Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/bba0fcf4f559464b8c17138d6d6a1ce107184402.roa
File:                     bba0fcf4f559464b8c17138d6d6a1ce107184402.roa (raw, json)
Hash identifier:          VLTM0+qQt9FmLf3K8/jAw9UmCdDcIGi3wDlSaRupdtE=
Subject key identifier:   79:20:4F:86:98:C5:D3:1C:6A:0C:9C:26:73:E2:BB:03:2E:2D:9A:C6
Certificate issuer:       /CN=dd92f04e17c84c39ce37b3e765b1e0b50fafe64c
Certificate serial:       04A37B
Authority key identifier: 5F:31:3B:E9:18:28:48:AB:DC:81:17:CD:E2:A1:03:7F:D0:5F:8F:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/bba0fcf4f559464b8c17138d6d6a1ce107184402.roa
Signing time:             Thu 17 Aug 2023 09:52:11 +0000
ROA not before:           Wed 16 Aug 2023 09:52:11 +0000
ROA not after:            Sun 17 Aug 2025 09:52:11 +0000
asID:                     22411
IP address blocks:        143.137.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303995 (0x4a37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd92f04e17c84c39ce37b3e765b1e0b50fafe64c
        Validity
            Not Before: Aug 16 09:52:11 2023 GMT
            Not After : Aug 17 09:52:11 2025 GMT
        Subject: CN=bba0fcf4f559464b8c17138d6d6a1ce107184402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:04:00:15:b2:ae:cc:85:2e:fe:20:6b:24:
                    99:d5:38:49:81:d9:90:11:55:fb:52:f4:2e:94:0d:
                    6b:7a:35:5d:28:a9:86:95:63:71:87:75:cf:58:28:
                    0a:25:6d:09:0e:8d:57:1d:ad:e7:8d:8e:c2:d8:15:
                    cd:b7:0a:c0:6a:63:a7:b9:7d:54:ae:15:3f:d7:9b:
                    1f:62:54:c1:24:55:39:88:dd:94:76:70:51:63:a6:
                    0a:90:72:a5:5e:25:9a:c3:52:e8:98:54:3b:a0:7a:
                    bf:81:cf:91:ee:47:7f:55:e0:9d:5a:8b:8d:76:14:
                    8d:99:81:c1:d3:a8:75:89:2a:3b:9e:ed:c3:40:98:
                    02:79:28:c4:89:76:18:81:23:be:3b:62:14:5f:da:
                    48:fc:12:bc:0d:53:94:f0:1d:c8:e1:a5:02:04:2e:
                    b4:88:40:4c:c8:f3:4b:ee:fc:fc:ab:56:7f:ad:49:
                    ad:ed:fb:58:69:a9:b3:44:70:e3:09:8e:88:fe:4b:
                    b9:42:cf:38:b4:6a:6a:84:a5:d7:be:30:7e:de:1b:
                    88:8f:90:21:e0:03:72:d5:aa:04:f8:03:02:04:0d:
                    76:00:cb:5f:46:43:d7:85:3f:5d:91:11:93:c4:67:
                    1d:42:e8:99:57:a4:fc:ee:1f:27:bb:83:7d:ee:02:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:4F:86:98:C5:D3:1C:6A:0C:9C:26:73:E2:BB:03:2E:2D:9A:C6
            X509v3 Authority Key Identifier:
                keyid:5F:31:3B:E9:18:28:48:AB:DC:81:17:CD:E2:A1:03:7F:D0:5F:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/bba0fcf4f559464b8c17138d6d6a1ce107184402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:0b:fd:85:8b:eb:03:eb:1d:e8:c4:3d:bd:6f:1a:7c:b8:e6:
         cf:4e:c9:3a:b8:33:67:df:bf:ab:71:cf:10:ac:0a:16:b4:08:
         11:82:d0:5f:e7:f3:7f:3b:ca:46:10:75:90:d0:23:07:d1:84:
         82:43:2e:7b:e9:cf:28:54:62:4c:c2:48:2e:05:f7:87:e9:03:
         2a:16:b7:fe:3d:f5:98:0f:13:08:fd:63:93:56:f5:31:b7:76:
         ff:cb:07:22:be:cc:4c:4a:fd:7a:da:86:9a:23:4a:44:d6:07:
         52:73:61:f1:53:9a:b9:ed:ac:22:60:d2:9d:5a:71:eb:3d:08:
         32:9d:a9:18:8f:0f:d8:d7:29:93:be:1b:45:b2:ad:34:e3:9c:
         70:32:cf:39:74:5c:f9:c2:e7:14:1c:62:6c:d7:cb:64:df:45:
         14:72:ea:71:40:de:6d:20:c8:be:d2:e5:86:99:30:79:f1:65:
         1c:46:de:c7:0a:60:0b:44:62:7d:2e:17:35:9c:00:7c:a5:2e:
         37:75:68:36:de:2e:bc:93:15:97:e7:fe:a6:9e:d8:5e:0b:69:
         5e:cd:17:ad:1a:52:73:88:eb:8d:29:37:1f:ab:65:47:5c:c3:
         fd:d1:af:ec:65:a5:21:f6:a2:68:63:7b:da:bb:1a:3b:2c:04:
         58:5f:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org