Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/ef4010177a53ef3dee9535e30c83a1bee9f9f557.roa
File:                     ef4010177a53ef3dee9535e30c83a1bee9f9f557.roa (raw, json)
Hash identifier:          csoFnCkBMBr01SSYaFysvnOzjOh0qOyiF0uz9NU/39I=
Subject key identifier:   0E:86:9A:C9:23:BF:F5:E3:94:D0:F3:11:3B:C8:69:19:27:51:0F:EC
Certificate issuer:       /CN=cfba2f644c32a04220d0345745022ddbc3a8a05a
Certificate serial:       2418E3
Authority key identifier: 9D:76:4E:19:9C:DE:89:A1:12:E2:95:76:1B:05:6B:AE:9B:79:D3:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfba2f644c32a04220d0345745022ddbc3a8a05a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/ef4010177a53ef3dee9535e30c83a1bee9f9f557.roa
Signing time:             Fri 06 Oct 2023 21:33:02 +0000
ROA not before:           Thu 05 Oct 2023 21:33:02 +0000
ROA not after:            Mon 06 Oct 2025 21:33:02 +0000
asID:                     394684
IP address blocks:        131.255.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365667 (0x2418e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfba2f644c32a04220d0345745022ddbc3a8a05a
        Validity
            Not Before: Oct  5 21:33:02 2023 GMT
            Not After : Oct  6 21:33:02 2025 GMT
        Subject: CN=ef4010177a53ef3dee9535e30c83a1bee9f9f557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:a8:ab:b2:1a:e8:2d:d7:c4:d9:b1:96:42:
                    b4:0c:8b:a7:2e:a3:20:ab:1d:02:d9:b1:1f:4c:e8:
                    d0:51:e3:fc:6f:46:6e:e5:72:f7:b7:ae:b6:2f:97:
                    97:9b:77:df:8c:18:20:74:a9:20:50:7f:45:82:1d:
                    39:0e:bb:e8:bc:34:ad:4b:25:fe:17:d0:1a:d5:44:
                    88:38:99:ad:4f:f6:a7:e6:be:89:0d:51:ec:03:2b:
                    d2:9c:d3:16:2f:a0:ca:1b:08:85:ee:96:f5:38:f5:
                    ce:96:e7:a3:42:d2:48:52:f2:46:2a:32:d6:2b:a5:
                    36:d6:cc:f4:59:93:a9:63:99:dd:61:0d:62:2b:8d:
                    a8:28:53:24:a1:1c:4e:14:f9:78:71:07:74:3d:e6:
                    b3:05:cd:67:c0:be:6b:f1:50:09:15:1f:74:be:ee:
                    27:3b:e3:09:9c:1d:12:63:2a:03:7c:47:48:1f:6f:
                    d5:04:fa:fd:8b:33:97:3a:5a:d7:db:d3:a5:b6:3d:
                    6d:7a:7a:9e:89:a5:e2:dd:92:ac:c8:60:0b:1c:c6:
                    2a:b1:28:a2:21:b0:7e:e0:a6:6a:93:08:15:33:ba:
                    d2:8d:be:41:15:63:c2:5b:77:b3:1d:9b:c5:65:59:
                    a0:c0:c4:0b:03:d0:0c:3a:15:e5:bb:41:1c:6c:b3:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:86:9A:C9:23:BF:F5:E3:94:D0:F3:11:3B:C8:69:19:27:51:0F:EC
            X509v3 Authority Key Identifier:
                keyid:9D:76:4E:19:9C:DE:89:A1:12:E2:95:76:1B:05:6B:AE:9B:79:D3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfba2f644c32a04220d0345745022ddbc3a8a05a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/ef4010177a53ef3dee9535e30c83a1bee9f9f557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/cfba2f644c32a04220d0345745022ddbc3a8a05a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:b0:82:1a:e8:5e:8e:40:65:02:9f:50:30:0c:06:88:a9:
         59:07:5c:ae:af:54:f6:31:18:a5:d5:f9:05:4b:d3:b2:6a:bf:
         14:48:3a:5e:b8:ed:54:03:77:8b:4b:d2:8f:14:ce:e1:36:55:
         cc:59:c9:dc:b0:01:7c:76:e9:ef:f1:4f:7b:46:4d:f9:f8:ba:
         81:09:ef:48:14:cc:5c:b4:f9:38:80:ba:16:37:8c:05:ec:fd:
         e8:78:52:68:d3:17:35:b3:00:cf:27:a0:04:fb:09:18:4a:d3:
         26:d4:eb:78:97:21:1b:21:12:26:68:3e:33:3c:c5:59:bc:48:
         e2:28:64:3c:3b:81:fc:8c:14:e3:69:ac:e4:10:26:0b:87:18:
         ac:2d:d0:21:aa:69:5d:49:2f:65:5c:bb:19:4e:ac:3c:b0:01:
         3f:35:8f:21:b8:c9:95:a4:e2:c0:d6:67:5c:af:40:88:fe:5c:
         24:e1:2b:62:75:72:50:10:f0:44:81:7e:a2:ee:01:3a:53:68:
         95:78:95:4f:46:e3:b9:b6:a1:34:f9:0c:f6:f4:26:38:00:f0:
         34:37:1d:55:3d:9c:89:d6:dd:cf:c3:6d:8b:15:b0:16:d9:3b:
         4c:be:61:48:ff:1b:b6:79:b7:ca:3c:e4:66:f5:5e:11:02:d9:
         1f:20:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org