Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/0ae00d1e5d12e1a57cf640b3867d295a26b6ae82.roa
File:                     0ae00d1e5d12e1a57cf640b3867d295a26b6ae82.roa (raw, json)
Hash identifier:          dHgcLrKj5N5lwC+DXVZ1Rqb39Fcco6uhNqCMNn8Yvek=
Subject key identifier:   57:1E:E1:3A:CD:65:DE:A7:CC:37:C2:CD:F0:EE:6B:62:C0:90:1B:A0
Certificate issuer:       /CN=4393f7432846896d18bc47956f7dce0ffc072b54
Certificate serial:       0C28C8
Authority key identifier: C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/0ae00d1e5d12e1a57cf640b3867d295a26b6ae82.roa
Signing time:             Wed 24 Mar 2021 14:45:29 +0000
ROA not before:           Wed 24 Mar 2021 14:45:29 +0000
ROA not after:            Tue 24 Mar 2026 14:45:29 +0000
asID:                     137951
IP address blocks:        131.221.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796872 (0xc28c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4393f7432846896d18bc47956f7dce0ffc072b54
        Validity
            Not Before: Mar 24 14:45:29 2021 GMT
            Not After : Mar 24 14:45:29 2026 GMT
        Subject: CN=0ae00d1e5d12e1a57cf640b3867d295a26b6ae82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:70:a3:0c:6e:db:f6:a1:c0:f2:c6:1d:2f:
                    da:04:f6:6c:19:ec:ab:dd:c8:70:0c:f6:ab:29:d1:
                    0b:b1:3e:0c:4d:39:e5:d1:8e:8a:a8:2b:f5:cb:d7:
                    4c:5b:4d:cb:67:5d:5a:5f:6e:fd:6e:3d:36:ed:eb:
                    7b:58:60:87:47:31:df:45:f2:69:d4:71:bb:dd:d8:
                    29:14:4f:51:6c:93:4b:6e:e6:30:8f:cd:48:61:ae:
                    8c:41:81:39:f8:c8:bd:10:ba:72:d6:f9:e4:90:cf:
                    b2:de:0e:24:4a:40:60:e5:cc:79:d1:c6:fc:10:fb:
                    a6:38:fd:72:64:6e:cc:74:0d:ec:a7:fa:be:bb:5a:
                    7a:c2:ef:08:63:4f:d5:f3:ac:32:43:96:66:dc:e1:
                    2e:0b:11:4f:3a:f6:71:57:cd:62:c7:fd:36:9b:34:
                    2e:76:a9:39:2e:01:05:e7:bf:0b:f2:db:dc:ea:47:
                    04:03:fd:c1:e6:77:1c:df:7a:4b:42:d6:8b:d2:3e:
                    23:3e:57:68:8e:3e:6c:52:4e:d4:79:85:27:68:0b:
                    bf:ce:7d:03:f2:e1:48:c8:8a:0d:a4:83:1a:fc:25:
                    aa:49:a2:f9:45:92:24:29:7b:27:6d:b3:b9:d7:ad:
                    40:db:86:49:fd:ce:1a:71:52:34:7d:f5:d2:69:15:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1E:E1:3A:CD:65:DE:A7:CC:37:C2:CD:F0:EE:6B:62:C0:90:1B:A0
            X509v3 Authority Key Identifier:
                keyid:C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/0ae00d1e5d12e1a57cf640b3867d295a26b6ae82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4393f7432846896d18bc47956f7dce0ffc072b54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:78:dd:58:e1:3c:27:d2:54:75:2e:05:c7:7d:ac:25:d4:02:
         06:ae:0a:88:84:e5:dc:78:f8:ad:fc:dd:2c:3f:e2:68:33:c4:
         ad:f1:07:5a:42:6e:f9:97:9e:bf:0c:5b:e3:90:19:01:2b:a3:
         f6:95:82:5c:d2:68:9c:8d:ff:4c:64:fd:d6:4e:52:15:72:33:
         c5:82:52:13:91:38:08:9f:63:9a:ff:df:05:54:53:0c:22:0e:
         fa:2a:68:17:6a:c6:30:c3:75:51:6e:28:08:2e:09:64:43:93:
         14:f8:ae:8e:0d:34:d7:3a:6f:8f:e8:3a:1c:51:68:12:dc:cd:
         ad:42:92:ce:4f:63:13:e7:9a:fd:fc:e6:b4:21:f6:9f:4c:33:
         a4:3d:fe:8b:83:31:c9:fb:e6:31:68:3a:26:fa:0d:8a:aa:ab:
         eb:f5:09:93:7b:4e:66:9e:da:c2:81:75:61:73:ee:ab:3e:b6:
         18:42:cb:b3:71:69:46:c3:db:bd:95:1e:ba:60:93:d3:a8:61:
         70:03:a1:26:ee:ae:48:dd:20:7e:0d:a0:f1:bb:ba:55:e6:3e:
         f9:91:42:55:1c:fc:04:bb:bd:bb:75:66:ab:c1:65:2b:dd:c2:
         8b:b1:59:40:6f:e3:1a:2f:6a:bf:70:93:1f:5c:cf:ef:c6:73:
         89:b8:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-ams.rpki-client.org