Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/505a1692f6fe9936eaee3ea5f7cff582ed41339b.roa
File:                     505a1692f6fe9936eaee3ea5f7cff582ed41339b.roa (raw, json)
Hash identifier:          e61+RD7eQ4qdYogDixf0wygsaWEf4i9kPKwvqf7V00A=
Subject key identifier:   89:C2:43:0C:A5:4E:1C:7D:93:53:F6:39:3A:97:55:72:04:51:B6:D0
Certificate issuer:       /CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
Certificate serial:       2361DA
Authority key identifier: CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/505a1692f6fe9936eaee3ea5f7cff582ed41339b.roa
Signing time:             Mon 21 Aug 2023 00:35:35 +0000
ROA not before:           Sun 20 Aug 2023 00:35:34 +0000
ROA not after:            Thu 21 Aug 2025 00:35:34 +0000
asID:                     60503
IP address blocks:        160.238.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318810 (0x2361da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
        Validity
            Not Before: Aug 20 00:35:34 2023 GMT
            Not After : Aug 21 00:35:34 2025 GMT
        Subject: CN=505a1692f6fe9936eaee3ea5f7cff582ed41339b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:e2:75:d9:17:9d:ff:25:f3:a2:04:c4:12:
                    92:91:43:62:27:02:df:7c:6a:08:2b:e8:3b:14:1e:
                    1f:11:1e:12:13:03:ea:10:66:6a:35:51:f7:04:08:
                    b7:89:d4:6a:cf:aa:66:23:a6:60:f0:ef:fc:35:95:
                    e7:f1:48:01:9b:47:10:e1:ee:c7:78:a0:89:ee:39:
                    af:68:b2:4f:02:5d:d0:ea:e0:40:78:df:a5:30:66:
                    a4:08:cd:2f:bc:0f:0e:8f:6b:ef:0b:f4:9c:68:e3:
                    d7:85:99:3f:10:a8:6d:9e:64:d8:9d:bb:1b:80:d7:
                    fe:df:0b:24:00:ec:7d:1c:24:75:6b:af:60:ff:d2:
                    95:b7:cf:73:d5:83:e1:f2:81:60:f1:f2:2c:6e:39:
                    c6:ca:da:17:68:94:b7:c8:7e:16:71:f2:ad:cb:06:
                    35:dd:b4:95:f6:82:0d:e4:3c:4a:84:60:d8:c4:98:
                    2a:d8:10:ef:24:60:eb:15:4f:f5:f2:74:61:43:d2:
                    aa:89:13:c4:81:ad:b2:b8:5b:67:4c:e3:f4:c1:a1:
                    3d:57:15:ce:af:67:39:71:6b:cb:62:d4:e0:62:91:
                    28:ee:21:ea:16:83:41:af:c3:2e:9c:69:42:56:94:
                    c6:c8:7c:2c:7e:38:a4:6d:be:31:0d:15:2d:a4:8f:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C2:43:0C:A5:4E:1C:7D:93:53:F6:39:3A:97:55:72:04:51:B6:D0
            X509v3 Authority Key Identifier:
                keyid:CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/505a1692f6fe9936eaee3ea5f7cff582ed41339b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/42479c80014a47a7803e1ff86f78d4c83197ce2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:e3:a3:b7:8f:ed:8e:f2:dc:bd:bd:cc:2e:8e:02:c7:cc:
         5b:9c:59:27:3d:04:f8:70:dd:87:3a:96:0c:14:61:53:60:97:
         31:e3:0b:6e:0e:f5:77:47:3c:a8:c8:c9:05:8b:f4:f8:b6:f5:
         fb:06:34:b9:74:1b:f8:d8:34:32:bd:ed:0c:15:a0:a6:8f:0e:
         0f:c8:ed:67:e3:26:a2:e3:a8:58:9c:80:44:1f:f6:ab:8c:8f:
         d4:8d:e3:ab:1b:cc:7c:46:a6:98:70:b8:f9:6e:a6:d9:ac:c5:
         5a:a5:74:f4:1b:84:55:3e:a5:aa:33:fe:35:75:c0:e8:5c:7b:
         3c:79:66:2a:c8:98:c3:5a:a6:cf:cf:de:df:64:a6:bd:33:3a:
         a2:7d:66:79:ab:36:c9:24:cf:c1:f9:6b:7c:d6:d6:0c:6c:d7:
         b7:9f:7c:f9:78:8c:5b:70:44:73:d3:35:d0:84:11:ce:dd:42:
         cd:a2:4a:d8:3b:19:61:b1:25:36:18:4a:a0:04:73:f1:1c:83:
         7b:38:1c:40:ca:08:d3:19:78:ae:f6:bb:42:c4:23:ef:3b:c7:
         db:ff:89:a5:38:c3:16:c8:15:05:56:7e:0c:77:b7:43:8e:6c:
         1b:60:29:c8:cc:ce:3a:31:91:4e:66:a6:69:df:a2:86:14:f4:
         2a:e7:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org