Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/eccf8e44e488865015ae0379b640f84af66184b2.roa
File:                     eccf8e44e488865015ae0379b640f84af66184b2.roa (raw, json)
Hash identifier:          Pwyu6ZgovdkCwGL0VBNWbZf0+HeyW6DDO65frXYpbHQ=
Subject key identifier:   EF:F9:17:E7:6A:88:DA:A5:20:33:B1:4B:04:79:40:E7:CA:2D:13:B3
Certificate issuer:       /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial:       11E9E2
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/eccf8e44e488865015ae0379b640f84af66184b2.roa
Signing time:             Tue 07 Nov 2023 07:30:05 +0000
ROA not before:           Tue 07 Nov 2023 07:30:05 +0000
ROA not after:            Thu 06 Nov 2025 07:30:05 +0000
asID:                     265504
IP address blocks:        168.0.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173986 (0x11e9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
        Validity
            Not Before: Nov  7 07:30:05 2023 GMT
            Not After : Nov  6 07:30:05 2025 GMT
        Subject: CN=eccf8e44e488865015ae0379b640f84af66184b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:dc:1a:04:7b:0b:d0:23:76:11:e3:40:4e:
                    d5:19:c5:0a:2c:cd:8e:bb:ef:90:db:6b:86:48:e9:
                    f5:87:ec:ec:31:a4:bc:84:24:79:4d:a9:bb:bd:4c:
                    a7:0a:b4:e5:e5:1e:30:2e:3a:57:32:65:eb:a8:59:
                    3c:a0:9e:7d:7c:54:2f:32:49:a6:6d:62:5a:de:40:
                    69:ce:f5:4b:5c:50:1e:37:73:79:61:c0:aa:d0:f9:
                    b8:49:9e:77:a3:4b:ad:3f:8f:52:de:b3:a2:3d:73:
                    c3:55:97:f4:3e:91:4a:7e:d0:90:81:29:a4:1c:37:
                    c6:45:e9:02:0c:1c:5a:07:b6:64:46:04:21:f5:44:
                    23:f9:bf:ac:fb:56:b6:aa:f2:0c:1a:b3:e1:15:81:
                    32:38:96:70:0b:6b:7a:d4:a1:e0:59:f4:43:18:e0:
                    38:6d:5a:cd:73:34:38:54:f3:dd:f4:d4:77:f1:9e:
                    eb:cf:af:a5:11:c9:58:c1:72:d3:52:70:75:0a:a3:
                    0f:af:0f:f0:01:ae:bd:e0:7f:18:67:6a:95:9a:66:
                    32:2e:d1:61:bc:4e:9c:84:c6:91:8d:89:dc:22:f1:
                    bc:f8:f0:76:03:dd:cd:c7:43:e9:6f:50:28:12:16:
                    12:a3:b7:13:5b:21:c1:a2:1c:b4:eb:66:41:c8:67:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:17:E7:6A:88:DA:A5:20:33:B1:4B:04:79:40:E7:CA:2D:13:B3
            X509v3 Authority Key Identifier:
                keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/eccf8e44e488865015ae0379b640f84af66184b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:75:59:00:6d:bd:91:7f:4b:77:39:fe:87:da:bd:11:df:ed:
         45:eb:17:82:e9:7d:2c:f1:8a:c3:7f:d3:7d:38:7c:27:b3:4c:
         bc:5a:75:f6:2d:fa:ff:54:d0:bc:1a:8f:99:ab:18:cb:2b:d3:
         b8:52:ae:a5:88:d5:00:64:0f:f3:f2:5b:4b:ed:57:b4:7c:89:
         0f:6e:65:f0:f0:72:b4:e3:5f:de:7d:a2:fe:56:d7:42:56:72:
         0c:f2:db:02:1a:40:21:03:4e:d2:c0:30:10:68:aa:11:1c:f2:
         0a:d3:5f:75:86:51:82:ef:92:21:cd:13:66:2c:21:17:1a:6f:
         8a:62:b0:3b:da:e1:c1:25:14:e3:48:aa:38:37:4d:a6:3d:a6:
         cb:bb:dc:44:5a:62:5f:a2:19:8c:fe:9a:fc:56:a3:30:2f:ef:
         1b:0f:55:ca:3b:d4:0d:79:8d:a4:4b:e1:17:76:70:9e:4f:f2:
         95:78:31:ee:ed:a8:34:e3:54:07:5c:26:8a:e7:0f:26:1a:10:
         25:92:f7:ce:59:ea:a5:20:b0:ac:33:af:41:79:d2:28:a5:4e:
         59:28:76:38:04:e0:1f:b3:08:c3:90:86:99:e7:40:02:81:6b:
         bf:54:28:d3:62:03:1e:51:39:cd:11:a9:e6:c4:a3:7e:33:27:
         39:ac:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org