Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/e8960411b8e60e01afbf86b1e91086a2a340686a.roa
File:                     e8960411b8e60e01afbf86b1e91086a2a340686a.roa (raw, json)
Hash identifier:          EKwggNlbNjrHiTwgl+xZZ9OnolTiQ0rvLa9j15Yr8sU=
Subject key identifier:   F5:E9:83:9C:D1:81:EF:5A:B6:E2:ED:CD:97:99:F0:7C:58:26:CC:D5
Certificate issuer:       /CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
Certificate serial:       1F32B9
Authority key identifier: 34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/e8960411b8e60e01afbf86b1e91086a2a340686a.roa
Signing time:             Thu 16 Mar 2023 06:47:35 +0000
ROA not before:           Wed 15 Mar 2023 06:46:46 +0000
ROA not after:            Sun 16 Mar 2025 06:46:46 +0000
asID:                     263799
IP address blocks:        168.195.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044601 (0x1f32b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
        Validity
            Not Before: Mar 15 06:46:46 2023 GMT
            Not After : Mar 16 06:46:46 2025 GMT
        Subject: CN=e8960411b8e60e01afbf86b1e91086a2a340686a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b5:f0:b7:fb:59:09:98:2a:4d:5f:37:e5:67:
                    c9:ad:49:3d:3b:e5:4c:8b:41:10:29:f8:c3:de:d6:
                    40:b6:40:5e:08:d1:57:b4:6f:c0:d0:21:23:62:dc:
                    5c:a7:2b:a5:4a:59:5e:7b:68:17:71:1a:2d:06:cc:
                    73:4a:20:62:1e:b3:c1:56:fd:c4:45:8a:49:e3:ec:
                    df:a6:31:56:13:23:95:b1:68:8f:66:32:83:e5:7f:
                    72:5e:65:91:98:96:d9:01:83:ce:5c:40:50:28:fa:
                    0b:20:3f:4d:8b:78:8c:b4:99:99:69:99:a6:e6:65:
                    70:42:ca:78:d2:8f:42:99:95:d1:9c:b3:df:05:c6:
                    c1:80:99:90:e4:c0:78:fa:02:12:80:41:4d:a5:d2:
                    07:53:8d:27:d8:e1:e1:8a:ec:0d:f7:ae:b3:02:83:
                    d7:b9:ba:ab:35:ad:ec:b7:a2:3a:06:74:e2:f0:80:
                    58:c9:4c:e3:1d:60:47:a5:d1:e5:60:1e:b6:8d:59:
                    cd:f1:9e:bb:5a:de:6f:dd:b7:36:da:74:ab:c5:80:
                    ae:0e:74:ab:2b:28:f4:65:9f:29:dc:7b:5c:cc:23:
                    13:10:2a:4d:7e:e5:79:01:0f:83:cf:ef:27:6b:84:
                    a1:bc:73:65:8d:91:78:9f:57:c3:a7:02:67:07:07:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E9:83:9C:D1:81:EF:5A:B6:E2:ED:CD:97:99:F0:7C:58:26:CC:D5
            X509v3 Authority Key Identifier:
                keyid:34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/e8960411b8e60e01afbf86b1e91086a2a340686a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:14:77:cf:a8:e1:db:93:db:1a:6f:31:45:f9:3a:88:0f:
         78:6e:dc:64:0a:7a:d4:f1:41:e3:2c:a5:9e:ee:8b:59:c9:4a:
         c5:ad:de:fb:aa:c5:05:9c:ea:9a:e4:f2:49:2e:ac:f2:1a:dd:
         41:56:5e:f4:8e:d7:5f:27:50:8b:a7:a5:4b:de:2d:7f:29:7b:
         e0:d8:f5:1a:57:8b:e0:38:ee:99:4e:a8:d3:29:f0:84:56:2b:
         8e:15:b8:19:af:44:de:ef:6f:47:ea:ba:ee:fa:5c:8f:ce:a3:
         62:6a:fa:d8:e3:6d:93:3d:2a:d8:e0:33:7f:62:f0:b5:cd:11:
         8d:cb:2f:2f:63:24:0e:04:94:ea:0c:9b:78:14:b2:2e:a4:39:
         9a:42:30:27:bc:c1:09:99:8b:dd:83:c6:6f:5f:91:c3:ee:37:
         fe:d7:72:98:e2:0f:f8:5d:55:e3:46:19:fe:05:eb:e8:25:d7:
         e2:36:ae:1f:44:f7:0b:fc:48:6e:5b:39:93:01:1c:c0:36:74:
         af:5f:e2:5e:74:24:b9:a6:c4:ba:de:b2:49:08:34:47:60:0b:
         a4:4c:fb:1d:96:a0:ae:ed:7e:44:7d:0e:c1:79:44:23:57:a4:
         55:8b:db:51:89:54:0f:56:3c:24:eb:a2:ac:1e:6f:57:6a:ea:
         0c:1d:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org