Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/c7bca9fce9b4df38b1bd281b206cf73e400cffef.roa
File:                     c7bca9fce9b4df38b1bd281b206cf73e400cffef.roa (raw, json)
Hash identifier:          qM8DOGFOLP/SBJZeYeqHP8Snq1mL7WpIHYUUgWZu8lM=
Subject key identifier:   05:0E:3A:76:AB:1C:61:A8:D0:0E:74:E5:37:BD:19:AF:03:14:BE:BA
Certificate issuer:       /CN=428f4bd526001b3f547ef3eecec9c54ff3efb3fb
Certificate serial:       098657
Authority key identifier: 09:FD:6B:2D:7A:07:AC:0F:83:31:08:2F:26:FB:BE:AD:4E:BD:30:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/c7bca9fce9b4df38b1bd281b206cf73e400cffef.roa
Signing time:             Fri 15 Jul 2022 02:11:58 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Sun 14 Jul 2024 03:00:00 +0000
asID:                     265834
IP address blocks:        164.163.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624215 (0x98657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428f4bd526001b3f547ef3eecec9c54ff3efb3fb
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2024 GMT
        Subject: CN=c7bca9fce9b4df38b1bd281b206cf73e400cffef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:ab:f0:f6:56:96:82:7a:7a:ad:a2:70:84:
                    b3:09:a2:cc:44:7d:cc:dc:e0:c0:ef:12:a9:71:9e:
                    32:b3:01:82:9b:e0:e4:eb:30:56:e1:aa:30:1b:d4:
                    ef:f0:7e:3b:39:7e:b2:7a:72:5e:25:3a:58:76:40:
                    9c:45:e8:7b:3e:90:ea:9e:2e:30:c5:e6:cc:09:d4:
                    70:a3:8d:aa:b3:da:4a:d5:d3:79:f3:fd:af:a5:b8:
                    58:8c:7c:a2:48:8b:d5:b8:5c:b7:37:60:00:7e:5d:
                    0d:02:99:2f:a8:c8:32:2a:53:58:2a:fc:12:68:9b:
                    48:be:0b:23:df:5e:8b:d6:db:d6:fa:3d:1c:7b:92:
                    8a:29:8d:f6:33:86:26:80:e4:74:c4:bc:9c:a8:19:
                    ea:8e:a7:54:80:4e:3f:52:4e:a9:78:c4:7d:7a:fd:
                    d1:c5:9d:20:da:17:55:fe:de:3f:3a:e5:01:1d:2a:
                    a5:00:28:1f:fb:e4:38:28:d7:38:a7:2b:bd:a3:74:
                    cb:9c:0e:31:6b:4d:59:e0:51:bc:2a:51:76:bf:a8:
                    7c:89:3b:a9:9b:4f:5d:5b:59:4b:4c:5c:9d:55:a7:
                    bf:f4:c6:98:f6:6d:18:d0:3e:17:49:01:cd:3f:4d:
                    fb:8a:d6:6b:18:ca:32:f0:63:ca:64:b9:dd:67:5c:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0E:3A:76:AB:1C:61:A8:D0:0E:74:E5:37:BD:19:AF:03:14:BE:BA
            X509v3 Authority Key Identifier:
                keyid:09:FD:6B:2D:7A:07:AC:0F:83:31:08:2F:26:FB:BE:AD:4E:BD:30:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/c7bca9fce9b4df38b1bd281b206cf73e400cffef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5cca6359-1eb4-4c78-bd1c-87392d48e7b2/428f4bd526001b3f547ef3eecec9c54ff3efb3fb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:b0:34:43:7c:1c:6f:96:af:33:23:ac:df:75:68:04:ca:8f:
         03:6b:83:a4:99:a1:c1:3a:18:e0:b4:79:4e:79:3d:58:b5:5e:
         0a:1b:c7:a5:ee:e7:e1:3e:ab:0d:bd:ea:df:47:d4:21:00:6c:
         16:e5:56:14:45:c0:43:33:13:3f:c5:3e:04:20:59:79:54:6f:
         c2:fd:37:58:55:b1:45:f4:d5:5b:47:fc:89:84:f1:d7:60:16:
         08:60:7f:6d:92:b6:c4:4f:75:6c:b7:17:5c:db:15:d4:ef:61:
         a5:54:11:e6:0b:aa:fd:84:17:f1:d5:f7:b5:ee:ed:d2:b1:76:
         2e:1f:14:af:c6:02:d0:d7:24:d2:9b:69:f2:18:76:9d:5b:76:
         56:5c:5f:e6:55:45:88:c4:c8:72:52:15:06:e8:ee:37:ec:5a:
         17:2d:e9:86:0c:b2:f5:b1:29:fd:c9:c7:75:f5:df:e0:0b:98:
         8a:34:fd:a6:43:62:95:2b:e8:97:5f:3b:ec:47:6a:07:0d:b9:
         c6:20:b6:09:23:d9:95:4f:40:e3:79:b7:c8:f0:01:37:12:45:
         95:1f:81:1e:84:b7:0d:76:cb:d6:f9:97:a3:f5:f6:99:1e:9d:
         72:b1:19:4f:1d:6d:03:ba:c4:c8:fc:8e:66:60:d1:d8:14:f9:
         12:0a:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org