Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/472114aa383984730742091c65a4b32b88f2642c.roa
File:                     472114aa383984730742091c65a4b32b88f2642c.roa (raw, json)
Hash identifier:          JuFZf42WFvm/AggyxY/IMd+8Al54HYDJrIKlKe+dEdU=
Subject key identifier:   00:F2:BE:21:78:50:F8:AF:49:FF:F2:72:EE:F1:85:61:EA:37:23:83
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       19B95B
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/472114aa383984730742091c65a4b32b88f2642c.roa
Signing time:             Thu 04 Aug 2022 16:05:57 +0000
ROA not before:           Thu 03 Feb 2022 03:00:00 +0000
ROA not after:            Tue 03 Feb 2026 03:00:00 +0000
asID:                     272056
IP address blocks:        192.141.167.0/24 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685851 (0x19b95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: Feb  3 03:00:00 2022 GMT
            Not After : Feb  3 03:00:00 2026 GMT
        Subject: CN=472114aa383984730742091c65a4b32b88f2642c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:a6:42:9c:f0:b2:e2:7f:45:f7:62:e4:83:
                    f5:a5:51:af:ba:18:f1:76:79:9c:a8:d4:da:1b:ac:
                    50:3e:d8:7a:da:79:15:f7:9a:0b:4c:71:55:64:ba:
                    24:cc:91:35:78:8a:5d:41:56:f8:ff:29:38:86:b3:
                    c2:df:de:2e:32:ec:8d:ac:92:b5:ef:4c:58:ba:c2:
                    dc:a7:f2:14:93:6f:ba:f9:b5:dd:b4:3f:b9:7e:b1:
                    6a:f9:4a:d9:1f:bd:0d:3a:59:41:3b:39:f5:38:64:
                    af:85:66:e9:60:f8:89:4e:e8:12:20:ec:3a:8d:0f:
                    e0:0d:0f:9b:b2:f7:a5:63:85:c8:fd:2a:f2:fc:f0:
                    6d:b7:b6:49:41:e7:f0:3d:f1:71:1f:94:4e:d1:94:
                    0b:d7:81:65:36:60:a9:1b:33:2a:50:26:cb:58:7b:
                    51:fa:8f:24:21:2c:5c:d8:c7:7d:40:c4:86:39:3d:
                    87:76:eb:fa:f4:a7:d4:cd:02:68:48:c8:1a:7c:56:
                    70:7f:e5:d3:8a:01:a9:a5:3f:11:3a:e3:be:96:0c:
                    d7:86:bb:e6:70:d6:ea:73:99:a4:cd:5b:82:bb:15:
                    78:57:30:36:67:ec:50:10:fc:db:70:0b:53:cf:71:
                    d5:09:99:1d:57:b1:bc:af:15:6c:83:44:71:bf:92:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F2:BE:21:78:50:F8:AF:49:FF:F2:72:EE:F1:85:61:EA:37:23:83
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/472114aa383984730742091c65a4b32b88f2642c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:68:bf:88:ad:3c:3a:51:b3:9b:b5:a1:5b:fa:9c:75:1a:
         cc:da:e3:66:fc:76:f5:78:98:fa:81:c7:23:c1:6a:ef:85:fd:
         95:5d:15:7c:43:fa:fd:09:0b:e4:41:63:5a:a4:5a:a0:c6:d8:
         16:60:26:ae:e3:78:11:77:a6:6a:0d:a0:5b:e6:23:a9:91:5d:
         34:52:2a:9e:4d:dd:71:f0:b8:ab:10:9d:a4:d7:4c:cc:d9:d0:
         5e:fb:96:60:1d:c5:19:eb:9e:f4:78:ff:2c:50:0c:95:c7:5f:
         28:21:61:83:0b:86:8e:27:d4:98:3f:f7:b6:fe:db:7d:5c:aa:
         7e:1d:b9:fe:36:2b:9a:ad:c7:c5:36:3b:1c:7c:f6:16:fa:e2:
         7c:40:73:e2:85:48:db:60:98:a2:88:8d:1f:72:bf:a9:9a:0b:
         73:fb:cf:a2:1f:a1:5e:ae:18:bc:90:30:0b:a4:e0:14:15:18:
         e0:5a:78:31:bb:f7:25:b7:62:d6:26:52:4d:77:40:c6:1e:92:
         3e:61:e3:c4:98:86:29:2b:40:23:55:29:0b:e1:94:3c:ee:94:
         bb:34:bb:d0:89:59:58:27:c1:14:8f:97:9d:4b:b9:2f:73:b7:
         bd:8d:47:cc:6b:d0:5b:84:8d:bf:ed:9d:9f:f6:96:de:18:32:
         5f:91:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org