Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/80bf0319f8b97a88cda8ac6c9b98a89d8968c283.roa
File:                     80bf0319f8b97a88cda8ac6c9b98a89d8968c283.roa (raw, json)
Hash identifier:          C+mDz1eo7xzypNwy9PYi94noK0lnnurBd6ou6rTxNs8=
Subject key identifier:   73:1F:28:FA:7B:57:D5:6C:F6:77:57:44:5C:15:83:5E:8C:25:16:D1
Certificate issuer:       /CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
Certificate serial:       1DAF37
Authority key identifier: 34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/80bf0319f8b97a88cda8ac6c9b98a89d8968c283.roa
Signing time:             Tue 17 Jan 2023 13:00:50 +0000
ROA not before:           Tue 23 Mar 2021 14:46:32 +0000
ROA not after:            Tue 24 Mar 2026 14:46:32 +0000
asID:                     263799
IP address blocks:        168.195.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945399 (0x1daf37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
        Validity
            Not Before: Mar 23 14:46:32 2021 GMT
            Not After : Mar 24 14:46:32 2026 GMT
        Subject: CN=80bf0319f8b97a88cda8ac6c9b98a89d8968c283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:da:2d:ac:30:a8:75:89:9a:a8:d1:a5:87:
                    32:3e:bd:6a:67:26:1a:59:b5:4b:5f:9a:e9:89:91:
                    fa:ce:88:02:aa:ff:c6:b9:b3:ff:2f:13:5f:e1:a6:
                    54:98:92:a4:f6:0e:67:ed:63:f0:91:f5:e2:09:22:
                    d7:69:71:1e:32:eb:40:74:38:be:29:df:f0:12:f9:
                    76:bf:d2:04:a0:9f:8c:67:5d:60:57:09:04:9c:1d:
                    33:05:2b:88:40:40:53:63:f4:57:d2:9e:19:9f:e5:
                    7a:06:10:88:1e:93:7f:46:3a:e9:64:52:b2:b3:19:
                    ef:39:fd:d0:d2:58:fb:88:01:b0:ed:f5:e2:db:ed:
                    5c:ca:56:be:98:5d:fe:d5:be:ef:81:1f:69:eb:a5:
                    38:5a:36:a2:51:e9:44:dd:ce:84:9d:0c:83:4c:d6:
                    e3:11:17:d4:8c:19:25:04:4b:21:cf:5a:9d:fa:fc:
                    b8:8d:cb:2f:35:cc:37:4b:6a:5c:fd:c0:dd:05:cb:
                    cb:61:b2:33:25:37:00:9c:e7:c3:4b:a0:5e:40:f5:
                    62:cb:32:ed:ed:cb:f2:15:a2:1d:cd:9c:91:59:10:
                    22:49:9a:a2:a8:79:84:71:76:3b:9b:ca:28:96:4e:
                    84:8d:f4:4f:fa:10:c1:df:61:b1:b3:3f:2f:25:23:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1F:28:FA:7B:57:D5:6C:F6:77:57:44:5C:15:83:5E:8C:25:16:D1
            X509v3 Authority Key Identifier:
                keyid:34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/80bf0319f8b97a88cda8ac6c9b98a89d8968c283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:97:d6:f7:08:8a:dc:2c:d5:de:d7:13:74:e6:55:02:bc:c5:
         19:42:a3:26:ee:44:92:5a:a4:3c:bd:a2:fc:c1:c2:7d:11:21:
         1b:f9:c5:bf:c5:7a:de:7b:59:df:26:6c:0f:ac:f0:00:bf:e4:
         86:07:05:e1:2c:33:79:5b:21:e3:fd:58:77:ac:f8:8b:3f:5c:
         59:52:18:0f:25:83:a3:67:53:bf:04:67:7d:25:ec:a7:7b:76:
         36:bb:e6:1e:15:d5:dd:50:54:4f:ce:51:90:d3:c4:69:e8:2b:
         14:8b:3a:35:56:50:8c:35:4d:a7:b8:76:d2:8c:32:8a:14:48:
         33:bc:ff:c4:61:f8:c2:fe:fd:3f:a9:e5:d7:01:2b:38:33:23:
         42:e9:2d:1f:c1:e0:75:c9:23:5e:73:20:f3:0b:41:94:bf:82:
         3a:c5:a1:ed:00:3e:c4:20:91:11:59:e2:a1:f5:b6:76:ab:81:
         65:a6:85:71:60:17:5e:ef:1d:f4:f3:48:fa:7b:63:64:52:3b:
         ae:24:71:e8:bc:31:33:69:a7:76:45:75:4b:e8:24:42:25:8d:
         04:dc:b4:f7:86:fd:f6:31:3f:1c:5e:5c:e2:2d:0a:67:d8:11:
         c6:fd:89:51:ed:3a:9c:57:6d:84:44:0d:65:62:f2:94:20:aa:
         d5:cd:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org