Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/953beb779e616315f178c3879f1bd30d17e97ece.roa
File:                     953beb779e616315f178c3879f1bd30d17e97ece.roa (raw, json)
Hash identifier:          AJvmneNpu5Ot4/3vfIhPV9N15lh3cvFAxg5yCISCTg0=
Subject key identifier:   19:F4:48:D6:7A:E6:0F:F0:C5:6A:B6:7F:96:85:08:93:B5:F3:31:15
Certificate issuer:       /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial:       018129
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/953beb779e616315f178c3879f1bd30d17e97ece.roa
Signing time:             Mon 12 Jun 2023 23:51:31 +0000
ROA not before:           Sun 11 Jun 2023 23:51:31 +0000
ROA not after:            Thu 12 Jun 2025 23:51:31 +0000
asID:                     27773
IP address blocks:        168.243.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98601 (0x18129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
        Validity
            Not Before: Jun 11 23:51:31 2023 GMT
            Not After : Jun 12 23:51:31 2025 GMT
        Subject: CN=953beb779e616315f178c3879f1bd30d17e97ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:0c:d1:31:7a:84:26:48:b5:59:77:b7:84:
                    94:5c:7c:60:8a:e5:7e:8a:ad:98:1b:12:56:4a:4e:
                    92:23:78:34:b4:f3:9b:49:fd:bd:e7:21:2b:8f:f6:
                    8a:b2:70:e0:5f:8a:8c:27:22:aa:6c:ef:a1:cd:bb:
                    ef:8b:bc:aa:eb:61:2e:7d:13:98:68:47:19:66:20:
                    43:48:b4:53:a3:50:c3:7b:f4:56:95:17:b4:29:ff:
                    93:ae:dc:2c:4d:8d:24:2b:9b:da:65:8a:26:0a:68:
                    36:0f:6b:00:da:9b:50:10:8b:1b:fa:23:98:ff:34:
                    07:04:a5:17:4f:39:83:8c:67:e2:47:ff:99:2b:bd:
                    5e:82:80:09:7f:fe:27:48:23:5f:15:9c:fe:38:5c:
                    ae:98:08:11:f4:f6:fc:f6:65:64:22:aa:3d:a0:41:
                    9e:ef:e7:1b:eb:b3:82:e2:02:4d:ca:fc:e0:06:70:
                    dd:da:5e:ea:b2:23:36:ed:e4:52:52:b9:7d:7b:3d:
                    5c:47:e3:4b:65:4e:81:1b:72:80:5a:53:10:27:65:
                    cb:e7:36:1e:58:9f:02:12:fd:5f:f2:c8:18:d3:03:
                    ec:0b:eb:db:c0:8e:b0:28:c8:5e:cb:96:e9:bb:a1:
                    93:da:7d:b5:45:d2:79:d2:99:5e:5c:3d:5e:59:fc:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F4:48:D6:7A:E6:0F:F0:C5:6A:B6:7F:96:85:08:93:B5:F3:31:15
            X509v3 Authority Key Identifier:
                keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/953beb779e616315f178c3879f1bd30d17e97ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:34:66:7b:85:7b:a4:82:ae:d3:5d:56:15:2a:4d:7a:f1:
         17:86:b7:f2:be:9e:e4:48:e7:00:29:8f:55:58:9c:82:94:c0:
         38:a2:82:77:ef:9e:a9:27:6a:62:81:c1:25:c9:2d:48:e9:87:
         73:3a:68:6a:54:98:a4:44:f0:b0:be:19:ae:59:3d:20:76:89:
         a5:c1:7b:1d:e8:0c:00:f3:3a:2f:2b:d0:ac:4c:7f:b8:18:73:
         ac:75:50:94:96:4d:9a:90:9f:aa:da:41:ef:fe:c4:88:0c:63:
         85:ee:92:d5:fc:54:a8:d9:d1:2a:bf:bf:46:bc:37:aa:c0:85:
         8e:2e:c5:63:1a:66:17:13:89:d8:42:ce:b8:e7:eb:10:ec:d6:
         c5:01:d5:d3:bf:60:b7:1f:dd:bb:c6:92:99:54:cd:4a:30:32:
         d7:7d:fe:e1:74:43:7b:e7:56:b9:2f:e9:1b:d7:ae:ab:e6:be:
         c8:64:90:0d:f2:c1:fe:c5:eb:34:c7:d1:68:ac:e0:94:47:f2:
         10:38:66:6c:ee:5a:ad:1a:20:71:37:50:4b:62:86:22:d4:ec:
         81:78:f7:4b:66:40:d7:c8:52:48:7c:bd:7d:7b:25:6a:2e:c2:
         fc:4a:3d:77:84:05:a0:f3:ed:5e:85:5f:eb:a3:65:f5:6a:41:
         6d:d1:d8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org