Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/6441e3b3a19ae38ef79314df43899627c398f423.roa
File:                     6441e3b3a19ae38ef79314df43899627c398f423.roa (raw, json)
Hash identifier:          yvWQUscM87gtpXgD+YOS3xxTbXlhKPOPYNB93gxMxvk=
Subject key identifier:   0A:7B:7E:1D:29:3C:FE:38:EE:D9:D6:14:8E:3A:D7:DB:58:A0:AF:09
Certificate issuer:       /CN=428f4bd526001b3f547ef3eecec9c54ff3efb3fb
Certificate serial:       09832A
Authority key identifier: 09:FD:6B:2D:7A:07:AC:0F:83:31:08:2F:26:FB:BE:AD:4E:BD:30:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/6441e3b3a19ae38ef79314df43899627c398f423.roa
Signing time:             Fri 15 Jul 2022 02:11:13 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Sun 14 Jul 2024 03:00:00 +0000
asID:                     265834
IP address blocks:        164.163.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623402 (0x9832a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428f4bd526001b3f547ef3eecec9c54ff3efb3fb
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2024 GMT
        Subject: CN=6441e3b3a19ae38ef79314df43899627c398f423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:bc:33:8b:ff:23:ee:f8:5a:59:d8:1f:7b:
                    86:9b:01:e4:f9:be:d9:e0:f9:a8:93:f2:95:d2:2f:
                    c5:36:7d:9e:12:c6:e8:fd:01:b5:08:bd:0b:c3:15:
                    40:a5:49:4f:43:7a:8f:d3:94:b2:11:6d:87:4f:d6:
                    a0:bf:5a:f4:a3:53:4e:68:be:20:c2:44:08:30:f5:
                    32:76:12:8e:3d:70:c7:0e:9d:8e:fc:8c:cc:ed:ca:
                    86:93:0a:fe:39:43:77:8b:17:19:32:56:0e:89:17:
                    3c:9d:28:a4:9c:4c:4f:c2:da:2b:fd:d2:ae:af:9f:
                    b7:da:e3:4c:09:2b:cc:8c:b9:7b:9d:8e:1d:14:7d:
                    9b:a2:c0:83:96:57:3f:e6:9d:67:1c:38:a8:ad:bd:
                    85:70:82:20:94:19:0e:2e:19:ef:97:06:27:2e:22:
                    ff:7d:f7:5a:11:8a:87:a0:a4:5f:64:5e:25:11:89:
                    a1:ac:ac:cc:fa:93:8c:15:ed:3a:82:2d:ed:11:5f:
                    74:d8:5f:c8:6b:a5:41:d0:28:ab:9a:ca:57:53:66:
                    b9:10:2c:5c:05:d7:00:a2:91:d4:68:2f:75:55:f6:
                    28:6d:c5:d6:b3:25:99:df:f1:56:cd:dd:1a:16:36:
                    ef:43:59:42:67:62:e7:1c:94:ce:fa:23:1b:5d:ad:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:7E:1D:29:3C:FE:38:EE:D9:D6:14:8E:3A:D7:DB:58:A0:AF:09
            X509v3 Authority Key Identifier:
                keyid:09:FD:6B:2D:7A:07:AC:0F:83:31:08:2F:26:FB:BE:AD:4E:BD:30:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/6441e3b3a19ae38ef79314df43899627c398f423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:72:12:58:10:5d:56:c1:2c:e8:12:73:81:2e:e2:21:57:50:
         60:c8:18:51:11:22:03:ac:37:eb:28:4d:12:c7:71:8d:60:fa:
         86:09:d6:d7:e2:b6:28:ad:7b:b2:24:f1:ab:52:d9:f0:19:01:
         77:44:cd:47:3a:bb:81:91:e2:49:fb:08:fb:cf:83:56:50:be:
         e1:89:54:5d:26:19:6e:d9:81:7c:86:91:a6:af:f1:bc:e5:b0:
         f8:ca:cc:fb:a8:7e:b2:6d:07:92:56:57:54:b5:88:4d:33:ac:
         3b:09:a7:cc:ac:a8:b7:d1:cd:03:a6:f5:ca:d0:a4:34:b4:63:
         55:d0:52:51:04:ca:2b:11:c8:2b:2a:0b:0a:dc:98:c8:d5:f4:
         03:b0:8c:95:8e:98:8b:68:07:0a:f0:ff:13:76:c8:92:f3:89:
         78:08:0d:f1:56:3a:78:f1:2f:36:92:96:e9:31:97:73:60:3e:
         bb:46:f5:84:f7:96:db:2c:9a:3c:db:22:50:1d:f9:f0:a4:f6:
         e4:59:b9:0a:db:c8:e1:4a:7b:ae:43:e9:78:7a:88:0a:21:f7:
         58:f6:be:87:87:32:01:b7:16:5f:c1:6a:c2:e7:52:68:1a:80:
         f5:20:5d:1a:2c:8d:45:28:9c:dc:be:29:f1:57:b8:b8:79:04:
         83:63:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org