:d5:45:89:fc:47:6d:8f:af:fd:1e:2c:10:04:4a:
                    5d:99:8c:36:f2:bc:b3:16:12:16:37:1f:2b:cf:5c:
                    e1:04:85:23:a4:97:35:5c:49:1d:32:94:e3:09:b9:
                    25:17:ba:53:a1:68:e7:36:4e:13:85:e3:41:c8:82:
                    b8:7f:f9:2e:4f:9a:3d:77:b1:0e:db:ba:ab:01:5b:
                    81:95:df:fe:d6:a1:ad:59:ab:48:58:d8:ff:52:80:
                    53:49:3d:83:68:1a:5f:8f:f3:cc:2e:dd:fa:b6:28:
                    a2:40:79:44:9c:2c:03:b1:2d:c7:09:51:db:29:ff:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:95:8A:B5:A3:91:E5:FE:34:55:59:DA:C6:6C:39:55:6D:F3:59
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/309dcd0f88f874ced6bfa1b4a585b972a54dc5a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:ae:3c:2a:23:6b:cb:a4:7b:68:22:00:61:27:30:e0:c0:
         92:41:a2:30:21:7b:76:92:65:35:58:b2:98:73:a5:8e:34:45:
         f2:7e:bf:83:08:43:cc:36:62:ca:60:a6:a9:2d:9b:3c:c0:a0:
         d1:2b:33:81:80:55:8f:f0:67:6c:65:06:65:b5:d5:e9:b0:e4:
         c3:4b:3e:c1:bb:b9:b3:29:df:9a:e7:21:02:11:10:3c:52:e4:
         1c:11:d0:41:09:bf:53:3c:fb:48:09:25:6f:9e:47:c6:c0:b8:
         ec:fa:5c:cc:61:d8:94:47:74:d4:f3:5e:22:1a:9e:85:42:06:
         4a:db:06:2d:fe:91:7c:04:ef:21:f8:0b:93:b9:b4:ac:36:12:
         b4:61:44:c5:8d:b8:ca:26:d8:9a:76:b5:40:94:3a:e6:fb:d1:
         f0:87:90:4b:9d:10:a7:2c:5d:52:ed:6b:82:2f:05:a9:6f:c7:
         a1:aa:cd:14:57:53:29:d3:3a:da:b7:18:85:03:bd:19:17:5a:
         9c:ed:12:6d:8c:5c:7b:f7:68:05:1b:51:cd:4d:4c:52:23:6d:
         83:41:91:06:24:6f:12:f4:ad:c0:63:8e:7f:96:1b:82:c0:e2:
         05:db:99:54:9c:b3:f6:d0:72:ae:ab:57:45:94:a6:76:b6:46:
         7d:69:54:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org