Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/c9d408b09d801fd8e15d097a9a00e100e7da63e8.roa
File:                     c9d408b09d801fd8e15d097a9a00e100e7da63e8.roa (raw, json)
Hash identifier:          ibA2JaLvso4Gj8JINFLaBrnzHa6HhVV5MwzIBDzMKwo=
Subject key identifier:   51:17:2E:01:7B:71:ED:AA:9A:91:07:83:D5:97:2F:3A:B6:06:33:73
Certificate issuer:       /CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
Certificate serial:       0D8959
Authority key identifier: 0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/c9d408b09d801fd8e15d097a9a00e100e7da63e8.roa
Signing time:             Wed 24 Mar 2021 14:32:51 +0000
ROA not before:           Wed 24 Mar 2021 14:32:51 +0000
ROA not after:            Tue 24 Mar 2026 14:32:51 +0000
asID:                     264789
IP address blocks:        168.197.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887129 (0xd8959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
        Validity
            Not Before: Mar 24 14:32:51 2021 GMT
            Not After : Mar 24 14:32:51 2026 GMT
        Subject: CN=c9d408b09d801fd8e15d097a9a00e100e7da63e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:d2:fe:d6:33:41:a5:55:28:66:50:60:bb:
                    b4:b5:58:91:bd:c5:a4:45:73:29:78:1f:2a:b4:96:
                    46:47:20:0c:0a:04:76:50:10:99:82:00:bf:67:8e:
                    91:5f:64:75:cf:15:b6:d5:01:3f:df:59:72:39:bf:
                    79:e6:4a:47:b2:f1:77:b0:0e:d9:90:5e:a6:13:cc:
                    b2:c9:97:5f:30:9d:7b:4f:71:00:75:d9:70:68:74:
                    f9:e1:6e:bb:d1:96:fb:02:c6:63:d1:5c:38:37:21:
                    b2:e4:00:34:91:63:4c:81:e3:8c:b6:9a:13:3d:b2:
                    4d:62:6a:59:0f:a4:ef:b0:0f:eb:b0:b4:fa:04:d5:
                    28:9a:84:eb:98:6e:84:49:0a:c8:85:69:19:ca:9b:
                    3d:2d:14:27:ff:20:f2:7a:de:1f:a3:f1:f7:6e:c5:
                    f5:0b:56:f6:57:86:03:09:f1:e8:37:29:dd:80:c5:
                    29:76:32:e6:32:71:9d:0b:32:e0:27:5c:a9:40:ef:
                    35:e4:b2:2a:d6:c1:03:1e:df:85:00:84:5e:f0:86:
                    7a:71:b9:35:3f:d0:de:ce:22:a4:0f:9e:75:61:c5:
                    48:a9:b7:83:a7:f5:7b:59:69:e2:94:83:50:ef:e1:
                    23:a1:5e:d0:80:47:0f:f7:4f:4a:f2:a6:54:03:05:
                    37:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:17:2E:01:7B:71:ED:AA:9A:91:07:83:D5:97:2F:3A:B6:06:33:73
            X509v3 Authority Key Identifier:
                keyid:0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/c9d408b09d801fd8e15d097a9a00e100e7da63e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/9fcf3302c6615af1974dce9c8e8304499ee53acc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:41:a4:67:00:2b:1c:68:99:c5:16:e5:98:0b:45:36:67:
         75:e6:5b:9b:b3:db:a1:90:60:3b:34:37:46:e8:c1:ed:1c:c9:
         e5:82:25:d9:1f:d7:e8:bb:1e:47:47:f3:c9:0d:06:89:7a:dc:
         7d:95:65:34:aa:5f:9f:61:cd:50:5c:91:82:f5:d9:c3:87:3f:
         cc:24:ee:78:41:0c:4b:f3:f6:e0:1e:1e:bf:55:31:95:db:03:
         22:9b:f3:89:47:fe:80:3e:52:b5:0f:cd:c9:54:1c:d2:7a:75:
         af:cb:54:db:6d:53:d0:bf:fa:3a:16:6d:c4:e6:62:9a:a1:41:
         66:5d:3c:b9:4b:61:38:87:ad:f0:af:3d:4b:d5:a8:fe:0c:11:
         f7:9a:c1:83:f5:57:ee:70:3c:79:40:88:07:a2:0e:de:96:4a:
         ca:ec:9c:32:ed:a2:9f:cb:bd:bd:60:de:e0:d3:8d:17:7b:49:
         a8:20:84:21:cf:49:d9:33:d8:85:42:0c:f9:bc:1d:ad:e7:fc:
         43:b7:4f:71:91:21:d6:1f:59:39:a2:2d:a0:23:4b:81:38:76:
         90:fe:bc:96:9e:b8:f0:29:1f:65:9b:ae:cb:54:ed:20:8f:1b:
         4f:70:2f:c9:ce:d3:7c:ef:41:4f:ed:ae:2c:b7:8f:50:81:f9:
         2b:63:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org