Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/9375533551c78bea606728fd4d9bcb39a5845e77.roa
File:                     9375533551c78bea606728fd4d9bcb39a5845e77.roa (raw, json)
Hash identifier:          R5ogCN+VEgNF675bpFc26JeG5X+oxyPdUV+JRSHDBkA=
Subject key identifier:   96:BF:B9:C6:71:CF:36:13:00:41:2E:A1:D0:BD:7B:78:AC:7B:3B:6E
Certificate issuer:       /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial:       018895
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/9375533551c78bea606728fd4d9bcb39a5845e77.roa
Signing time:             Tue 13 Jun 2023 00:27:23 +0000
ROA not before:           Mon 12 Jun 2023 00:27:23 +0000
ROA not after:            Fri 13 Jun 2025 00:27:23 +0000
asID:                     17079
IP address blocks:        168.243.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100501 (0x18895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
        Validity
            Not Before: Jun 12 00:27:23 2023 GMT
            Not After : Jun 13 00:27:23 2025 GMT
        Subject: CN=9375533551c78bea606728fd4d9bcb39a5845e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:1a:67:5b:86:53:6f:10:d2:50:b8:77:d7:
                    ae:4e:e1:0f:fd:9c:a7:f3:15:9b:f9:b2:29:d5:c4:
                    79:cf:20:2c:89:b2:c9:43:77:95:a4:6f:83:53:be:
                    be:90:c1:c0:39:66:0f:02:a0:dd:73:3a:b4:f2:d0:
                    60:f0:fd:fe:84:8a:b7:2e:94:e7:3c:48:20:28:76:
                    54:23:d9:eb:86:c0:20:0d:48:bb:58:26:5d:d9:26:
                    9d:48:1e:78:d0:c3:87:63:f5:e3:c4:c5:de:80:fa:
                    a7:e8:66:05:b8:3c:5b:ba:5a:5b:56:cf:f4:bb:37:
                    a4:75:7a:62:af:66:e5:40:4d:09:45:5f:75:e6:3f:
                    bf:ec:ed:99:2d:b6:f3:7d:4d:2a:dc:e2:ed:12:23:
                    c9:5d:71:d8:2e:42:0f:4e:db:ba:22:2b:61:00:90:
                    ce:a8:4a:e8:31:2c:9f:44:45:8f:6a:ec:25:4f:43:
                    3c:30:c5:30:cb:e1:f9:42:cc:b7:17:2b:ed:0f:68:
                    dd:f1:ee:47:7e:2e:33:b0:ed:9e:40:90:30:3a:51:
                    a7:51:2d:d4:1b:cf:b3:a4:59:a4:66:ba:fb:83:b4:
                    8a:bc:c9:67:d8:6f:ad:fd:6c:23:df:88:69:1c:0e:
                    e4:05:52:06:b2:e5:a0:4b:41:e7:82:08:fd:fb:dd:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BF:B9:C6:71:CF:36:13:00:41:2E:A1:D0:BD:7B:78:AC:7B:3B:6E
            X509v3 Authority Key Identifier:
                keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/9375533551c78bea606728fd4d9bcb39a5845e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:b0:90:10:6a:50:94:c0:76:af:4d:21:2a:d1:c7:21:69:0b:
         f5:e2:35:00:62:57:fd:53:14:ee:f3:d5:c7:a3:5b:dc:45:5c:
         72:15:33:e5:3a:85:22:29:f3:a8:74:ce:1c:b5:58:9a:01:8a:
         f1:c7:ad:af:7d:17:64:23:7e:8a:df:04:59:1a:2e:39:db:46:
         13:05:7c:bc:54:64:33:57:df:d9:94:92:c1:3f:d3:8e:b5:42:
         7b:d8:4a:f3:53:61:4a:f7:f0:9e:0b:0b:c3:f3:29:a1:97:f6:
         9a:fb:57:51:8f:d6:6a:ae:10:d5:c7:77:8d:19:06:1d:a9:02:
         22:10:9a:75:fa:e9:f2:6e:ea:e7:29:22:15:a0:0a:bd:1b:23:
         9b:48:3a:0b:b6:7e:f7:6d:64:92:1d:5b:37:b9:ba:46:b1:c6:
         3c:c5:4f:9d:c2:25:c1:25:6c:2f:48:d0:54:a5:4e:c6:d7:02:
         ca:3c:ac:12:fa:e7:5e:ad:6b:00:1f:db:05:02:de:3e:3d:f3:
         f0:69:31:dc:f0:80:86:f9:fc:ee:7b:b9:2e:0f:8a:37:b9:08:
         0a:1d:1b:c6:21:ab:7e:a8:3d:71:d8:59:1b:8f:2c:83:52:13:
         72:1f:9f:a2:bd:36:ce:2b:a8:bf:bd:d2:77:c2:71:7c:6f:29:
         42:c4:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org