Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/7371daab853ed9d2d6ddd8ed3b9b07aadaf6c293.roa
File:                     7371daab853ed9d2d6ddd8ed3b9b07aadaf6c293.roa (raw, json)
Hash identifier:          XEr8467gzx2Nh4OiTXFnMGYFUW7uhs10RQK1pnnGK6A=
Subject key identifier:   AD:8C:D0:10:F4:0A:48:CF:3B:55:F0:C5:E2:6D:02:A8:48:CC:BD:53
Certificate issuer:       /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial:       02A345
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/7371daab853ed9d2d6ddd8ed3b9b07aadaf6c293.roa
Signing time:             Wed 26 Jul 2023 20:55:05 +0000
ROA not before:           Tue 25 Jul 2023 20:55:05 +0000
ROA not after:            Sat 26 Jul 2025 20:55:05 +0000
asID:                     26617
IP address blocks:        168.243.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172869 (0x2a345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
        Validity
            Not Before: Jul 25 20:55:05 2023 GMT
            Not After : Jul 26 20:55:05 2025 GMT
        Subject: CN=7371daab853ed9d2d6ddd8ed3b9b07aadaf6c293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:a6:95:3f:06:b5:cd:af:a3:91:21:7d:cb:
                    20:94:87:46:71:65:03:dd:6f:e9:48:bd:a0:00:df:
                    70:c0:73:99:06:75:45:4e:4c:01:11:aa:c8:38:ae:
                    0d:3f:9d:c0:e2:57:02:dc:22:7c:94:d2:35:1d:63:
                    2c:f0:fb:22:cd:72:ac:43:60:98:0c:b4:dc:88:e0:
                    ba:40:63:c8:6f:26:76:3e:6d:ba:5f:b0:32:dd:a9:
                    e7:8e:a0:2a:52:87:2f:c7:24:da:7c:63:0f:0c:d3:
                    7e:bf:82:37:54:90:35:e2:70:04:9b:51:87:68:67:
                    99:3b:d9:ba:6f:18:09:a3:f2:84:e4:db:87:78:b6:
                    9d:f8:ec:67:2d:e6:fe:d5:97:e2:ee:e1:e0:ad:d5:
                    8f:29:42:b2:73:64:75:e5:f5:be:f2:c9:be:d6:2e:
                    19:0b:26:8e:a2:e4:af:40:a1:cf:9c:b6:82:a5:59:
                    95:5f:f1:3a:c2:3e:a5:64:da:c4:71:6c:ee:a4:8d:
                    f7:e9:7f:cc:96:ae:64:c9:59:98:64:f1:ed:5b:5f:
                    32:44:b0:cd:63:4c:ab:e4:ef:ab:f0:56:d1:25:41:
                    63:3b:e5:9b:c1:92:49:bc:6a:1a:c3:70:8e:61:02:
                    4a:09:3f:90:f2:08:74:96:61:bb:b0:ac:73:df:24:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:D0:10:F4:0A:48:CF:3B:55:F0:C5:E2:6D:02:A8:48:CC:BD:53
            X509v3 Authority Key Identifier:
                keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/7371daab853ed9d2d6ddd8ed3b9b07aadaf6c293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:22:30:ae:bf:84:66:12:5c:e2:5a:80:e4:7d:35:9a:04:22:
         7f:b8:dc:ef:84:60:78:90:9e:4f:86:5a:31:86:2b:c6:40:c1:
         f3:01:51:10:0a:5b:ee:12:60:e3:6e:9f:36:ff:6f:9d:6a:46:
         2b:a9:ba:fa:bf:bb:72:26:41:85:8a:11:2f:2a:14:e7:c8:6e:
         28:7b:1b:a8:72:dd:bb:9a:a2:26:4e:ac:57:17:0a:a1:46:17:
         e1:5e:36:db:3b:50:e6:61:58:a2:5c:1d:99:7c:c5:41:fd:22:
         cd:00:8a:53:d8:6e:9d:c9:41:3f:ac:72:59:39:41:8f:be:45:
         e7:60:f9:45:25:ee:ed:5b:6b:b2:24:f5:7c:a3:6d:bb:8c:85:
         21:90:af:51:c5:e2:3d:aa:16:7f:aa:fd:a1:90:a1:30:76:c0:
         a5:26:cf:aa:42:81:de:f8:7a:0a:c3:1e:8d:17:c0:b6:b3:50:
         f2:a5:16:94:1a:6d:6b:2e:64:28:f5:32:60:e3:71:98:28:77:
         2d:d0:e9:d0:2f:8b:d7:27:d4:eb:f5:e1:f6:41:1e:03:d8:fc:
         1f:29:50:f8:7d:b8:78:ff:e5:eb:69:48:af:b5:ea:dc:21:35:
         01:99:b8:99:f8:25:c5:e4:ad:bd:cd:e1:ea:e1:d0:49:40:e0:
         b8:b3:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org