Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/9adb3b1d4ce4a4fa145fd4e8cbe1abe7dd4560b1.roa
File:                     9adb3b1d4ce4a4fa145fd4e8cbe1abe7dd4560b1.roa (raw, json)
Hash identifier:          sSShKeBKS/dcPjpeC2ilavZJDBl0TQRlQraCDF9Hqqk=
Subject key identifier:   8B:0E:7D:0A:AA:01:A7:D2:89:F1:63:31:2F:D6:4A:75:6A:10:3E:12
Certificate issuer:       /CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
Certificate serial:       1F4314
Authority key identifier: C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/9adb3b1d4ce4a4fa145fd4e8cbe1abe7dd4560b1.roa
Signing time:             Fri 24 Mar 2023 08:30:30 +0000
ROA not before:           Thu 23 Mar 2023 08:30:30 +0000
ROA not after:            Sat 22 Mar 2025 08:30:30 +0000
asID:                     264773
IP address blocks:        168.197.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048788 (0x1f4314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
        Validity
            Not Before: Mar 23 08:30:30 2023 GMT
            Not After : Mar 22 08:30:30 2025 GMT
        Subject: CN=9adb3b1d4ce4a4fa145fd4e8cbe1abe7dd4560b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:27:28:05:20:6f:37:fa:a7:ed:b3:90:f7:
                    22:c7:a1:9e:c4:76:cc:db:3e:31:81:58:68:c3:40:
                    2b:25:9c:a9:95:52:be:dc:fb:d8:e3:f7:02:59:44:
                    56:d6:75:9c:10:29:9e:5f:a6:38:3a:e7:e5:1b:6a:
                    41:37:bc:f7:59:5b:15:32:4b:15:d5:b1:76:d9:80:
                    11:38:0c:fd:d1:20:62:4b:f1:7a:78:1f:b9:87:e9:
                    a5:40:9a:55:e9:9e:9b:50:fb:ad:f6:4a:02:72:14:
                    68:86:ba:bb:06:aa:d3:3c:61:da:97:55:c4:98:29:
                    a2:da:d5:16:60:58:0f:8b:a4:31:c9:c5:de:80:42:
                    23:ae:dc:16:9a:a5:32:01:bb:9c:04:82:14:fe:7a:
                    20:e1:e0:4a:99:cd:d6:0a:58:f9:fe:65:1d:2a:13:
                    b4:28:b1:f8:3e:92:f6:43:a5:d7:12:bb:6e:06:44:
                    93:08:52:3e:b3:8c:d0:dc:6d:78:74:cc:9c:72:71:
                    ac:4f:57:39:bd:a9:2c:5a:c6:de:07:36:29:59:ce:
                    50:df:ef:95:00:a6:1c:72:68:7b:bb:a0:49:a9:b9:
                    94:45:ca:ea:8d:56:18:5d:67:e2:51:4f:f8:a2:be:
                    6b:3f:07:84:70:c3:bf:37:74:9e:55:14:a3:c3:96:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0E:7D:0A:AA:01:A7:D2:89:F1:63:31:2F:D6:4A:75:6A:10:3E:12
            X509v3 Authority Key Identifier:
                keyid:C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/9adb3b1d4ce4a4fa145fd4e8cbe1abe7dd4560b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:98:4b:94:28:6e:c6:f0:da:53:2b:8c:24:7a:30:67:ce:15:
         a9:13:b1:d1:57:f7:f2:2b:d7:cc:a1:a3:61:24:b0:60:f4:d6:
         d5:89:e5:5d:55:f4:15:a7:3f:49:4f:57:6d:29:79:67:54:02:
         44:28:a1:b0:91:61:e1:51:a2:1f:7d:b4:26:e5:2b:1f:86:c0:
         fe:85:50:9c:af:db:35:7c:fa:bf:2d:4c:60:23:34:be:39:69:
         4b:83:cb:ee:04:78:d4:31:13:c1:cc:c1:c2:4d:00:96:37:31:
         6d:ef:90:70:bc:2f:47:4d:76:fa:af:0a:fb:73:40:d9:8d:cb:
         db:c0:df:76:93:a1:d1:af:d3:b8:fd:f3:17:10:11:4b:02:af:
         d8:a3:97:04:80:63:3b:f9:7c:c6:57:e5:ca:e5:03:25:68:9e:
         8a:fc:7b:c5:9f:42:8b:0a:b7:4a:97:86:a3:7c:8d:75:ef:a3:
         88:84:40:c1:db:92:91:7d:b1:3d:89:5f:d8:bf:53:e1:76:6d:
         a3:75:ae:54:40:9d:d4:78:d3:85:0f:c5:f3:ae:a7:9a:b8:d0:
         9a:bc:28:72:99:54:f5:74:94:db:2d:1e:87:27:2f:6f:df:b3:
         80:51:97:9e:d4:42:5e:35:8d:b0:e3:04:4e:cc:2d:cb:ba:58:
         c9:5c:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org