Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0.roa
File:                     17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0.roa (raw, json)
Hash identifier:          6fHs3lbLNSiC8E9jeDD3VM5jq6Ho3fOG2QOreUB78aM=
Subject key identifier:   4F:79:E7:74:EF:55:F7:B3:B0:6D:C7:BF:E1:37:EA:BF:DA:16:D8:EC
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       31FB
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0.roa
Signing time:             Wed 09 Aug 2023 15:27:47 +0000
ROA not before:           Tue 08 Aug 2023 15:27:47 +0000
ROA not after:            Sat 09 Aug 2025 15:27:47 +0000
asID:                     52412
IP address blocks:        181.224.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12795 (0x31fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 15:27:47 2023 GMT
            Not After : Aug  9 15:27:47 2025 GMT
        Subject: CN=17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7a:9e:2d:5a:8f:e0:3e:b9:52:09:8c:3c:5f:
                    46:79:08:c0:d7:26:26:fa:d6:dc:84:32:67:34:03:
                    0b:73:c3:db:ff:9d:09:92:8a:e3:18:be:6e:b0:7c:
                    2a:6a:f0:64:2d:bc:09:9a:91:2a:f6:5d:3d:b3:15:
                    64:a6:c7:03:81:0c:a8:2a:af:9f:f3:e4:4a:4f:8b:
                    24:97:57:b7:37:6d:df:77:3c:b1:63:6c:a6:17:6a:
                    8f:60:d6:46:6a:a0:e3:e2:91:16:41:bd:97:7c:42:
                    e9:8f:f3:20:df:46:7a:14:c9:b5:bf:b4:9d:cd:9c:
                    f9:3d:79:0c:0f:0b:19:60:4e:f5:ce:15:ef:ef:b3:
                    2a:1f:2d:e9:7f:11:bf:1b:c6:47:4a:ee:d4:56:a0:
                    fc:91:b9:fd:14:34:ba:9a:76:bd:e9:df:06:1d:42:
                    4d:f4:33:c5:ff:6a:a9:71:f2:b1:dd:47:c3:8e:1f:
                    32:dd:9b:e1:f0:59:5d:dc:54:7a:cd:68:af:5c:87:
                    16:44:0f:93:e9:8f:43:2d:cb:8f:86:5f:97:42:9b:
                    cd:85:f8:c0:fe:d9:c6:de:b9:01:dd:2e:0a:b1:d6:
                    8e:5b:00:6d:23:b2:e2:87:40:52:1c:0c:2c:48:40:
                    3d:ae:cb:41:8c:95:79:92:ed:e9:35:7f:d8:24:01:
                    df:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:79:E7:74:EF:55:F7:B3:B0:6D:C7:BF:E1:37:EA:BF:DA:16:D8:EC
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:94:94:2b:cb:0e:71:91:4b:39:74:63:ea:98:60:33:52:
         6a:b2:d8:7f:91:5d:2d:3a:ec:65:fc:6d:fc:68:3f:43:c2:76:
         e5:20:77:79:c5:4c:c4:fe:72:5c:7e:ec:99:c3:3e:f1:3c:67:
         89:70:e6:59:57:2f:39:bf:d9:e1:c2:7a:f4:0e:12:6c:84:89:
         30:6d:09:4a:c8:65:52:c3:a6:30:8b:43:39:5d:66:26:13:3f:
         4d:32:80:bf:e2:f0:09:23:aa:a3:d9:39:9f:d6:4a:aa:53:c7:
         c4:3c:0c:03:03:dc:08:42:ad:3b:e6:6f:a0:ce:38:a8:86:e0:
         86:86:bf:57:72:d5:bd:85:0c:ea:9e:b8:99:5e:9f:05:44:e9:
         22:86:92:3b:29:77:82:48:38:b9:8a:4b:24:4a:66:64:89:6f:
         7b:df:79:bf:9a:f7:b7:90:c9:9b:8a:43:06:6a:3f:66:c3:ec:
         4c:31:13:0a:b0:e5:15:25:f9:7a:cb:44:da:53:b2:f4:0e:60:
         0a:07:83:6d:fb:9b:83:8b:b4:c1:cb:6c:73:9e:bf:ec:8c:03:
         9d:0e:c7:df:43:32:1c:cf:56:5b:bb:76:ff:4b:b6:d0:98:29:
         fe:d0:9a:f8:44:95:3f:52:40:28:24:66:71:d7:03:fb:c4:53:
         dd:a5:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org