Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/8cb91f793c212e4e69a167c65003f67fee328241.roa
File:                     8cb91f793c212e4e69a167c65003f67fee328241.roa (raw, json)
Hash identifier:          HlkqUtFQ3TqBTKkCPhBI2nVmsgPGDYs+PUxtStnHHck=
Subject key identifier:   68:CE:71:CC:F8:BC:9B:E8:19:79:A7:26:25:9D:C0:44:F2:21:7A:13
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01104F
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/8cb91f793c212e4e69a167c65003f67fee328241.roa
Signing time:             Wed 14 Sep 2022 14:10:02 +0000
ROA not before:           Fri 19 Aug 2022 16:18:28 +0000
ROA not after:            Mon 19 Aug 2024 16:18:28 +0000
asID:                     27823
IP address blocks:        168.197.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69711 (0x1104f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:18:28 2022 GMT
            Not After : Aug 19 16:18:28 2024 GMT
        Subject: CN=8cb91f793c212e4e69a167c65003f67fee328241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:b5:08:ea:5b:31:b9:c2:8b:1a:ff:51:37:
                    27:03:95:c7:90:a5:a6:f2:a2:21:11:c1:f0:6b:88:
                    20:e7:50:da:5d:32:6a:97:0b:53:d4:4a:ce:5b:fa:
                    1a:2e:f8:f2:21:b6:09:4f:2a:8d:9d:64:fc:0c:00:
                    d7:f9:32:9d:54:d3:75:5c:f1:e8:09:73:a6:24:1d:
                    f8:71:69:90:c1:c4:df:91:44:3e:04:c8:d2:e4:ea:
                    8e:85:e2:9d:17:40:9a:d0:1a:2b:2c:5d:1d:88:28:
                    f5:d2:01:d2:a0:25:7d:24:7c:ce:25:89:51:35:8d:
                    d0:ec:04:c3:a1:fb:95:ed:73:23:9e:a3:fc:97:60:
                    63:f8:7d:d6:27:50:ef:c0:a3:37:31:52:11:15:4a:
                    48:c1:49:c3:0e:8a:91:ed:16:5e:92:b3:11:8b:ce:
                    f3:ed:02:e0:d6:25:93:1e:46:41:79:73:b5:31:52:
                    ee:db:e4:7e:c0:bc:ab:88:64:78:1a:6d:cd:f5:ae:
                    4b:1f:da:34:cd:48:5c:71:be:96:e0:bb:97:c8:14:
                    4f:0e:73:db:d6:01:fb:b4:bf:2d:c1:bf:ee:dc:9a:
                    05:22:74:d2:b1:dd:8f:88:aa:94:31:aa:22:22:77:
                    e4:76:b7:2d:0e:6e:97:8d:44:e5:69:a0:bc:f3:3a:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:71:CC:F8:BC:9B:E8:19:79:A7:26:25:9D:C0:44:F2:21:7A:13
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/8cb91f793c212e4e69a167c65003f67fee328241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:6f:57:48:e4:cc:09:37:a0:ae:65:3a:76:dc:95:07:3a:
         e1:df:92:9b:29:ff:7b:b6:dd:f2:19:60:e3:db:a5:f0:c1:e8:
         2a:b6:d6:d8:84:e5:bc:a2:6d:cf:ff:17:22:8f:db:d5:4d:0f:
         85:da:b9:62:4c:38:44:82:b7:b3:0b:a4:ef:6c:74:ef:7f:29:
         37:21:73:7c:6d:ac:03:e8:17:b1:71:e3:8e:df:fb:99:6c:6b:
         0d:60:4a:4f:03:bb:2a:f0:d0:9b:71:2b:3a:c5:f1:34:5a:d8:
         7a:47:16:9d:78:ca:4f:77:b9:61:66:5f:aa:08:7f:a5:6f:f0:
         d9:12:a9:09:32:1e:94:d8:73:0b:56:53:af:84:ad:41:5c:af:
         85:de:10:2d:43:8e:9d:86:b8:c5:f8:77:bb:91:16:5f:10:d1:
         8e:32:ce:57:a7:54:04:f4:ca:54:50:e7:de:2f:eb:09:82:f3:
         e1:69:c1:ff:6e:35:bb:2e:00:28:9c:47:e7:9f:62:ab:24:99:
         d5:af:bc:e5:c9:30:5b:0e:da:ef:a3:e7:ee:c0:f3:f5:07:a6:
         8d:1b:a7:e4:fd:ac:ad:1c:48:de:d8:22:80:91:7e:d7:6d:ff:
         22:09:33:94:11:ec:09:b4:71:b4:ff:80:cc:56:81:d8:c9:19:
         15:ec:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org